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", 0x1000, 0xd8a4, 0x0, 0x1}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x12, 0x1, @thr={&(0x7f0000000080)="80398f3e1b07ca972a049198d9363e6ee3915a2b8cf075cd0438fcc91b4ca1436f1aff51b04560f7eafe8b61e96f443d44853d39dd42faac1f2c7f", &(0x7f0000000a80)="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"}}, &(0x7f0000000140)=0x0) timer_settime(r7, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) 08:29:58 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x0, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:29:58 executing program 1 (fault-call:9 fault-nth:62): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:29:58 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000001f00)='./file0\x00', 0x800) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @empty, 0x2}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)="581643062a7fa02f06198fff2fd4edb6eba5884395fab7641151de2cde5bdc62f19c0bce47f92bfc1ac36c728dc0df59", 0x30}, {&(0x7f0000000200)="657584233d4390aefede85c96227f874120a689510acc52f97e8dad1da6fc991ff259560e51292a09c5feb2acb0db7f7e250378347ca74c39e2663bb1b8d2cefe3d8b8858c7ce95268b7cb22b4d5cc2e79b24ad83946ec4bba06640e72407e4b98cf1d78429ba547b420554ba9cc5d923f694bdd5ba05a3f0f59979c7cee336a6ca090f8a5211f9a17e955c93c3ed090b2149dbf142bac", 0x97}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000002c0)="4a851645cf440649732eff91328213ec815e4fe4bfb94d5bbc8b615a711c0cb08827caa83d9e20e9a1ef17141bbcbe5329af6b8a962b17fbef30c92d8e578128a4a1fa31fb0542386f3b7ff68d0f2fa1ebb3c0f8c68f51b7294ceab0d07cf206c27e7362a25c28cc5cd2439323abb84c9ec698f86d5798b443deb00dc2686570ae079f1865a8ce53335654ad6dc8e2488fe3f5e8476a46125aa6b5028ab789bc13397837e0d592e5d13214c6ef3c0c2da34312bab28224ec2d5723841de8dfce3bef3b6f62073243154c8afe", 0xcc}, {&(0x7f0000000180)="5180f043500102", 0x7}, {&(0x7f00000003c0)="bf9756edd1fd53981b8357e82454b22dffbf3714fbd33e560521baf4b4", 0x1d}, {&(0x7f0000000440)="ddc48ebf5c24fe1544e8bb7cc6cb643c3c1efd286abf6dc57006df6537e2c120bd6591e4cca923ddf993dfa1c0410505", 0x30}], 0x7, &(0x7f0000002a40)=[{0x30, 0x11, 0x7, "f0067b4c6d2e239dc83c7444403f5b23fd06e1ff65740784aa0c"}, {0x100, 0x10e, 0xffffffc7, "66fc8ad7253e96ec50ada3a53d3cb3c8be60a208261337f30b01c1013d786d19790da69856c18558aec2a1cc42e5357f9e960262b2e442fc074480a3e56dbf4de6b6d206aecfcf712a082b444c091592a57c7e367d39b27f7c0dd68e85dd517dd480b157fa588e644efd57a091b89eb147e0598a6d084083bc7b59e3329b9fe78e81491e2be58798c13e420281785220d3350818bc02ab655b8b77702ca3003bce9f704b47d416180b9c82941fe6f954afe7bc17aee6921b4c6f1468786b7e6ffbfcdc0acd5e17d8a291453a7e69d2797a7cd9a2c1786249594ee28090fa3ccc972a275eb729416252f066"}, {0x1010, 0x10d, 0x2, "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"}, {0x50, 0x10f, 0xfff, "6b405f02cad27c643b106bd5f58b8c1488a973734fd06b1fda27a562fa9770e77a0f5334fdfabf8c7d4073d83b558af15325409968e4469599"}, {0x30, 0x6, 0x3, "499a1c78b8afae9def3639457af38e0e8b13ed296c15f1555d0f1a22cde28b"}], 0x11c0}}, {{&(0x7f0000001540)=@l2={0x1f, 0x9, @any, 0x1fc0, 0x1}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000003c00)="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", 0x1000}, {&(0x7f00000015c0)="fe27f628916e2d49e53fc6f1bc8933fcb77f3b1e9ffbc5f49971c98d119388728f8af91dc4eadbd0a12b6165758c776a0436500b4f543e7e1e457556882a3719883ae883e030b542cd76d1582a6ea63c03ead8908bafa8b380f5534a2d284071fe3d4ecacb84e429999ebba891f9330a62d4c51d51bf8fae851ce917e6cfcc05c73c713f9cfb54bea4116ae9024b521140dabb76d702efbb7bc172b56995b36558367068ecaad85efb10", 0xaa}, {&(0x7f0000001680)="766cef2587314fa9d3a4b17d4c1c9df441af5f1fca72153a80ed95d94f47dbd8b0f9f7f906fd30cd5303c2af946f327d040f724d33af64bd51c8d5c477d6c71e3c0c91475a3ed27f9f2f711b5197283825eb8df702d447b17de6d08d3d23471e30af1c09e5eac22431f5f7a9b2583deeb25b135ec3bfff06adbc69f6609ad6375f44a3feaa7c81fdc12b9437da22a35999644912a5943c8728fb13", 0x9b}, {&(0x7f0000001740)="6470fe3241cac3f47f0644d370b1d9046d398596a8979e08d0f466cd285ec78759e1ff11c12b1a29590e3e857d86f962c931ceec", 0x34}, {&(0x7f0000001780)="8db639f241691ee982b7df5c0874fffca20247654316aa6c12b3a6731a9bde0ac694", 0x22}, {&(0x7f00000017c0)="6865a0b85e8fd82aabdac5f0fdb1db20981996b2182a679f5554884296caaa2e2eb8b0c721e20602ee640ae0a40d16c9e4b380681865675ab7a8718c4440b045960389aa2c96a934af5558ccb47142054bef907bbd065e1df1f252d0df6ef5650336f39740ce57ec5e3f6538cdf7ccbd07971632418c53b9035d3ce8c88c4adf8414462578e4223d4be4a6dacd722a1a9253799a40323dec0c0482e9a4fab1dbaf36904a7f728e8a63e4d4218c4ec7d02a61633486724da83069c0eb85ee338db8b077cbc0f66c814d28d3bca7ccba5a679a275598ec6a72a04b2438ed44e90f26a8e75ed756a838f02a242ddc0a78715fae943f0b", 0xf5}], 0x6, &(0x7f0000001940)=[{0xa0, 0x10c, 0x1, "7bc43d214daf1e85b79b5144b7d0755db9eae686d04a28e92990bb819605ba37d53e43125e72022a19a593565a58b34ba1c7adf1ae0cca2ad64a7da062d46ef51d6a6a64b7789a9164e86347306cc057753f13c1490e8ce6c6c1b95f4aa0015b1acd1733734d437823a27ab313a6e24f52908c817eb70c29b27b724de5619756dff20bf1854bb20a5b6db61b"}, {0x20, 0x84, 0x0, "981e3b00df0a2a41b87d3e"}, {0x78, 0x2d, 0x6, "b91bd30934975d6784aa52b7226ab21653830fb6e42b366b08b5ba735280df11e7d2c355882350c734fe8cf8310d714bc8a635af707e4700ca8ab871baf24a96bf61b504068b6342e3f9af0913593f54a36685c7066d59ea91e8fdc2b7f547bc8e8890b711e0"}, {0x98, 0x112, 0x80000001, "9efa06138bb39a9f6f11fe524624b7cfdf8597c3779dcd59a70afa230bc6cdd891e3e3787eda08d110dd7e5357a558f9f7813c98d16010d4cfecebf4e952d6c373957fe2ba980e33f87ed3c8a1cbbaba6c24e1415f9217747393846c1c170956888917ca1418bff857734c3df32496a0ae6661251018c3af0e4cb2a3eae34b487cda24"}, {0x48, 0x84, 0x7f, "22c35fa92c59ea990d87db92bc5be69e87139fc63c2f749ac536a67125c8efff1b0f5a96683f7d908199dcb19d6585ebb445ee701b77ca"}, {0x30, 0x88, 0xadb3, "b5d74b4afd46fb1ed71eb84baf7cd430edc6766a6bfdb244c200402855b955bf"}], 0x248}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000004c00)="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", 0x1000}], 0x1, &(0x7f0000005c00)=[{0x78, 0x10b, 0x0, "b1dc708a0f72bb8cdaf988221ad9064514be150f26ebac141d579fa5061fb5adbb76b2983356de74a53c0ec63e534e77e3426f5a8452c6652b3e53696a6cdf8fa8dfde2ac650a74aef9f79e9171ce0a1d963d8948aeeee195f77646ed89bac3770bce334"}, {0x1010, 0x100, 0x200, "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"}, {0xd0, 0x1, 0x10000, "323ed4997ba61a7df19b333d2e8d9bab275e219983c2d343bf68447480dd89f4c637921c25fdd18881523cb311679d3f15932144031f378b27abf7132d36db905e0c04b6c8e59ac7ccfb7e197fae39511bcf8b6f01c95eb4fa3819f2375bd97db9f2912dae6d4ee2205840e3a62e3a9003660441da07f147130a8e2a542c014c8816a99e257a40ae42c4126bf8f726f5fc1e3d569acf7714818796cc9dcac6d86eb10f4fee5c25fecc9539a3e210aa2bab2f68a5932582be20aef3ae"}, {0x10, 0x10a, 0x398}, {0x48, 0x10b, 0x3, "f1e57c517b557fddca1d0aa89bab434eed2a35c489d52010fc3be35fb18e4751c48ff2f1333846a6aeb969baf0d123c6489bfc6de7c9"}, {0x60, 0x117, 0x200, "4eefe54a958489cf5cb95b5bec172423aa6181a4788bdf279ecf20533bceabe6847e0138d83b32769422557575b5b65a5d5d4263ff0cdd78bbd7225ddcf2af74eb6640da5289a274659a9343023e"}, {0x90, 0x110, 0x6, "de9964b587456a7c619aa8093559e82c13f54e6912c980754a7132e7dc4bd200d46d61498072e339916f1960057ec0c217b260f3eb80c3beedd705f536a5ee60ab33e76bba5db468bb8e91985b00d20a3e1997dcbd971f76f4ea203b7cc1151b2d762c889cbbd9c4ed342c23681d37cf0668f199009a6d615c"}, {0x68, 0x111, 0xffff, "1ed246028aa197927ba030836a25135108fb88c1a32b37438cdcce5a179e4375cd960de1adab9f60753a96b49374b191381ffbe414618f180559167fae7c0b882bb209231600a25239b9889b6fa206657fd629cefc13a1d2"}, {0x68, 0x2, 0x95, "875d77096132756d568f6957dc0d90b7300f10c1f1649cc25b93e4781589f60ec902d25f9b47a46b674dea1bfa45e86a4fca530be18b57cca0add598dddef07909db65cc6e4e363bc8d4593c15de1ffd6efc68cd2f"}, {0x38, 0x3a, 0x3, "dd4a3a28edd9fde80b21b79eaee9d83fa60145ce1dfee1fe7127673bfd2bcaa615411d79ff42313b"}], 0x13a8}}, {{&(0x7f0000001c00)=@ipx={0x4, 0xff, 0x3f162fa, "a4c23f156930", 0x7f}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c80)="36d0355eb1daaf15547bf79b210a7fc4d92bf291327e8b5bf91dd660973912aec4d38806239158c8d6e8831e9b4d5f6ae06de22263bf1a59bf597556e7ceaceb21b24e759ce74dfeea572a0fc81b02355a4881f9d9bd13", 0x57}, {&(0x7f0000001d00)="ee271bac6448614313a1d7ee952192ddb4c4bc4675b3ed60965f13e96b6cae0988c06cbd1588f1a1681eac9823269b69f28aefe64f23f436785ffe721fc9809741b12afeef3998eabc6934", 0x4b}, {&(0x7f0000001d80)="a861fdab262f14338f9e819463098fabcf6d181b2246cbe754ccfaa1bbe49fde741f67646dbb5fa7e442c06bb9f6933830c86274bc989922da779da7eaaf7fc27fb5157572c31efc7d6ef6952de156f0509099152213df67da672e7614636485baa42410c9bdfd99b337a33f9cca728bd3eb9a6e8f0b2bbb409a410ebea9aa13f8b5f69a4dcc653616e10b580d8c83f1c97055e57bbd8808b2acd39863f5557bb2dd2bbc587170447e9c537ff8070c6050f252b2d06c463a79e7245054f15c56c054", 0xc2}, {&(0x7f0000001e80)="c95804a9d77da956", 0x8}], 0x4, &(0x7f0000002080)=[{0x108, 0x114, 0x8, "baaddec26577f5dabb91e383bdb8da2a5bf1b91c3b298b1b401c59ecfaf0f634a67b8278d6a46f0db6802fa97ab8cb804044c6acea5ff51ece543a8f86f1401f56b1a474ca80106c2f73af07bfe1704bdac3a48e433b25188bcfb258d759edccac10350d0275c38794022191317701caf0a6834f7ced10b6f0de49ccff33db9d6c659196ae856fab122633c4e61d76024479b03c503e82a3af46c7676ce771f2dda4856be8716cd25dc2d5cb095785e7b0832b38a8ec4533964a9fe944556ceaf83a4f0af193c720a592beec614a48c81603157df59deb5aeb5a2859c9a714b4fb045aa81d61db488e73bd503020666b7857"}, {0x30, 0x104, 0x3, "771cd732dda13bae33382f36e998fd083b8872ae141d6df91c25d0"}, {0xb0, 0x29, 0x1, "f8d8071a2580b62a08375c225438772d7f3895c35def5d35d12d94f2dbfcde2118325bcd7c3ca9e28b9ab0437352d77e6a9b0fe07989982d9c30c490b082d86a875cc8b5dfa518a27bb5017bcc8f652bab8255d6830c0539bf0011cac962be3325868212254f0e61170d5eff8ed25d31d06e20427ef388c7356dfeab3bea71a4005d501ac45ee9081c01260e5029325e979b18a41839ce46195a6eede3ce23"}, {0xd0, 0x0, 0x40, "e6c2c4637f251ca5fa42246036c7a69d533cb2763e2a677a02af41106ab41726f27cdeb8f497cecd33f04d76b61d7fe90b71bba779360078f4440b693101469a518efee28beb2dbe9ffca9851b64568511ee3546467712c274cf03fc278914d0d4ed7cbea998ffe5676a17d368fa757e969b3b5dc7817194eb83b1d15a3e9a85989cb27a88788395a3804739598b5c42b50f650c845d2d0186d654452a101fee7c6bdbdec924a397f141fae534fc68b0f2710035e0ae2459f94590c38668"}, {0x110, 0x0, 0x5, "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"}, {0xa8, 0x105, 0x9f1, "b3fd5b56c5756bba35569fed1eb026a9fe4cea07a1172c93aae525b22bea18bf2c3bcdde62f4f14c9111447f30587f656ebcf0a610614982c5ea7b219b6dd98dd278765648aee2e44f95fcd5e71a3fa9454fd59bc31f90013632fd491ef2b56cf56837c7a63ce3f74c3f817c176e5b0d58582ad43796ce52f892a7cf786f09c493fad66c0fb4e9065d5069d1079420abc18fd14d"}, {0x88, 0x105, 0x9e00, "a4f482d0f576b1d6f7b8a17094a26e77d45a55a1960f90d1740d94b969c3c50f561859a481eab50e5602f5c84c67912aaba09f52597c4982c6b47758d29427dca587006e05f23db4cc192953680efc5b767b49a53e14d6889329d4455f1f63eaee254088b1af26ad2e6b67bafd032f3895f8093ffee33eca"}, {0xd0, 0x29, 0x1f, "ab6cfb06701529df1bb738b941bd16f02803857a168d7bcd1fae62a64642f7a61ee3c0b15ef442f64c420ca0eab0dcb6c0760418057edc50d99f1648ec2e66456fd4503442ee2ba92248524e6b712c87edcbc2590127158331d826f20ed962f795210f6f4740707020e1c61bce7efcf00de975b099cd1281cd8194ace6ea0ad804ab5c4fae4fbda14a346f3279c0e4dd698f7c0b92c6c6bef28538ca11fe0f13471014d03ff2f5ac4e50e871c5cf26595e738f7a977b1e531c1b691896703373"}, {0xc0, 0x111, 0x0, "ff3e4cb861e745142c4318aab9f0d9d2601dc1674255f3cfd6dc7a8b866a0988eb2cf43c4711e4978d86cc058d5d41da05c69a5bc20af598ccd6642960469e0b2bb8e7d88de10ad2c33c8b58a0ca6de99fcd35176041afe5757c9e05f9d45723d94cd4fb5b3a8ed5cc6476f3a73f52a308820ca5e53255ad95b43fae7c283be1412d7580d94b6b22003b4d021b667700aa4640b8023ecc6dfc1bd96696d273d7e9873b919f4d72b6bc7d48d5"}, {0x68, 0x31c, 0xc4, "6845b33de8213cd64dca4e051a4425d812daab16710c245fe6a6eb66a01f1fe8c7bdcf9863f6a2bb168983d90485ef83ba5f9d5bcb2d76c3307a249b433cad246ad08b10b2aab365ca4cf424dc2e2489d32ecf33c26937"}], 0x6f0}}, {{&(0x7f0000001f40)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @private=0xa010100}, 0x2, 0x0, 0x4, 0x2}}, 0x80, &(0x7f0000008180)=[{&(0x7f0000002780)="d4d8b9badcbe68e4c27d6461fd83220969fa3c87627a22e0d54aad4880f0e3b02b75e2edbef1b4bc2b354eefc9ff4084b76629715076e1371eafbaeb0456a92b4152e712a95533b581d67e2fca3238be3033681b718bcb5f2cf3171425d96a8e08f1fbd60ecc93ec016db131e2a32e911126820c3d31c4676d2b60461c42f8faef2140a7127c2351f80eb9cba9fb5b8cc3ca86d0c44a74a5d149d62e1b57bc3a6038e013f1adc40a2fb917b6761a8bae5fc11afa44e17e7958f806a78f189fd3c75b0947649e790bb5feff3900c3e34024ded2a2813beaa0e5a993a75fd43850c9f76124d1f187b4", 0xe8}, {&(0x7f0000002880)="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", 0xfa}, {&(0x7f0000001fc0)="5b4546ee738c4bfb80431bfc670e9fac1ea4fd0bc37308f0d967f2a0b2c479680417ba971bbc57a05a0b773ecfdb8e5063f5a3bac5a56269e31a3afc7198f8e9944f3e5837909afdee2e4c543e24a8df453533325f4888cb83581cf33f675c2379d4f0ac10de988e6f5392484f", 0x6d}, {&(0x7f0000006fc0)="395403893af24d6c31ca71ac448086ec083dbc20d64d2ed7c1d085f95930f9a069af7df7139ebb37341e8a642c3a4720041c326426f240a6ffdd82b246f090b6eb230477f7a74ac2174ffee66f415ecf6da710612795067900ab9ab95a7135614e330fe4ac4c77f19a1907d79deaf1108825a54ef8cd2968877e364e51d9f07582ec", 0x82}, {&(0x7f0000002980)="11972c20f91559eb0bd4b6708d3e7793f8832869dd7e26f71aacfcb7317361462fc7ab3461570da92c19ce65355a74254e2168b1f4613682303dd2610abe4aafbb8f1efb6353dbdd48e7434e622fa37da8e68748b6bdbc375c38dd9227f79e", 0x5f}, {&(0x7f0000007080)="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", 0x1000}, {&(0x7f0000008080)="eb7eedc1b575c941104cb0cea5f732a8c76a349302f558a5be3e1dad6c8294e60c7fa569369409b8235eff9a5047c9696ca7ddd78aa8d25cd6e715c5778f968afbc7e391ff90b672daf437f1139e159ca9bd8c1d40179ba05525b46c39102d520d983af8a275c053463d25d5d7f9b2f274a1c00a2a807562ef0ff0fc40f39e303166e00bdcd05eceeabc06aef1b220f55166c476111931ab630ae626244fcfb30be5fd033c66e0e1749e052212e0e619c0d7903e6675213eca19d98f43a488081d2734a378531c2ddc0d313679bf0b9e6e54984c0f8d1feaf2485f8d0de555e5b4d3706979564e729b9ae5d3220e81f2da", 0xf1}], 0x7}}, {{&(0x7f0000008200)=@l2={0x1f, 0x7f, @none, 0x400}, 0x80, &(0x7f000000a4c0)=[{&(0x7f0000008280)="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", 0x1000}, {&(0x7f0000009280)="95462c5179a0b25e1f4b827d75c39827158494515e37c9733974bc0ecab9555554d8b63fd034710222ef5bdba567159ad2f637d33d5103c2fd640b8235df8b19875f91e5c3611a711c49afa5ba0444077fcdb9d3cbaa33296d7f9fbf9407b4086f0e0ebbf97fc8bba023a633421b7fb897b4a5ea87ef4310ceb0d231cef963110c648d92d95ed09e305c6394539f08ebcbbbac13b5ddc140e2d31b48a841f9b37cdc8ee74cd9f120b453b93400af37a1cd482235261f1b95ded4f8635f450af7", 0xc0}, {&(0x7f0000009340)="e13a3cdba3ec9edd59b5252c2d561e4b0dabcb5783851dcc91a3b10e899d49e0a02ca70cda31fbfd43797c79099419953562ec550538c5d2e2f3c717219501595c5b25d56b21f3216d1effae3ee52db51251b236b73a53c5fae256c8674e28cab729edfe628811c8d9023d8e6bf2de0172dcbde9794cd006bb45e6a09abf58548621dc063f381e4c922b60779a498301b51c52", 0x93}, {&(0x7f0000009400)="a37c722e4015b5ec4139ac392f82f08ab02d18d1bdfbf2e0c5bb51fa6cb3e343ccc2293cbc976d985e64cb2e6727802eaa18982f9027870f0f574cfce26c01284f5e016741ddeba78536b940158dddd8608b0906fb75e08736e5936da3521b03caa7da2abe98c2fffab8d4c1d7a85e98016b538dbdcd0a52189197383ce999ac4bc7447ae5a72697d4e57e64964bdbb0ffd84dab7041cd6f39c41272d927c13bb8750d3bc9c7d5f3a6ee0957ef4a787d576f909e96fe98b705", 0xb9}, {&(0x7f00000094c0)="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", 0x1000}], 0x5}}], 0x6, 0x48011) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:29:58 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dedbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x77}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dedbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x77}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x80) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 210.661196][T10845] FAULT_INJECTION: forcing a failure. [ 210.661196][T10845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.675274][T10845] CPU: 1 PID: 10845 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 210.684131][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.694627][T10845] Call Trace: [ 210.698106][T10845] dump_stack_lvl+0xb7/0x103 [ 210.702852][T10845] dump_stack+0x11/0x1a 08:29:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000180)='./file0\x00', 0x202080, 0x198) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0), 0x48000, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r4) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) 08:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:29:58 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 210.707013][T10845] should_fail+0x23c/0x250 [ 210.711902][T10845] should_fail_usercopy+0x16/0x20 [ 210.717172][T10845] _copy_from_user+0x1c/0xd0 [ 210.721764][T10845] move_addr_to_kernel+0x7e/0x110 [ 210.727320][T10845] io_issue_sqe+0x2489/0x6870 [ 210.732226][T10845] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 210.738151][T10845] ? __list_del_entry_valid+0x54/0xc0 [ 210.743798][T10845] ? rmqueue_pcplist+0x145/0x1d0 [ 210.748814][T10845] ? mntput_no_expire+0x64/0x730 [ 210.753771][T10845] ? get_page_from_freelist+0x54e/0x820 [ 210.759499][T10845] ? fget_many+0x178/0x1a0 [ 210.763935][T10845] __io_queue_sqe+0xe7/0x360 [ 210.768932][T10845] io_submit_sqe+0x1695/0x3400 [ 210.774095][T10845] ? kmem_cache_alloc_bulk+0x289/0x340 [ 210.779924][T10845] io_submit_sqes+0x822/0xe50 [ 210.780011][T10845] __se_sys_io_uring_enter+0x1c7/0xa10 [ 210.780027][T10845] ? __fget_light+0x21b/0x260 [ 210.780043][T10845] ? fput+0x2d/0x130 08:29:58 executing program 1 (fault-call:9 fault-nth:63): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:29:58 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000000), 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 210.780062][T10845] __x64_sys_io_uring_enter+0x74/0x80 [ 210.780150][T10845] do_syscall_64+0x3d/0x90 [ 210.780168][T10845] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 210.780187][T10845] RIP: 0033:0x4665e9 [ 210.780200][T10845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 210.780216][T10845] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 210.780231][T10845] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 210.780242][T10845] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 210.780251][T10845] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 210.780261][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 210.780321][T10845] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 210.823786][T10871] FAULT_INJECTION: forcing a failure. [ 210.823786][T10871] name failslab, interval 1, probability 0, space 0, times 0 [ 210.910049][T10871] CPU: 0 PID: 10871 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 210.918892][T10871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.929154][T10871] Call Trace: [ 210.932538][T10871] dump_stack_lvl+0xb7/0x103 [ 210.937550][T10871] dump_stack+0x11/0x1a [ 210.941710][T10871] should_fail+0x23c/0x250 [ 210.946176][T10871] ? dst_alloc+0x108/0x300 [ 210.950881][T10871] __should_failslab+0x81/0x90 [ 210.955694][T10871] should_failslab+0x5/0x20 [ 210.960225][T10871] kmem_cache_alloc+0x46/0x2e0 [ 210.965009][T10871] ? fib4_rule_suppress+0x147/0x270 [ 210.970588][T10871] dst_alloc+0x108/0x300 [ 210.974922][T10871] __mkroute_output+0x452/0xc40 [ 210.979806][T10871] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 210.985875][T10871] ip_route_output_key_hash+0xa8/0xe0 [ 210.991272][T10871] __ip4_datagram_connect+0x3e0/0x710 [ 210.996667][T10871] ? __inet_bind+0x560/0x560 [ 211.001357][T10871] ip4_datagram_connect+0x2a/0x40 [ 211.006378][T10871] inet_dgram_connect+0x107/0x190 [ 211.011492][T10871] __sys_connect_file+0xd3/0xe0 [ 211.016387][T10871] io_issue_sqe+0xf52/0x6870 [ 211.021110][T10871] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 211.026966][T10871] ? __list_del_entry_valid+0x54/0xc0 [ 211.032351][T10871] ? rmqueue_pcplist+0x145/0x1d0 [ 211.037743][T10871] ? mntput_no_expire+0x64/0x730 [ 211.042783][T10871] ? get_page_from_freelist+0x54e/0x820 [ 211.048758][T10871] ? fget_many+0x178/0x1a0 [ 211.053226][T10871] __io_queue_sqe+0xe7/0x360 [ 211.057822][T10871] io_submit_sqe+0x1695/0x3400 [ 211.063007][T10871] ? kmem_cache_alloc_bulk+0x289/0x340 [ 211.069090][T10871] io_submit_sqes+0x822/0xe50 [ 211.073840][T10871] __se_sys_io_uring_enter+0x1c7/0xa10 [ 211.079981][T10871] ? __fget_light+0x21b/0x260 [ 211.084835][T10871] ? fput+0x2d/0x130 [ 211.088826][T10871] __x64_sys_io_uring_enter+0x74/0x80 [ 211.094726][T10871] do_syscall_64+0x3d/0x90 [ 211.099322][T10871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.105576][T10871] RIP: 0033:0x4665e9 [ 211.109482][T10871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.129274][T10871] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 211.137783][T10871] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 211.145893][T10871] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 211.153940][T10871] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.162165][T10871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.170399][T10871] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:29:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:29:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x0, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:29:59 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @sack_perm], 0x2) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:29:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsetxattr$security_evm(r3, &(0x7f0000000480), &(0x7f0000000840)=@ng={0x4, 0x8, "a481c4c818d52d46c996eea19f"}, 0xf, 0x0) write$binfmt_misc(r3, &(0x7f0000000380)={'syz0', "48c195c34e11ad1f935d0101d80b62339e19ed388d072f964ea881e20e2c5a4e2b1fce1da724271d3a88956de48e6a4c3fa81121b2bdfe8baca56d0ee4cb7b3778414424965e05b25b83738b1614961e2d8c3a6f4fce9d406cd401a2498abd0f93439e20152fd6e1cec9a68b78c0f07f4ad46b897181561c6506ccf54acb431d0c15ea75531a153bb00dbaded9e3558b"}, 0x94) timer_create(0x0, &(0x7f0000000080)={0x0, 0x212, 0x0, @thr={&(0x7f0000000280)="a00d7843f9d9161fcc0d60a309187283a4ffffff7f69e03ce07193497a697e800a65cf3a181380b3338f5205035ca31b7368f951a5f931dcdd6fc8c6b5999b339f33b036eb33ded8b4aeed762ac2c638174d16adf4c2d1b417a3176f63606214fa26056c205ecb9a52157783ff5956987f29fbb099940b3fc48bf3af3aaba17e2d2303004b6d93ed811c4ed8910700594f8ba8f58e92d923b5ed901676fea8633213e2aeb10818eeabe99f1f800026ad3c2e01b07e01854dbf18490a00889c5ea9ac7c30afb2587f68480ed50c5fdbecef4c00b04c7840", &(0x7f00000000c0)="b7fb3e189fbe8c079d7a9f89379590932b7465ddc84d8d886c"}}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) preadv(r2, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/96, 0x60}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f00000005c0)=""/106, 0x6a}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000700)=""/189, 0xbd}], 0x8, 0x4, 0x0) timer_settime(r4, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, &(0x7f0000000180)) tkill(0x0, 0x1000000000016) 08:29:59 executing program 1 (fault-call:9 fault-nth:64): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000440)='veth1_to_hsr\x00', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001a80)=[{&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/116, 0x74}, {&(0x7f0000000700)}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f00000007c0)=""/213, 0xd5}, {&(0x7f00000008c0)=""/187, 0xbb}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/219, 0xdb}], 0x9, 0x2, 0xe5db) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000240)=""/227, 0xe3}, {&(0x7f0000000340)=""/218, 0xda}], 0x2, 0x2, 0x1f) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) write$P9_RLINK(r1, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 211.540090][T10896] FAULT_INJECTION: forcing a failure. [ 211.540090][T10896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.553380][T10896] CPU: 0 PID: 10896 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 211.562210][T10896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.572539][T10896] Call Trace: [ 211.575835][T10896] dump_stack_lvl+0xb7/0x103 [ 211.580716][T10896] dump_stack+0x11/0x1a [ 211.585058][T10896] should_fail+0x23c/0x250 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/exe\x00', 0x40800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000400)=""/78, 0x4e}], 0x2, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}}, 0x0, 0x0, 0x37, 0x0, "7f0e5a28576d18226ee157a3693d33adca6dd5cf06eff3ab198cf39bef8227cebc2bc7bacd8d50d1f2b24ed915132166762e42c5a9850dc5f387b57200ba9c7595ab84417b2941c3c6c8f490437ee52d"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 211.589675][T10896] should_fail_usercopy+0x16/0x20 [ 211.594991][T10896] _copy_from_user+0x1c/0xd0 [ 211.599820][T10896] move_addr_to_kernel+0x7e/0x110 [ 211.604948][T10896] io_issue_sqe+0x2489/0x6870 [ 211.609638][T10896] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 211.616240][T10896] ? __list_del_entry_valid+0x54/0xc0 [ 211.622195][T10896] ? rmqueue_pcplist+0x145/0x1d0 [ 211.627354][T10896] ? mntput_no_expire+0x64/0x730 [ 211.632769][T10896] ? sysvec_reschedule_ipi+0x27/0xd0 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r3 = dup3(r0, r0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000240)={0x6, {{0xa, 0x4e21, 0x8, @mcast1, 0xf51}}}, 0x88) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 211.638669][T10896] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 211.645077][T10896] __io_queue_sqe+0xe7/0x360 [ 211.650583][T10896] io_submit_sqe+0x1695/0x3400 [ 211.655759][T10896] ? kmem_cache_alloc_bulk+0x289/0x340 [ 211.661313][T10896] io_submit_sqes+0x822/0xe50 [ 211.666102][T10896] __se_sys_io_uring_enter+0x1c7/0xa10 [ 211.671762][T10896] ? __fget_light+0x21b/0x260 [ 211.676436][T10896] ? fput+0x2d/0x130 [ 211.680700][T10896] __x64_sys_io_uring_enter+0x74/0x80 [ 211.686121][T10896] do_syscall_64+0x3d/0x90 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800002, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:29:59 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x12, &(0x7f0000000180)=0x2, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180), 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 211.690730][T10896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 211.696776][T10896] RIP: 0033:0x4665e9 [ 211.700696][T10896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 211.721816][T10896] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 211.731887][T10896] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 211.740047][T10896] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 211.750520][T10896] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 211.758664][T10896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.767366][T10896] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:29:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:30:00 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$getflags(r0, 0x408) recvfrom(r3, &(0x7f0000000200)=""/164, 0xa4, 0x20102, &(0x7f0000000000)=@generic={0x35, "a3a7f38465a1ef6c8c7042b2f23bd2255f1936c785dc0138388615d6fe7830b71f641b403505ba8ea3a0bea49a33b04de0710f6e89fc36103148b762e0dd490c61183d814e89297188b01bd69fe51a7cba2f45bd68c161fbb01d127a96fd225e2e0358916f68ebba1c8e46791f6a8b64cefae8f3f8990de55597b1d07858"}, 0x80) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @sack_perm, @timestamp, @mss={0x2, 0x10001}, @window={0x3, 0x6, 0x81}, @window={0x3, 0x0, 0x3}], 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = fsmount(0xffffffffffffffff, 0x0, 0x85) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000001c0)={0x7, 'gretap0\x00', {}, 0x156}) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) syz_open_dev$evdev(&(0x7f0000000180), 0x100, 0x410002) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:00 executing program 1 (fault-call:9 fault-nth:65): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:00 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000464000/0x4000)=nil, 0x4000, 0x280000f, 0x110, r2, 0x58b0b000) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f0000648000/0x3000)=nil, 0x3000, 0x9, 0x100010, r1, 0xd2e5000) 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) sendto$inet(r1, &(0x7f0000000240)="d6f49590488ccd8d882b8c174d918b9db0341b4111c0679ac19e53650f9c226c0654cd551598e3be93653cdbbae3c4b6829e27d60d8da7798c8296da546e9a74982854598775dca3b2acfeeaac0c8bbf8b5d2ee28d89f9dc720bed037aa8cf2538ae982c17e5a41b911c7a3847cef912770c2ae07ffe8b89ed47ae4a6ac24d717ccfae4420e33c36dd276033fe64d7d860a515f44ce2a68fe2d29f18d0058d7df0852fa179413d45fc34432c53c2d2f3c15819d8301510a0ff54e924794d58dca094d8aa07029e11eab355fc2ee61847ea1796da54e5eb", 0xd7, 0x20004000, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000001c0)=[@mss, @mss={0x2, 0xffff}, @sack_perm, @mss={0x2, 0x919f}, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:00 executing program 0: sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x20000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @mss, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 212.426962][T10944] FAULT_INJECTION: forcing a failure. [ 212.426962][T10944] name failslab, interval 1, probability 0, space 0, times 0 [ 212.440198][T10944] CPU: 0 PID: 10944 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 212.449328][T10944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.459700][T10944] Call Trace: [ 212.463152][T10944] dump_stack_lvl+0xb7/0x103 [ 212.467980][T10944] dump_stack+0x11/0x1a [ 212.472219][T10944] should_fail+0x23c/0x250 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) socketpair(0x1d, 0x5, 0x2, &(0x7f00000016c0)={0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001700)='team0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) preadv(r0, &(0x7f0000001640)=[{&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000240)=""/164, 0xa4}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/242, 0xf2}, {&(0x7f0000001400)=""/97, 0x61}, {&(0x7f0000001480)=""/136, 0x88}, {&(0x7f0000001540)=""/156, 0x9c}, {&(0x7f0000001600)=""/47, 0x2f}], 0x8, 0x7, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 212.476727][T10944] ? dst_alloc+0x108/0x300 [ 212.481205][T10944] __should_failslab+0x81/0x90 [ 212.486136][T10944] should_failslab+0x5/0x20 [ 212.490766][T10944] kmem_cache_alloc+0x46/0x2e0 [ 212.496867][T10944] ? fib4_rule_suppress+0x147/0x270 [ 212.502567][T10944] dst_alloc+0x108/0x300 [ 212.507593][T10944] __mkroute_output+0x452/0xc40 [ 212.512966][T10944] ? rb_erase+0x623/0x750 [ 212.517519][T10944] ip_route_output_key_hash_rcu+0x7a8/0x800 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) close(r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/55, 0x37}], 0x1, 0xc8, 0x8) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xb9e79861cdbe5fb6, &(0x7f0000000300)=0x80000000, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000180)) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) recvfrom$inet(r4, &(0x7f0000000240)=""/107, 0x6b, 0x2002, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 212.523541][T10944] ip_route_output_key_hash+0xa8/0xe0 [ 212.529266][T10944] __ip4_datagram_connect+0x3e0/0x710 [ 212.534934][T10944] ? __inet_bind+0x560/0x560 [ 212.539631][T10944] ip4_datagram_connect+0x2a/0x40 [ 212.545016][T10944] inet_dgram_connect+0x107/0x190 [ 212.550176][T10944] __sys_connect_file+0xd3/0xe0 [ 212.555096][T10944] io_issue_sqe+0xf52/0x6870 [ 212.559727][T10944] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 212.565629][T10944] ? __list_del_entry_valid+0x54/0xc0 [ 212.571164][T10944] ? rmqueue_pcplist+0x145/0x1d0 08:30:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000240)="844f29ded42cf529d25060beb19a8ab9896f93e433f616c2a2bf81a1281ac7b273813087c23d31d44d8048b234f185485ace01ada961709bdd9b816fd5bfd5fc47818498913de17204f9e648382e59d58eaf61011a2c819724ef275f7963e88e7cb558a6934c596587e4ff34f1f539a91a005c84c8b8464905bf1bb4e9d70cdaa211077d948444237c643b0797d0911610159bd240a193821559eb7890a1ce3949ff6ded30579c5de31a7e38157165883bcf687204251779a04f89bf8d891a2f7ce8ebb70f63a873ea02cb537e8ea30da1d3711a331b93412a5058fc973ef72591fdadbb22863813", 0xe8}, {&(0x7f0000000180)="7fa5e100ea20b51f94d5462ca146f7d4c89b51c0ca8ed91a1f4a5799d63bcc29426fb97e4368585881cd2b74284668d0", 0x30}, {&(0x7f0000000340)="524bb06ff1d2182662c31c96356b895c573103eb95c5d82d5b9736df86f1a3bcd03d29bc7e702c9c11b6b9420421ced6019223885e9ce53a740ac753d4f2eb8197381b8f3a60dd02eb9c65371f0450b796d0b54890fd100a39490ea34c2faa9d49a29f053daa398d4d61d438adf67cc228d87a699254e2a6e4fab630b1dc519a396381abb76be86634e573bb5e9bad0151e406a2131d5118311f364c03ba119b1842257c6e7e854866acea11e3bc0b150f6c6194cf44a533a53a935a64552611e28017e9176eb65f323f7e0fe7612e0c7c50209056d043e0", 0xd8}, {&(0x7f0000000440)="b72e759c8672e68752014fbbc44cb5a4469babe3013dd5690cf9cd12af2f9d8ee8aaad0dd78394dc09ce7bacb099b3092332a3745f0c9eb8f66d2322a18557f9eb67457d3cc2ac85435fd22366cecbfce5c151ec4178ff256f5e736c646a325a3a9434d260bf85e24d6732c9da63475b2712858d753b20a8ae746e56f3c48d5be7d9471e186a0a51e5cf533a41de87c9575581212fe5a370a1b2e70ba9282bfc56a783b651be6f59fe012391c318e8f49d79ea0aab70c813e2add29769fe59d49b1bd8fe958fce9a5f49a66aaa7eb9043681f5af4b44324382003737cc916b6c05c6cd", 0xe3}, {&(0x7f0000000540)="b27e691164c8e957229ecf61fc26b728f395b3bc57104ae148986a887802fd45c64f8d7d8728df3dd26d62ef43e7010eaeb5f0c50674d23dec052e052834fe31babd55c40830bb2319a0593c293bb0e524684e2402973ff2c404621fc9e16b859d9c65b190aa5ab4d2f92a6b0c277d26e261a5d735194f0715c3d1ad5da2ac0c07d8408ea8cb063ba6fe847d04ee50a427de3bce355e3d03aab02b455c5edfc1ec9099808d94b9b6e124915262a476496df5e7aba88096d914665048f83df16c0f60ef11df831c60e26d00777659b7e4e2f8b79be65e06cee03cc990656ba1e38b584d438ad482056390f39f6b8f9566", 0xf0}, {&(0x7f00000001c0)="5d59b0a4f38c5c50662b93f8ede438812c3ac4852d65a31afc428fbcf06a1b10bdf40bade40e5250abb3", 0x2a}, {&(0x7f0000000640)="a99f4d1ea4be442f5504f705357954e14c6862abce9f5afe741f71", 0x1b}, {&(0x7f0000000680)="ff44342a246f4a4eda7f27fee9eb113e446a934f8d99693cd6f5b67304af623a1e30fd0e7fbcda61ca7f70d4ecc34ed55ebba52df336f47099ad988a279f07929964ae3463f492f96604ac5c5e7d905ee0817514d10da158faa4c98fa9328adc71e58030adb77ae6f8f10dcde2cfb9bc6a7e79e2febca32e1911b0cd8bd6cf9f6622cfb154bace0f4f62d6f927a13439b6f0927ebe627e44ee4ebb1d01354ad6193dc72f60ea64c1c24e29084f4f1ddaa6c18b39ccbc9a7e9910614a693bbe84f99fb82be67d989b8f2bbde3b2d2875b789c5e85eb6837e3edb029bc4b9db3", 0xdf}, {&(0x7f0000000780)="4a691c344fb72495d8abcc3ab55e08282e8c4c20b60dbc9d03f11fcf04cb09227cacb10915791e1302aba167", 0x2c}], 0x9) [ 212.576319][T10944] ? mntput_no_expire+0x64/0x730 [ 212.581355][T10944] ? get_page_from_freelist+0x54e/0x820 [ 212.587005][T10944] ? fget_many+0x178/0x1a0 [ 212.591701][T10944] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 212.597583][T10944] __io_queue_sqe+0xe7/0x360 [ 212.602633][T10944] io_submit_sqe+0x1695/0x3400 [ 212.607712][T10944] ? kmem_cache_alloc_bulk+0x289/0x340 [ 212.613708][T10944] io_submit_sqes+0x822/0xe50 [ 212.618398][T10944] __se_sys_io_uring_enter+0x1c7/0xa10 [ 212.623886][T10944] ? __fget_light+0x21b/0x260 [ 212.628583][T10944] ? fput+0x2d/0x130 [ 212.632734][T10944] __x64_sys_io_uring_enter+0x74/0x80 [ 212.638395][T10944] do_syscall_64+0x3d/0x90 [ 212.644500][T10944] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 212.651157][T10944] RIP: 0033:0x4665e9 [ 212.655847][T10944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 212.676346][T10944] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 212.686104][T10944] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 212.694414][T10944] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 212.702823][T10944] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 212.711495][T10944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.719866][T10944] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:30:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000180)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/210, 0xd2}], 0x2, 0x0, 0x1) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7, 0x0, &(0x7f0000000080)) sendto$inet(r3, &(0x7f00000003c0)="fbbd77bd94765248b310cedf59707f7d5ccca4e58a8ef7c69779b6749a4ac4dc12c4e524df4b9732b2c45328411a6bc6844652a783134f3be6344a26c835a2341d9a88bd623bf400b1787ec2fed51e52b76113e4b4e8e7472f13d30eb7d0527fd757e58a74fe0da6d5495629045b6d05d190d9fb912c2417838e7f8e8d38b492a7372d40f56d139b006a57cd8c6e9e74", 0x90, 0x24000012, &(0x7f0000000480)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10) 08:30:01 executing program 1 (fault-call:9 fault-nth:66): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:01 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000040)={0x77359400}, 0x1, 0x1, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000000)=ANY=[@ANYBLOB="07000060edf6377f8a00c400000000"]) 08:30:01 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000453000/0x4000)=nil, 0x4000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$P9_RATTACH(r4, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x10, 0x2, 0x6}}, 0x14) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x5400, 0x3, 0x5, 0x4, 0x3}, 0x14) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000180)={0x0, 0x7, 0x5, 0x7fff, 0x7}) [ 213.343170][T10997] FAULT_INJECTION: forcing a failure. [ 213.343170][T10997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.356735][T10997] CPU: 1 PID: 10997 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 213.366374][T10997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 213.376789][T10997] Call Trace: [ 213.380084][T10997] dump_stack_lvl+0xb7/0x103 [ 213.385224][T10997] dump_stack+0x11/0x1a 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f000012e000/0x1000)=nil, 0x1000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window={0x3, 0x1, 0x8}, @mss={0x2, 0x919f}, @timestamp, @mss={0x2, 0x2}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ftruncate(r3, 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 213.389385][T10997] should_fail+0x23c/0x250 [ 213.393825][T10997] should_fail_usercopy+0x16/0x20 [ 213.398949][T10997] _copy_from_user+0x1c/0xd0 [ 213.404170][T10997] move_addr_to_kernel+0x7e/0x110 [ 213.409538][T10997] io_issue_sqe+0x2489/0x6870 [ 213.414236][T10997] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 213.420126][T10997] ? __list_del_entry_valid+0x54/0xc0 [ 213.425516][T10997] ? rmqueue_pcplist+0x145/0x1d0 [ 213.430520][T10997] ? mntput_no_expire+0x64/0x730 [ 213.435552][T10997] ? get_page_from_freelist+0x54e/0x820 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x404, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 213.441292][T10997] ? fget_many+0x178/0x1a0 [ 213.445774][T10997] __io_queue_sqe+0xe7/0x360 [ 213.450496][T10997] io_submit_sqe+0x1695/0x3400 [ 213.455264][T10997] ? kmem_cache_alloc_bulk+0x289/0x340 [ 213.460893][T10997] io_submit_sqes+0x822/0xe50 [ 213.465589][T10997] __se_sys_io_uring_enter+0x1c7/0xa10 [ 213.471112][T10997] ? __fget_light+0x21b/0x260 [ 213.476070][T10997] ? fput+0x2d/0x130 [ 213.480279][T10997] __x64_sys_io_uring_enter+0x74/0x80 [ 213.485699][T10997] do_syscall_64+0x3d/0x90 [ 213.490244][T10997] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 213.496238][T10997] RIP: 0033:0x4665e9 [ 213.500331][T10997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 213.521233][T10997] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 213.529740][T10997] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 213.538241][T10997] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 213.546321][T10997] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 213.554664][T10997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.554680][T10997] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:01 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:30:01 executing program 1 (fault-call:9 fault-nth:67): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockname(r2, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000240)=0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) fdatasync(r1) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0xff, 0x8}, @mss={0x2, 0x4}, @window, @window={0x3, 0x8, 0x8}, @timestamp, @window={0x3, 0x7}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 214.094259][T11030] FAULT_INJECTION: forcing a failure. [ 214.094259][T11030] name failslab, interval 1, probability 0, space 0, times 0 [ 214.107185][T11030] CPU: 0 PID: 11030 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 214.116280][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.126446][T11030] Call Trace: [ 214.129946][T11030] dump_stack_lvl+0xb7/0x103 [ 214.134604][T11030] dump_stack+0x11/0x1a [ 214.138795][T11030] should_fail+0x23c/0x250 [ 214.143382][T11030] ? dst_alloc+0x108/0x300 [ 214.148209][T11030] __should_failslab+0x81/0x90 [ 214.153921][T11030] should_failslab+0x5/0x20 [ 214.158602][T11030] kmem_cache_alloc+0x46/0x2e0 [ 214.163445][T11030] ? fib4_rule_suppress+0x147/0x270 [ 214.168758][T11030] dst_alloc+0x108/0x300 [ 214.172994][T11030] __mkroute_output+0x452/0xc40 [ 214.178496][T11030] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 214.184497][T11030] ip_route_output_key_hash+0xa8/0xe0 [ 214.189974][T11030] __ip4_datagram_connect+0x3e0/0x710 [ 214.195512][T11030] ? __inet_bind+0x560/0x560 [ 214.200174][T11030] ip4_datagram_connect+0x2a/0x40 [ 214.206307][T11030] inet_dgram_connect+0x107/0x190 [ 214.211431][T11030] __sys_connect_file+0xd3/0xe0 [ 214.216309][T11030] io_issue_sqe+0xf52/0x6870 [ 214.220987][T11030] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 214.227202][T11030] ? __list_del_entry_valid+0x54/0xc0 [ 214.232621][T11030] ? rmqueue_pcplist+0x145/0x1d0 [ 214.237753][T11030] ? mntput_no_expire+0x64/0x730 [ 214.242977][T11030] ? get_page_from_freelist+0x54e/0x820 [ 214.248847][T11030] ? fget_many+0x178/0x1a0 [ 214.253537][T11030] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 214.259249][T11030] __io_queue_sqe+0xe7/0x360 [ 214.263856][T11030] io_submit_sqe+0x1695/0x3400 [ 214.268672][T11030] ? kmem_cache_alloc_bulk+0x289/0x340 [ 214.274499][T11030] io_submit_sqes+0x822/0xe50 [ 214.280253][T11030] __se_sys_io_uring_enter+0x1c7/0xa10 [ 214.285838][T11030] ? __fget_light+0x21b/0x260 [ 214.290500][T11030] ? fput+0x2d/0x130 [ 214.294399][T11030] __x64_sys_io_uring_enter+0x74/0x80 [ 214.300655][T11030] do_syscall_64+0x3d/0x90 [ 214.305168][T11030] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 214.312439][T11030] RIP: 0033:0x4665e9 [ 214.316338][T11030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 214.337410][T11030] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 214.346628][T11030] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 214.354685][T11030] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 214.363078][T11030] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 214.372714][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.381815][T11030] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x480000, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000457000/0x3000)=nil, 0x3000, 0x0, 0x4010, r1, 0x9462d000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) splice(0xffffffffffffffff, &(0x7f0000000080)=0xcef9, r0, &(0x7f00000000c0), 0x1, 0x1) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mmap(&(0x7f000046a000/0x2000)=nil, 0x2000, 0x8, 0x50, 0xffffffffffffffff, 0x3e4bc000) tkill(r4, 0x1000000000016) 08:30:02 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x800) listen(r3, 0x8001) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x418002, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:02 executing program 1 (fault-call:9 fault-nth:68): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000240)=0x7f, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x80010, r3, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0xfb, 0x3d, 0x0, 0x14, "4b5203627c7713eb0e937181aca4236c", "8fc2db7b2bd21fa9f19d39fafbb577940ff0037b48205c86aa1b1f48c584b82335cb4d14c47fb3c6"}, 0x3d, 0x0) 08:30:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0xc0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/254, 0xfe}], 0x2, 0x3, 0x8) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 214.460870][T11056] FAULT_INJECTION: forcing a failure. [ 214.460870][T11056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.474344][T11056] CPU: 0 PID: 11056 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 214.483101][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.493158][T11056] Call Trace: [ 214.496955][T11056] dump_stack_lvl+0xb7/0x103 [ 214.501653][T11056] dump_stack+0x11/0x1a [ 214.505927][T11056] should_fail+0x23c/0x250 08:30:02 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x7ff]}, 0x8, 0x80400) ioctl$TCXONC(r0, 0x540a, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 214.510585][T11056] should_fail_usercopy+0x16/0x20 [ 214.516025][T11056] _copy_from_user+0x1c/0xd0 [ 214.521117][T11056] move_addr_to_kernel+0x7e/0x110 [ 214.526327][T11056] io_issue_sqe+0x2489/0x6870 [ 214.532524][T11056] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 214.538604][T11056] ? __list_del_entry_valid+0x54/0xc0 [ 214.544069][T11056] ? rmqueue_pcplist+0x145/0x1d0 [ 214.549531][T11056] ? mntput_no_expire+0x64/0x730 [ 214.554564][T11056] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 214.560215][T11056] ? _raw_spin_lock_irqsave+0x25/0x80 [ 214.565662][T11056] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 214.571476][T11056] ? percpu_counter_add_batch+0xc0/0xd0 [ 214.577340][T11056] ? io_submit_flush_completions+0x31e/0x3f0 [ 214.583329][T11056] __io_queue_sqe+0xe7/0x360 [ 214.588072][T11056] io_submit_sqe+0x1695/0x3400 [ 214.592919][T11056] ? kmem_cache_alloc_bulk+0x289/0x340 [ 214.598731][T11056] io_submit_sqes+0x822/0xe50 [ 214.604343][T11056] __se_sys_io_uring_enter+0x1c7/0xa10 [ 214.610148][T11056] ? __fget_light+0x21b/0x260 [ 214.614918][T11056] ? fput+0x2d/0x130 [ 214.619067][T11056] __x64_sys_io_uring_enter+0x74/0x80 [ 214.624432][T11056] do_syscall_64+0x3d/0x90 [ 214.628940][T11056] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 214.634897][T11056] RIP: 0033:0x4665e9 [ 214.638920][T11056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 214.659057][T11056] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 214.667678][T11056] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 214.675752][T11056] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 214.683820][T11056] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 214.691785][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.700008][T11056] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:30:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x10}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:02 executing program 1 (fault-call:9 fault-nth:69): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 214.968590][T11083] FAULT_INJECTION: forcing a failure. [ 214.968590][T11083] name failslab, interval 1, probability 0, space 0, times 0 [ 214.981244][T11083] CPU: 0 PID: 11083 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 214.990355][T11083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.000582][T11083] Call Trace: [ 215.003965][T11083] dump_stack_lvl+0xb7/0x103 [ 215.008647][T11083] dump_stack+0x11/0x1a [ 215.012909][T11083] should_fail+0x23c/0x250 [ 215.017664][T11083] ? dst_alloc+0x108/0x300 [ 215.022160][T11083] __should_failslab+0x81/0x90 [ 215.026968][T11083] should_failslab+0x5/0x20 [ 215.031581][T11083] kmem_cache_alloc+0x46/0x2e0 [ 215.036463][T11083] ? fib4_rule_suppress+0x147/0x270 [ 215.041787][T11083] dst_alloc+0x108/0x300 [ 215.046085][T11083] __mkroute_output+0x452/0xc40 [ 215.051212][T11083] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 215.057212][T11083] ip_route_output_key_hash+0xa8/0xe0 [ 215.062660][T11083] __ip4_datagram_connect+0x3e0/0x710 [ 215.068126][T11083] ? __inet_bind+0x560/0x560 [ 215.072772][T11083] ip4_datagram_connect+0x2a/0x40 [ 215.077827][T11083] inet_dgram_connect+0x107/0x190 [ 215.082957][T11083] __sys_connect_file+0xd3/0xe0 [ 215.087935][T11083] io_issue_sqe+0xf52/0x6870 [ 215.092959][T11083] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.099432][T11083] ? __list_del_entry_valid+0x54/0xc0 [ 215.105024][T11083] ? rmqueue_pcplist+0x145/0x1d0 [ 215.109979][T11083] ? mntput_no_expire+0x64/0x730 [ 215.115171][T11083] ? _raw_spin_lock_irqsave+0x25/0x80 [ 215.120681][T11083] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.126600][T11083] ? percpu_counter_add_batch+0xc0/0xd0 [ 215.132313][T11083] ? io_submit_flush_completions+0x31e/0x3f0 [ 215.139360][T11083] __io_queue_sqe+0xe7/0x360 [ 215.143961][T11083] io_submit_sqe+0x1695/0x3400 [ 215.148713][T11083] ? kmem_cache_alloc_bulk+0x289/0x340 [ 215.154256][T11083] io_submit_sqes+0x822/0xe50 [ 215.159099][T11083] __se_sys_io_uring_enter+0x1c7/0xa10 [ 215.164612][T11083] ? __fget_light+0x21b/0x260 [ 215.169280][T11083] ? fput+0x2d/0x130 [ 215.173180][T11083] __x64_sys_io_uring_enter+0x74/0x80 [ 215.178809][T11083] do_syscall_64+0x3d/0x90 [ 215.183422][T11083] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.189308][T11083] RIP: 0033:0x4665e9 [ 215.193506][T11083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.213536][T11083] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 215.222032][T11083] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 215.230004][T11083] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 215.237969][T11083] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.246110][T11083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.254118][T11083] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x1010, r0, 0x3000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '-\xb9'}], 0xa, "a65fd8ac89fa12a51507065d1e0c72e771d50182a7466ddae700681f0a5a6101a30a4a1d441d57ce3d11308448c50cc38779cfd5997cc66fc0a6a5c0ba2255e66b0952cfe88b35aeb8df9c05ec840f90afc0f87a8b52df1bdc4710481ee5b744cb01ec00826b6478c8cd0395abeae03432ba712efdb3e6c63c27da5cbf82f31f80a6d6942db6e74329acd5bb73829710d03d5363adde8623de44209a11c8761f9b36b7db6643d59ee97126d725a5090a653baf435556896b82528f19feb0a5"}, 0xcd) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x41) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {r5, r6+10000000}}, &(0x7f0000000140)) 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast2}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r4 = openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4000, 0xb, 0xd}, 0x18) preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/4096, 0x1000}], 0x3, 0x5, 0xfb2) 08:30:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:03 executing program 1 (fault-call:9 fault-nth:70): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 215.364538][T11104] FAULT_INJECTION: forcing a failure. [ 215.364538][T11104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.378241][T11104] CPU: 1 PID: 11104 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 215.388625][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.398975][T11104] Call Trace: [ 215.402274][T11104] dump_stack_lvl+0xb7/0x103 [ 215.406977][T11104] dump_stack+0x11/0x1a 08:30:03 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x415f, &(0x7f00000000c0)={0x0, 0x7c9, 0x1, 0x0, 0x3b2}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x8, @inherit={0x88, &(0x7f0000001440)=ANY=[@ANYRES16=r6, @ANYRES16, @ANYRES64]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000018c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYRESHEX=r9, @ANYRES16, @ANYRES32, @ANYRES16=r3, @ANYRES32=r5], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4040025) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"1cb4a5d316fd6197a6d9491db11b033b", r6, 0x0, {0x400, 0x4}, {0x80000000}, 0x0, [0x81, 0x5, 0xe80, 0x7, 0x9, 0x400, 0x0, 0x7c, 0x9e2, 0x200, 0x9, 0x3ff, 0x5, 0x2, 0x1, 0x10001]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"5c144442f81f7afc2ecb91ab8025f46c", r6, 0x0, {0x9, 0x6}, {0x0, 0xfff}, 0xfffffffffffffffb, [0xfffffffffffffffd, 0x7, 0xffffffffffffff62, 0x4, 0x6, 0x4, 0x2, 0x2b1800000000, 0x6, 0x2, 0x1, 0x4, 0x0, 0x5, 0xcf, 0x1]}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @mss={0x2, 0xfff}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 215.411194][T11104] should_fail+0x23c/0x250 [ 215.416143][T11104] should_fail_usercopy+0x16/0x20 [ 215.421737][T11104] _copy_from_user+0x1c/0xd0 [ 215.426431][T11104] move_addr_to_kernel+0x7e/0x110 [ 215.431493][T11104] io_issue_sqe+0x2489/0x6870 [ 215.436212][T11104] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.442048][T11104] ? __list_del_entry_valid+0x54/0xc0 [ 215.447457][T11104] ? rmqueue_pcplist+0x145/0x1d0 [ 215.452738][T11104] ? mntput_no_expire+0x64/0x730 [ 215.457962][T11104] ? _raw_spin_lock_irqsave+0x25/0x80 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = signalfd(r0, &(0x7f0000000280)={[0x100000000]}, 0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@window={0x3, 0x8, 0x8}, @window={0x3, 0x8, 0x20}, @sack_perm, @mss={0x2, 0x1}, @window={0x3, 0x1, 0x101}, @sack_perm], 0x6) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r1, &(0x7f0000000180)="002b6e351a0e7ccb2fcab66f2678578ef9ee5d59d4fb473ec3441aaea7f543edf4b8a10630483a0225337d20b7a660965da1effa21e1ed8dd6176bdd2abe5003da13c02e0694eae9063f04f34314bcf2a03da93229cc8cc7194767f6fd", 0x5d, 0x80, &(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10) [ 215.463693][T11104] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.469929][T11104] ? percpu_counter_add_batch+0xc0/0xd0 [ 215.475488][T11104] ? io_submit_flush_completions+0x31e/0x3f0 [ 215.481562][T11104] __io_queue_sqe+0xe7/0x360 [ 215.486476][T11104] io_submit_sqe+0x1695/0x3400 [ 215.491369][T11104] ? kmem_cache_alloc_bulk+0x289/0x340 [ 215.501564][T11104] io_submit_sqes+0x822/0xe50 [ 215.506269][T11104] __se_sys_io_uring_enter+0x1c7/0xa10 [ 215.511931][T11104] ? __fget_light+0x21b/0x260 [ 215.516630][T11104] ? fput+0x2d/0x130 [ 215.520549][T11104] __x64_sys_io_uring_enter+0x74/0x80 [ 215.526119][T11104] do_syscall_64+0x3d/0x90 [ 215.530626][T11104] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 215.536731][T11104] RIP: 0033:0x4665e9 [ 215.540726][T11104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 215.560808][T11104] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 215.569643][T11104] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 215.577687][T11104] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 215.586528][T11104] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 215.594622][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.603008][T11104] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup3(r0, r1, 0x80000) mmap(&(0x7f0000327000/0x4000)=nil, 0x4000, 0x800001, 0x10, r3, 0x566b6000) r4 = perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x80, 0x2, 0x6, 0x1, 0x0, 0x7, 0xb8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x40, 0x3f, 0xb6, 0x1, 0xffffffff80000001, 0x80000001, 0x6, 0x0, 0x101, 0x0, 0x8}, 0x0, 0x2, r2, 0x5) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000002c0)="8f00ab9a9be495fdea41a9b5f22e02a4a2ec8df1006f29787d43309459ae38ebcfdd109975827b249260611d80e43e6ea138f0868b0a3e11455b0cb81f47cd721d6a60686af1287389093fdab6d601396cde7c2fc833a402acb1ba34d19ff2c718adb232512cdea75f31a505fa08ae346fac0bee21358e707a5048acd35daa8b0fc6d61e16e420747e1e16e97c762b07591655aa9b516fd80e1c5d629106639d46c124510189900c1b779beaabdd00eb6ccaf68f2581bad4ea88c7b11c8b95f1ee7da44ca03df78f8f6c5ebd8b9e0c40e8bab67a", 0xd4}], 0x1) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x800, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendfile(0xffffffffffffffff, r1, &(0x7f0000000400)=0x9, 0xa8e) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xfffffffd}, @mss, @window={0x3, 0x800, 0x4}, @mss={0x2, 0x919f}, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r1, &(0x7f0000000140), 0x0, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f00000000c0)={0x6, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) tkill(r4, 0x1000000000016) 08:30:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:03 executing program 1 (fault-call:9 fault-nth:71): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0xfffffffffffffebe) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @timestamp, @window, @window={0x3, 0x7, 0x1}, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x1}, @sack_perm, @timestamp], 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x3f, &(0x7f0000000240)=0xe6f, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x111082, 0x0) r2 = openat(r1, &(0x7f00000001c0)='./file0\x00', 0x40, 0x131) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 215.834855][T11138] FAULT_INJECTION: forcing a failure. [ 215.834855][T11138] name failslab, interval 1, probability 0, space 0, times 0 [ 215.848047][T11138] CPU: 1 PID: 11138 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 215.856816][T11138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.866890][T11138] Call Trace: [ 215.870432][T11138] dump_stack_lvl+0xb7/0x103 [ 215.875131][T11138] dump_stack+0x11/0x1a [ 215.879311][T11138] should_fail+0x23c/0x250 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000380)='ipvlan0\x00') bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c001, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10010, r4, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0x8001, 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000240)={0x5628, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) [ 215.883783][T11138] ? dst_alloc+0x108/0x300 [ 215.888346][T11138] __should_failslab+0x81/0x90 [ 215.893151][T11138] should_failslab+0x5/0x20 [ 215.897664][T11138] kmem_cache_alloc+0x46/0x2e0 [ 215.902513][T11138] ? fib4_rule_suppress+0x147/0x270 [ 215.907877][T11138] dst_alloc+0x108/0x300 [ 215.912396][T11138] __mkroute_output+0x452/0xc40 [ 215.917545][T11138] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 215.923530][T11138] ip_route_output_key_hash+0xa8/0xe0 [ 215.929000][T11138] __ip4_datagram_connect+0x3e0/0x710 08:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @sack_perm], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 215.934727][T11138] ? __inet_bind+0x560/0x560 [ 215.939337][T11138] ip4_datagram_connect+0x2a/0x40 [ 215.945045][T11138] inet_dgram_connect+0x107/0x190 [ 215.950611][T11138] __sys_connect_file+0xd3/0xe0 [ 215.955521][T11138] io_issue_sqe+0xf52/0x6870 [ 215.960399][T11138] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.966442][T11138] ? __list_del_entry_valid+0x54/0xc0 [ 215.972375][T11138] ? rmqueue_pcplist+0x145/0x1d0 [ 215.977538][T11138] ? mntput_no_expire+0x64/0x730 [ 215.982738][T11138] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 215.988323][T11138] ? _raw_spin_lock_irqsave+0x25/0x80 [ 215.993705][T11138] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 215.999768][T11138] ? percpu_counter_add_batch+0xc0/0xd0 [ 216.005447][T11138] ? io_submit_flush_completions+0x31e/0x3f0 [ 216.011438][T11138] __io_queue_sqe+0xe7/0x360 [ 216.016548][T11138] io_submit_sqe+0x1695/0x3400 [ 216.021462][T11138] io_submit_sqes+0x822/0xe50 [ 216.026131][T11138] __se_sys_io_uring_enter+0x1c7/0xa10 [ 216.031572][T11138] ? __fget_light+0x21b/0x260 [ 216.036267][T11138] ? fput+0x2d/0x130 [ 216.040806][T11138] __x64_sys_io_uring_enter+0x74/0x80 [ 216.046403][T11138] do_syscall_64+0x3d/0x90 [ 216.051099][T11138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.057036][T11138] RIP: 0033:0x4665e9 [ 216.061028][T11138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.082883][T11138] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 216.091783][T11138] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 216.099934][T11138] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 216.108168][T11138] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.119774][T11138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.127948][T11138] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x10082a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x154) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x11, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000100)) sendto$inet(r2, &(0x7f0000000300)="fe95711767e140623d2ac04bb4bafad2", 0x10, 0x20004085, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) sendto$inet(r4, &(0x7f0000000240)="25e1ab1c722264aa4e50be4bbfd7cbefd9f5d5b14b6213697769ada0a90b7a6514ef61a41e41ac8e5d5ec1e5dbaa3422ab4c419a6cc6a7f3e10d55167b0966168483099bcd1ed141e4e0d714d90b22fc3c450bafa738b91e829a6b8d6d356a226b8bbad465683bca754d3b2e5cf741c79fe4841df81ee477832549e6971cdf6c15cd2f551580fc1c4d4917c5a40c6220c13277cd265a72c4ab87", 0x9a, 0x40000, &(0x7f00000001c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000140)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x0, 0x8}, @window={0x3, 0x1, 0x8}, @timestamp, @mss={0x2, 0x7ff}], 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@timestamp, @mss={0x2, 0x8000}], 0x2) 08:30:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x90000, 0x0) splice(r0, &(0x7f0000000080)=0x7ff, r1, &(0x7f0000000140)=0xffffffffffffff81, 0x9, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 08:30:04 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000001a00)="9d174738f373a8522a902c538fb29a0bd8c32d6849682a8faa990d1d728fb80324ff8c3f4c68e30e9569b81eb3db885b1adfef61a7e5e9149952fc381bf0d4a1aaa4ff09d9a916e559d5c06ce2498d5c51c08f35cb3442b3ba6d4b01b741f16eced10be717ba4ae5f9fdef7d320132b3cb8da803cfb41636548caa62f436556284d546c3d42b7f8419dfc63999318cc0eafc7b29e824a8f535232dcd6f1cf415b3a5c186cd2c6995434871a8d7b5ed155abc242bd32e3c6deadf58c695d2e881fab83f4f30", 0xc5}], 0x2, 0x0, 0x50}}, {{&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e20, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="f4067e91624e71bb03725c4448fc28936d56132f65fa5fe7165f34bb252d66eabc0af4be4ab1ce9b09c928e80188c8a7f423271a0a2710080b386df651c9db9e237a844cfc984c8b165655a6f38cd64283fd322da1e8f6e1bebd19ef16fe6a75d5faf3b6cfc59119555ca8ddf1a095", 0x6f}, {&(0x7f0000000280)="351f3b57ab5220ebc2d6aa1923dbbc0f79d1109390bf092cde0116013b8e069b38cba0fa034acb8c2e418f0c1e39974ab03ddfe872314b92c007077a1f910f7f22cd18c2520d23a8b3a380e683f99dca35bdd505ff0eee113e570d687af57ea7b30d8697dcbf9c71ef7745304cecaec3feb7a3ccfedf206dd215", 0x7a}, {&(0x7f0000000300)="6017992aad301f41bd87bd9db52399601081a64b533f288accc266c754f7e48e8c374cde0adfc833168c2875de9017dc1dbae9fba720c3425fdce8a5332d585943339fdd1bd46574dd10e63fbf2fc64ea48d5883", 0x54}], 0x3, &(0x7f00000004c0)=[{0x88, 0x1, 0x401, "d961037c3c1f5e44cc6d84f0ae1c9f8fae328e74d8473042f21d061bba1bd32a32af524319d93448d45b97ba684225d457aafbec391e01afafbc3209e7e203bb6d01fe2cdf919237bb7f6872f31160f013f574ab528ba2a29ebf132b2f6bb353e784031ab2daf78d8405aa67e83fca04ae"}], 0x88}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="265ab1410cb98a9039ba9b493593e3332ec667f141c9da333c95ac845d8e22e5707db2c04716f2a50f7fdb7fef0bfc0f8b7edda57585223349371583615fafec0a318fd8b73712275c8ce9b9d32cc98d94e929a5e24ff2528f3f3be632fb603cd1edc4985ce68d71e7b176c1fc3bd24df9a0433715bcf4c4daf9fd2cd89698ea1210f0cfb510e9b3417afd74188b4a28842820e998b9b21a38033caf75374091ba881569ad841b73b2bf132cee5befa765fe184a6c057626c8e87c6021df22a35c30d5e45f615c654cee62d2", 0xcc}, {&(0x7f0000000380)="576ea501860ea70b5c8807699a4ab8f6e7e7ddae0b3fb4770f931db5dd6b8c1148bc92b5bd7ea00565a609b74a94340837a06a75a5406931baff24e9b2a720bde98ffc04cb", 0x45}], 0x2, &(0x7f0000000680)=[{0x28, 0x116, 0x1, "30dd692cd0cf766c0735a687a759af14b20c"}, {0x68, 0x117, 0x6d, "8fd0938658c40694a1551750d8d66e8357a0adb1755bb0d5dc5c1a61eeb8e21adaccecf79120d7cd99069dc6d3c2f298d22c4832f4e4489551709e5443bfdc5c40200f733b8b75d48def882a1d6e961e5687c833892fc5"}, {0x18, 0x10e, 0xc2e1, "7724f0fef9"}, {0x30, 0x112, 0x7, "2c46ca3e056e5adfd76f4d38d74c982c70a4b0391603e3bde2"}, {0x1010, 0x84, 0x5, "eeb4e9db9efef46cc69c8639644a4422617c35e90be6d66a163bb455619fb95b5306bdc5ac29b6b2bd543bd998d0779a742f97555cfa636e68500bfc01300d828f0512aa1fd6ebc6216d994c2f0eb347eb31080b09f80e6a88d4cb91994f5c3e31c08a617ce0f9134afc4ed3c638ee4a350024da507976cc18e414d53ded4004d19950b0131d75d43ba9b251efbe2fe6400e97f76397829c1649a134de395afa0a0a2fb3222361e5d70850de09790ad6eea5d04b1e444fbcebe7befdb4e9c1ada91dc5040b8c7c1d82288716a0eac141edee1be84d8c51c773e29b197d02556977803d3429140042c89555cb317613d33b26b6e51bdc13419b317790cf412d98751410011096796ee90218d3eb14ad1bb62f2ee74fb78a3f944ac5a723fc04f63c9a7f7198801d17fcd1c4c9bf0e23d5cf06c5d0f29b85a55a2252532404d6eec03c1813b67dda8511c580e1e0619169e8dbf3747c2bcb311d8f139ad23db5bea3743972a554b005526fb27a9dd804d34dc5dd3f3fe76d0b5c068e039144d8f3afdb0adb24e5ad7f03b84f8a7a7e5771bed0be3a63bb3e33bdcaa6b61c54a6a5814a1a63263c8c20ac28797e9d0a092a717712645aaacabb94ebba5d9ee8fbb81344f22f0f1066a64bbb7b455579ef554ffe3415dce1fbff7522d6388cfb9b961e49097dd7066f6ca23fce92ab9dd922037e1e0307ec079815f4de87c015bfa824acc50a28dbb86f81bb40ebcc5bb70126649c3b1e7e2c97c471ca4c5d1bda3fabb6c3e70c4d9cd7f08422e5ad9b21f4f435dd62757b0be180036addf605d962da3d60a5a861e8bd7da7ba7fc4c8b41005c31fd6f58c7cca8ef4e2df7e1264801ed1b69273719791cea4c977e5165f173ad95e45587cbec74007c51419573457da0a8b8a69f69a2a5f97e026d308df4d23463166d6885316d00fb450ba8800e676d07ade104f825fa05716d6c5d09b92d68956245b34a715f578ba13cef9483aeafbd98e4454bd15b7e2bf80958c3230b9381e43a886dc7e8b6091b933967dc0ef9faf483351b636a92774c6f7bce1dba5b5416c145aa386b64374accb0598e42d3231402669d1dea065d3e701cbecad4df5f7e34f7797a45740b9f5d48d08601fec68a7c79b9caec04b886a371e5dc72ec69f11745e1510b98c9ea0e7020598753269067776bed377d5cf9b5309d9158990227c81bba383eff4388ac1f1612a2415c52f6c6efa65cca6c7cdf42c2e1baf4db80549fdb02bdc934bed74e90c9cb1ba4bf7c67693ba9805d084233c2c035e9fdb7d25ee9bf44db2eb052baaf79f893b5ae7e4b00d65dc50f195b14bf2e8c26a45f709dc809fefb3f1e9147a8e3f0610fbfb780b3af984a7f357ebd2cd9500c83a1975b25f191c46e550c56e7fe10cc31343295605e037daea0c378a073b91add91303718474014fde911b9e616226bf1867a8a17a50ae30c211b7d530095b3f978ceaf12466ca5ac271cffd83fff1402407f4b51de360d2860f6ec4e3585f54014589c29b12d197841465d2b57b1137447717e4cbb84f881e493ec0250816943571f27e0ed3c8555d8fb113b1fec14e9b4a573a2a253f30e004e578f2888ec151e3ae9906bfd696f324e9cf6bd9d17335c553e6d5a1b0fe78f88895de01d18f1cc172d25813be03e3c689fc9f0740bf4583df0eac199c0731afcee0bafc63a8125073607a9b59be306fa816cb11ba79fcb968a06e4e44b92bd6ff7492c9186455537837d27b004abc0cae202aa7a08b53a40f10ddbeb1fc6db959a4bba3283d2aeacb7d6cd6efec2ba49437717e0c0b8cea6285d125cb1825a361b73038ec7de3749c50b670c86943900b000f1b0435cddce0a807dc4989db57fe012e3d381083cd8ed034a943f18bb9a5eb85d2f70f9c35963ff94439455e7cd047ae5a3152a458d1ba6a81fbc435e94fd6a5523b48d45cdbc45cae399c3d5f5a9dc0fff3b932ebc1efde8266f825b491edd91274f769187e4a48c60a5e002a4346969aa07185aa2469f68f2d4e9f60fb8d2d53333b96933731a5cfe98d9f37d063122898633bc73f83929c0ed491f2a02f0adf1228d87ebf6ec54742218c259bd6317b5e737f46b719cc4ae18fa79fbf0c104483635b1bc90bf26b80d1cedf49db2388477b097892ab052a709c019863514344de83240e9ad9e24826e181dcf0872033e8520295c7e225c0d9bc01391eeff63748e8795b7fd6493b18bcc12f62d99510e33f4e438e3fc123232fdaa0c57ee33a014b54ac2394b16c832dfdc244ad271680d122a0a61bb4fa9417d7791a32aad51a4aba4df94c0a19b2bdd6edbe7fe00092d2d4bf4eff2b2709fb0e0c5dde9db23f17c126a1dfd23e54ec07947874453866763cf2db195d195e8f7366fdf8c1a8d2e4e89c8eef2146174c98dd21209644e769ac881145056e25471c504a8161d37633ae93016aa8d1cceed8776b93b899a0630b8718c62d9cdd364575f407b003ef9438d22c8cbb7d495a882f359d0de1d3a024ceed211fb06f639858dce8e264478dffe9863fc4a131a24bcf781e4da6edf0d4986f15753c06575029f3bc98daace50b6b353530697a049200adb0b90f9b9e3bf19352514a85d4c8704f8d81359b37e35d536bfe731f90e9334480210c772b361f298f6aa058aed292fab52b33220cbc842677417f12babb38304b6a9752fdbe569db0bcd382f54de2edce9ae5355faeb56755dc75b1e4530c0e8b1bd5c2c3e54ff6d5891530e0a5ad7ffd473d4703abd332d45e965fbc0b44aeab53f3fa773db957f9711d0a4d36e7b4c673d28cbcc6874d6ef43e0b62a777ee0a81548da81e7082e0ec0ecaf2a26a6444a52d90097c8ad2608d37fade6189bb8ba25175743e5d3c221be9cbe8ba83bd62f1401c69335cff93f1083d0e9b68bbee107ac782543e6c19dbd276c395ecff82fd60cfc66f9306345db85d927dec002537f74d2b2cc384028012f921a4520dbef43c73f7ba05fd85bed21c53b4124b7215c8b1a4af760958956f0f21284d8588c5008f9b3ad0f90cd89082da8bc2191ae8148624a283674c381a3b13f4d9282782b37fcb593e2de7ebd4904324b0bb83df7e2584a33df52978ffa58c85198af2c51d21167008e3a7420d422ea3e95aa614c80f6aa452efe6cff2ae3635267659806d3db5c43706621223dae03af56695c605a4617c14877996fd3a196f04558bbcc16c4ecfc050541f41fbd1871bdfaa7c0ca3cdfb57a32f7aebc76d455e817d3375365d11cd4c5e69333564c6dca454a7d9aac9f245a10502164f5a5fe5ea1cc287ae761656a815eaa8c04e3a007fb81c9dc3da4d875a33d03aeea30871f4b128278b86fe584f407fc96d8251d9f01a9fc8dc98c5a8271c362d35b4ab90fb2ed65c55b08d36b6cdfac7125bf1a06bd22fb2f16334a9e66f48dee8d3047e7fb2f595fa928fd8b898b5b21ece14a18ae1371e52bbbdec907f3170a958b3733d3cb87ab509e1f6a8f49c98908ec0c99aabfe3c4857369a984d489bbb15c19e9e86da36d5cbefcbca3066e1ac696f6671e1f0d36afb0c62e7c236941928c228c4017afc645316e36a64ee47e28e267e8f71617f85519dc695d9694f22a07f061826e8c4104fa12e2b02c5d9a7d3b1f40ad4702eec731769c6be7c73806b4b7aa217263395705140b495430e79f6d14df06b704f30cde698369524b49b63b99f4525e5aca640641fe8e76bcb194f2cc4fd96029e9bcae33b7b6b294bb228060e3ce15bbc3110f4c53c1824733bd01d667f0ba99edfaaeffa4f92a0708ba747f0236833fe7860f73bde4327a67165bf05a3b7a942c1265514da39aaafd4c32121607f1eaa150dc0ba724e514ec45d6bffe653056a1f6580eb4f3e63acbab8db45525fac8ed8832830a770decb7547d8dbb8879b605b774e5617024aa1f5a043978ef4956f9ec43a3949d297c6d83dd97eaba37fa08108900c0de36493d467a7b170548e8396f65a806ed8e6ac7ec589d9ad2deff82fb4a29015fbf47410ddf9284d8b42aee3b0ab1dccd8e25654bb61b210691ccb951285d9b94a937e28e8fb27d9ad2ddd9eff8d36ec56d61f86227e984ac131897aa297084e62d233385faead41300b39fbac97309ae49e5faf7804aa63e3bb0586245695ca3f2f74cd9bb6078341935814f500980f3a3b60bfc6a8c7a83f05f7d8c5e8516eaf7e15497ad7b4b6ccde35c8c07fa4545a021731259c113cff47fa43dbb5e8d6a87b87026fee662ebdb05b1bac9b36b84a067507ab59461781129df20c2d0f9fef4fc69e7ac6578dae1d95f2eb4f07eecdb569700a42cd79c512e82a5bb0cab87b43411f8cb116ba641d35a962fe3800aa7cf4219431425d6f91d7dacd90f3ceb773a2c23f63285f8863c4c31e7f6cc17bdca1de7f436b0a3e5eacaaef1292e0026dfb7f16e325b38a66811eabf5ef3da792750c4e678a983a2cb22e3bc5230f56a5f8bf052996bf338641d81bd0c30b143c7906ea53b882b25ef8ad12165dee16581fcbfbf3a6c289175176d7640a2b0e4da86b9ee8a673f491c325fb8e372d33efd7c47866edec8eecac373de5d138da7a9865753ed44bb96a79ffacfbfb107ea5b5403834d9f297bc790b37a1f201fa1cb75820d66d72d85c8f050aa6ebc959bb911d4f9c7daf4b7f8afee9470c52c696c12c5e7f690e37f0debc48ff2a40987c8a2c912ca24c977028f5eb1523190ac9079e8b8c976ac0ce3c9a294e4e77635636acfdd983a109fd695b03fd3863ac82e9e99a1a1cb0fbe8be3c1174966f0b1dd2422117d25f9faefd70e4295c6577c9463958948fc8332be78aaeb703d3a13b66ddb400d7df27bdc3a889bc33fbf60324be49dfd7c4af2bb5f67bace6beff884c56ff13a143c46142a85830e236d06dacdb2cad030fdf54ac63fbb11d55be8c759166c5c153a1d12fc2b3317b8d045275fa4211b0af1d17674ece4634330b0db3f71323800557f2662697dc95e0aedd552e44e398bcae9d429d61cd6c31306fe9520e285aaf0530708506a3b62604ba7a58c51645bcb4425850e63bb6bbd0dcdf3b04123636ec6db99e3bec548443b0aeafc9a268a29492b304abd3eccb9591cc778cf1ba551a1be9e9366006997ed95ee10643f004b3a6ef7688129c27b3732063aff2a8cacd90dba98c19636424758ddc84ee90977288d95921afe2d7a9b9e9d3ea6f4ff3e668d44a89e7b8ad4f965dfa0ef65d4770ff9890397c8aea6e98c66321723f5f2773eed476e76d619ba166cc9a6b1de0a2710b32bbeb10e5a4ccecc3bf51608e7661735758ebeec5e83499c4f8f05efc8053006b88d741d133fc127b23d9d1e4355ff0831f9251487084139e4bcca632644fa0793cf5caab38cea85022eba522d3ff141a026cf97b7fd9da883bb49b4e40c8566b143dd0e915db7ef3beb302d3a961799536b874913569425579d95defa1666c659a36fcd22af8f1e7e4a295005e0d9deba59dd4e7e74de9ec4efa6393b1aa21f49022295f540ff7ae7d83f33c843ea4d9be946563be74a07ee31900dfbbac4c23a9b659fce0aea11f08273b27079a7dc56f45c8eca0b057745f82d910c12303fe98d75f1b0486435ad492976644da5a9c8d71e0376d5882607d3e223a48e5b000490d56797e6de388e36ccabd8e9fe2f05b175088afea0545584e1a93b95deb210f5cbf90004f114dc4d0d085ba43fc8927bcd237d557bb5b5afa9d800feb556b2f055051d1bddb13b1ed0f6b94a6f8f8a91e2b9b19e5a9d4fd26fb857680620fcb1fc1b708f56a404efc083d1f708b"}, {0x78, 0x1, 0x400, "20ea10af48dc6aec7f9fe9605579f9dfb4e2078c04422f17abb07f2735ca7c5f439da1abffb812cf0556d19ff814a8a968c32130279746482e1ace68bdc5c340a77edc8f8b14755036409eb0a5911950ed4c754b8810fe3b9cac8f5e6bc271cacfb9"}, {0x38, 0x115, 0x6, "e4661ad7f42bab0d3a5e9f70ddf56267499ec5974b0c3350e3ae2a9993aa8dbb32522509f0ca238f"}, {0x88, 0x117, 0x0, "73043d4568f8049f3eeef94198bdefb5a84101fc8ea77409c7090e265d4a20432117408453d33505b2a741d09bbadcce9a59c4f3fec0cc539d66ebf23889767ecfcdb1dd9fd9b3e3b904cf6705a969265db471e6ead7bbfbb9e5a9eca1b96231adf988901fdb13e1de61fdd14f07f999d553987fda93ce"}, {0x58, 0x117, 0x20, "048280c9f90cdb4f7a58cf49216f9e3343b1bbad6bb28d4ede3159daadb0f6ea311a8d446467305e0998c22670c796e909f772c5439906869f82f3297eef09f153b9db"}, {0x20, 0x100, 0x1000001, "585129dd57a644c66d42f8ab6758"}], 0x1298}}], 0x3, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:04 executing program 1 (fault-call:9 fault-nth:72): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800002, 0x12, r2, 0x69c0b000) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0], 0x2, 0x6}) 08:30:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) r1 = creat(&(0x7f0000002700)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002740), &(0x7f0000002780)=0x14) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x2000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @sack_perm, @mss={0x2, 0x919f}, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x20, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 216.711620][T11196] FAULT_INJECTION: forcing a failure. [ 216.711620][T11196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.725003][T11196] CPU: 0 PID: 11196 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 216.734111][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 216.744293][T11196] Call Trace: [ 216.747747][T11196] dump_stack_lvl+0xb7/0x103 [ 216.752614][T11196] dump_stack+0x11/0x1a [ 216.757128][T11196] should_fail+0x23c/0x250 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0x3, 0x3, 0x8, 0xfffffffe}, 0x14) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r5 = pidfd_open(0x0, 0x0) io_submit(0x0, 0x8, &(0x7f00000008c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x3ff, 0xffffffffffffffff, &(0x7f0000000280)="4b27301d5c710370943eeda9a4b6085c9df7d3a0e53e85645587be5729adfe76de0390986eb2093596853d2b2c29f1aff09c6e0cf9dc787eb66287fda3a2d11dd722e404ef03b18008590293d51ac7b1cefef98db185f09a08bb172471b2f58cacf02fcbeebfd6e8beca16551fa56dc3b258fb74ea446482d2ac1e45f4a4782bdbc591b30d8a69d51391e22b5100da02b8febefbcea256e0cbd06778e89110776ef6b2744ae5e4dde6986ccbe4bdb115aebbd500625fe4f4528efd028e39443ad2df3414eb20eb4ebce7062e595f3e9d63fd80e06f3b1d6b01bc", 0xda, 0x8}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f00000003c0)="e001a642756b6d9aa59f26dcbf4c835cb4b5ce393841a7c0c4f9b1f3b0ab0404a511ddbfe41b35abeaaf6243201d18db4a2d51c08f6a72ee9a4367c9e672a482cfa67bd08a70210cb006fe570fab7178bab8f97614c68d921b5addff39194ecbe7a7eabd1fc7c9c749d11c6f4b389a495c453e477488f080d557c9d915df28f875a867691b18", 0x86, 0xfffffffffffffff9}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x81, 0xffffffffffffffff, &(0x7f0000000500)="1c46c9395de207d2eff3f3d9ee7729d369e318d16293550771b19cad10b8ad2e31", 0x21, 0x3f, 0x0, 0x2, r2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000580)="9826f81a85e7", 0x6, 0x1ff}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x5, 0x56fa, 0xffffffffffffffff, &(0x7f0000000600)="575a741f89d623e73a48", 0xa, 0x0, 0x0, 0x3, r1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x400, r3, &(0x7f0000000680)="43bfa4d8e3a9bdc7f49491898e2c80f992e613342bd1ab", 0x17, 0x3, 0x0, 0x0, r1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f0000000740)="2bf6c34616f63d78d8db19508afb77eeab7aafc5ef6e12f170ab5ce42062221314759dfac9e8ac30855c5d3b54c1e5ef6b8156707716604e6eb3f6e3a8b68021b4987f72fc87954d9d5975a5c2e20d9e3a8360b3", 0x54, 0x894, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x2, 0x1f, r5, &(0x7f0000000800)="5f7d500a54fcffce69c9667ab1f1e65263efeeccadd7ae587902fc6f9af5b5c833b352e085017783b05b6d0b6e67784119b8cd929bbd4ff0e7b05efbeaab03b64dda60ee2d56610d4d259aa3fa85df77dc47020dd4766f16ade96b76601231a943a2b841a9a6d6", 0x67, 0x100, 0x0, 0x3, r2}]) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fcntl$setsig(r0, 0xa, 0x26) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x0, 0x961e, 0x3) mmap(&(0x7f00000e5000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0xcc7a7000) [ 216.761565][T11196] should_fail_usercopy+0x16/0x20 [ 216.766710][T11196] _copy_from_user+0x1c/0xd0 [ 216.771467][T11196] move_addr_to_kernel+0x7e/0x110 [ 216.776499][T11196] io_issue_sqe+0x2489/0x6870 [ 216.781531][T11196] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 216.787346][T11196] ? __list_del_entry_valid+0x54/0xc0 [ 216.792732][T11196] ? rmqueue_pcplist+0x145/0x1d0 [ 216.797809][T11196] ? mntput_no_expire+0x64/0x730 [ 216.802761][T11196] ? _raw_spin_lock_irqsave+0x25/0x80 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window, @mss={0x2, 0xb5}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 216.808351][T11196] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 216.814434][T11196] ? percpu_counter_add_batch+0xc0/0xd0 [ 216.820087][T11196] ? io_submit_flush_completions+0x31e/0x3f0 [ 216.826084][T11196] __io_queue_sqe+0xe7/0x360 [ 216.830762][T11196] io_submit_sqe+0x1695/0x3400 [ 216.835800][T11196] ? kmem_cache_alloc_bulk+0x289/0x340 [ 216.841527][T11196] io_submit_sqes+0x822/0xe50 [ 216.846207][T11196] __se_sys_io_uring_enter+0x1c7/0xa10 [ 216.851673][T11196] ? __fget_light+0x21b/0x260 [ 216.856715][T11196] ? fput+0x2d/0x130 08:30:04 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000240)={{r2}, "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"}) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 216.860701][T11196] __x64_sys_io_uring_enter+0x74/0x80 [ 216.866070][T11196] do_syscall_64+0x3d/0x90 [ 216.870498][T11196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 216.876556][T11196] RIP: 0033:0x4665e9 [ 216.880470][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 216.900247][T11196] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 216.908954][T11196] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 216.917015][T11196] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 216.924974][T11196] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 216.934247][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.942364][T11196] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socket(0x10, 0x3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) sendto(r0, &(0x7f0000000240)="3d7fd97f86958c935fb93ceb49acfadd3f02f5e016849e04cd6121b066cb3b857fd4473f32f76e7bba452b89b8787c9e9658cae75172abbcbad54371324c816a7e50a5a34fbbf44ee1e53b91720541e72961685e55dc70abb37714910c276a877e496fd1b2b566fedecd92fd36038bc06d99a4e1e3a7d231c57ed966061b50fae9c7ac3efb7ae79961fe9740598d9122dd374b9658493aea4c16cef1c9d5ed2e308bc7de6525da29bfd623714c1e985db61444e8d15f", 0xb6, 0x400400b0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x80000) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) shutdown(r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x40000000}, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x7, 'gretap0\x00', {0x4}, 0x1}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10010, r2, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000000780)={0x0, 0x3f}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:05 executing program 1 (fault-call:9 fault-nth:73): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:05 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7, 0x0, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xe, 0x0, 0x0, 0x1, 0xd}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100), 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x5a05, &(0x7f0000000000)={0x0, 0x9a23, 0x0, 0x0, 0x80000000}) 08:30:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e25, @remote}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) r3 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) write(r3, &(0x7f0000000180)="c36fbfe9ee0e7f", 0x7) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x1, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x647, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0xa209, 0x5}, @mss={0x2, 0x7ff}, @mss={0x2, 0x3fc}, @window={0x3, 0x8000, 0xc2}, @mss={0x2, 0x10000}, @timestamp, @timestamp], 0x7) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200080, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000016c0), 0x400000, 0x0) io_submit(0x0, 0x5, &(0x7f0000001740)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f00000002c0)="ea1a3709243e452dcb479ada3e33966eace0c9517b71dbfe4e87783378a247a2497b8cedb5e7eb0c5f99dd4952bde8aad9755e50c19f3f2b035b44fb60480fca3e3a18b07db42731fe8d0e1c5cf7500d71a12c028c0edb520c4e2036eb534042ddb07fac6cbe4bf3ef84e837bd6c88a6d5c2a7a8227a38e6be313a0256dbbc31d0728973496a6496d888fe786610e991c059cada4d76b37e2c84bb3348a3cca65d9691e0d97f677365d5dd362acab8c220460c84ba9de20d1b45fb789f290ddcad2d23e36d4e40f99f3ca81aeec15ecc5f8f4314bd2ca5944a3d9dd394a62d176c3be127f064fb00", 0xe8, 0x4, 0x0, 0x2, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x6, 0xffffffffffffffff, &(0x7f0000000400)="82eb6957f74d6e899923bfed0a4f48e90878a31d518f046db9752ef0a2164c78ccb177b4696d861bff9e04db50d3c2ee6f816490555812886a009a3e65719efc0179e339afc35dac7b18660963f506175d8f16851949e7643fc938889a9ae66210ba9468bddd87777f343dd4933f5ee748d1c86df54bfee1d3fa357bc351845a104e4d38305ed7818ea3bfe784797c2d0370430dea7be108eb6223b87025cc8aa457d77e4c1377d2174210310a24b95668db", 0xb2, 0x1f, 0x0, 0x3}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x7, 0x3, r3, &(0x7f0000000540)="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", 0x1000, 0x2}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x3, 0x7, 0xffffffffffffffff, &(0x7f0000001580)="fad2acb213a8303639a5bbb7fccc841262b38988f714d4893a44ec6db79a44b000a8d18783fd292d86b3e0f871619166052ba30864eb1ffce04d97a5b974f808d26de194181774a5b23227785f5a91839550b1d6e7a2f33eaa6ab69e1f31b9e3b91da38a3b9e321516668c77b20da5186af5c23721feef20cfaeea1c13d13022ef0b6af4136f230523665d95925d72d79e24c290292538ac1fdb4edbe098994a3491708e12ed", 0xa6, 0x7, 0x0, 0x2}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0xff01, 0xffffffffffffffff, &(0x7f0000001680)="cd2e8984fe3be61de8", 0x9, 0x9, 0x0, 0x3, r4}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x0) connect$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 217.587361][T11243] FAULT_INJECTION: forcing a failure. [ 217.587361][T11243] name failslab, interval 1, probability 0, space 0, times 0 [ 217.600135][T11243] CPU: 0 PID: 11243 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 217.609329][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 217.620563][T11243] Call Trace: [ 217.623922][T11243] dump_stack_lvl+0xb7/0x103 [ 217.628662][T11243] dump_stack+0x11/0x1a [ 217.633330][T11243] should_fail+0x23c/0x250 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/class/bdi', 0x440800, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f00000001c0)={'veth0\x00'}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window={0x3, 0x4}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 217.637805][T11243] ? dst_alloc+0x108/0x300 [ 217.642235][T11243] __should_failslab+0x81/0x90 [ 217.647214][T11243] should_failslab+0x5/0x20 [ 217.651761][T11243] kmem_cache_alloc+0x46/0x2e0 [ 217.656654][T11243] ? fib4_rule_suppress+0x147/0x270 [ 217.662095][T11243] dst_alloc+0x108/0x300 [ 217.666694][T11243] __mkroute_output+0x452/0xc40 [ 217.671557][T11243] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 217.677464][T11243] ip_route_output_key_hash+0xa8/0xe0 [ 217.682854][T11243] __ip4_datagram_connect+0x3e0/0x710 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x108) symlinkat(&(0x7f0000000100)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file1\x00', 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') linkat(r2, &(0x7f0000000380)='./file1\x00', r2, &(0x7f0000000400)='./file2\x00', 0x0) renameat2(r2, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1603, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x2000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 08:30:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss, @window, @mss, @sack_perm, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 217.688286][T11243] ? __inet_bind+0x560/0x560 [ 217.692948][T11243] ip4_datagram_connect+0x2a/0x40 [ 217.698085][T11243] inet_dgram_connect+0x107/0x190 [ 217.703119][T11243] __sys_connect_file+0xd3/0xe0 [ 217.707986][T11243] io_issue_sqe+0xf52/0x6870 [ 217.712824][T11243] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 217.718652][T11243] ? __list_del_entry_valid+0x54/0xc0 [ 217.724049][T11243] ? rmqueue_pcplist+0x145/0x1d0 [ 217.729037][T11243] ? mntput_no_expire+0x64/0x730 [ 217.734162][T11243] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 217.739741][T11243] ? _raw_spin_lock_irqsave+0x25/0x80 [ 217.745122][T11243] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 217.751030][T11243] ? percpu_counter_add_batch+0xc0/0xd0 [ 217.756618][T11243] ? io_submit_flush_completions+0x31e/0x3f0 [ 217.762611][T11243] __io_queue_sqe+0xe7/0x360 [ 217.767292][T11243] io_submit_sqe+0x1695/0x3400 [ 217.772112][T11243] ? kmem_cache_alloc_bulk+0x289/0x340 [ 217.777989][T11243] io_submit_sqes+0x822/0xe50 [ 217.782873][T11243] __se_sys_io_uring_enter+0x1c7/0xa10 [ 217.788335][T11243] ? __fget_light+0x21b/0x260 [ 217.792994][T11243] ? fput+0x2d/0x130 [ 217.797059][T11243] __x64_sys_io_uring_enter+0x74/0x80 [ 217.802501][T11243] do_syscall_64+0x3d/0x90 [ 217.806916][T11243] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 217.813150][T11243] RIP: 0033:0x4665e9 [ 217.817402][T11243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 217.837317][T11243] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 217.845713][T11243] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 217.853726][T11243] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 217.861824][T11243] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 217.869898][T11243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.878012][T11243] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socket(0x10, 0x3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:30:06 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:08 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:08 executing program 1 (fault-call:9 fault-nth:74): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) socket(0x10, 0x3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 08:30:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000240)=""/208, &(0x7f0000000180)=0xd0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) r3 = accept4(r1, &(0x7f0000000180)=@un=@abs, &(0x7f0000000240)=0x80, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) [ 220.590500][T11288] FAULT_INJECTION: forcing a failure. [ 220.590500][T11288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.603671][T11288] CPU: 1 PID: 11288 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 220.612449][T11288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.622861][T11288] Call Trace: [ 220.626244][T11288] dump_stack_lvl+0xb7/0x103 [ 220.630843][T11288] dump_stack+0x11/0x1a [ 220.635067][T11288] should_fail+0x23c/0x250 08:30:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wlan1\x00', &(0x7f0000000180)=@ethtool_test={0x1a, 0x2243, 0x3, 0x6, [0x2, 0x7f, 0x7, 0xe341, 0x6, 0x4]}}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x26, &(0x7f0000000180)=""/54, &(0x7f00000001c0)=0x36) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 220.639504][T11288] should_fail_usercopy+0x16/0x20 [ 220.644560][T11288] _copy_from_user+0x1c/0xd0 [ 220.649284][T11288] move_addr_to_kernel+0x7e/0x110 [ 220.654410][T11288] io_issue_sqe+0x2489/0x6870 [ 220.659165][T11288] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 220.665082][T11288] ? __list_del_entry_valid+0x54/0xc0 [ 220.670602][T11288] ? rmqueue_pcplist+0x145/0x1d0 [ 220.675559][T11288] ? mntput_no_expire+0x64/0x730 [ 220.680518][T11288] ? _raw_spin_lock_irqsave+0x25/0x80 08:30:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x80010, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x200000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 220.685897][T11288] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 220.691716][T11288] ? percpu_counter_add_batch+0xc0/0xd0 [ 220.697463][T11288] ? io_submit_flush_completions+0x31e/0x3f0 [ 220.703461][T11288] __io_queue_sqe+0xe7/0x360 [ 220.708304][T11288] io_submit_sqe+0x1695/0x3400 [ 220.713277][T11288] ? kmem_cache_alloc_bulk+0x289/0x340 [ 220.719276][T11288] io_submit_sqes+0x822/0xe50 [ 220.724146][T11288] __se_sys_io_uring_enter+0x1c7/0xa10 [ 220.729711][T11288] ? __fget_light+0x21b/0x260 [ 220.734460][T11288] ? fput+0x2d/0x130 [ 220.738542][T11288] __x64_sys_io_uring_enter+0x74/0x80 [ 220.744020][T11288] do_syscall_64+0x3d/0x90 [ 220.748466][T11288] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 220.754541][T11288] RIP: 0033:0x4665e9 [ 220.758703][T11288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 220.779885][T11288] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 08:30:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 220.789881][T11288] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 220.797950][T11288] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 220.806281][T11288] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 220.814345][T11288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.822444][T11288] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:08 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) creat(&(0x7f0000000180)='./file0\x00', 0x0) 08:30:08 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{&(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/23, 0x17}, {&(0x7f0000000180)=""/45, 0x2d}, {&(0x7f0000000200)=""/161, 0xa1}], 0x3, &(0x7f00000004c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000300)=@ax25={{0x3, @rose}, [@netrom, @remote, @null, @netrom, @rose, @null, @remote, @rose]}, 0x80, &(0x7f0000000380)=[{&(0x7f0000002a40)=""/4096, 0x1000}], 0x1, &(0x7f00000014c0)=""/104, 0x68}, 0x4}], 0x2, 0x2000, &(0x7f00000003c0)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:08 executing program 1 (fault-call:9 fault-nth:75): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 220.940452][T11326] FAULT_INJECTION: forcing a failure. [ 220.940452][T11326] name failslab, interval 1, probability 0, space 0, times 0 [ 220.953301][T11326] CPU: 0 PID: 11326 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 220.962194][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 220.972259][T11326] Call Trace: [ 220.975539][T11326] dump_stack_lvl+0xb7/0x103 [ 220.980228][T11326] dump_stack+0x11/0x1a [ 220.984652][T11326] should_fail+0x23c/0x250 [ 220.989211][T11326] ? dst_alloc+0x108/0x300 [ 220.993712][T11326] __should_failslab+0x81/0x90 [ 220.998487][T11326] should_failslab+0x5/0x20 [ 221.003000][T11326] kmem_cache_alloc+0x46/0x2e0 [ 221.008245][T11326] ? fib4_rule_suppress+0x147/0x270 [ 221.013562][T11326] dst_alloc+0x108/0x300 [ 221.017902][T11326] __mkroute_output+0x452/0xc40 [ 221.022873][T11326] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 221.029057][T11326] ip_route_output_key_hash+0xa8/0xe0 [ 221.034572][T11326] __ip4_datagram_connect+0x3e0/0x710 [ 221.040214][T11326] ? __inet_bind+0x560/0x560 [ 221.044986][T11326] ip4_datagram_connect+0x2a/0x40 [ 221.050022][T11326] inet_dgram_connect+0x107/0x190 [ 221.055129][T11326] __sys_connect_file+0xd3/0xe0 [ 221.060347][T11326] io_issue_sqe+0xf52/0x6870 [ 221.065121][T11326] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 221.070987][T11326] ? __list_del_entry_valid+0x54/0xc0 [ 221.076601][T11326] ? rmqueue_pcplist+0x145/0x1d0 [ 221.081696][T11326] ? mntput_no_expire+0x64/0x730 [ 221.086731][T11326] ? _raw_spin_lock_irqsave+0x25/0x80 [ 221.092367][T11326] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 221.098230][T11326] ? percpu_counter_add_batch+0xc0/0xd0 [ 221.103799][T11326] ? io_submit_flush_completions+0x31e/0x3f0 [ 221.110002][T11326] __io_queue_sqe+0xe7/0x360 [ 221.114773][T11326] io_submit_sqe+0x1695/0x3400 [ 221.119935][T11326] ? kmem_cache_alloc_bulk+0x289/0x340 [ 221.125413][T11326] io_submit_sqes+0x822/0xe50 [ 221.130111][T11326] __se_sys_io_uring_enter+0x1c7/0xa10 [ 221.137109][T11326] ? __fget_light+0x21b/0x260 [ 221.142416][T11326] ? fput+0x2d/0x130 [ 221.146461][T11326] __x64_sys_io_uring_enter+0x74/0x80 [ 221.152169][T11326] do_syscall_64+0x3d/0x90 [ 221.156657][T11326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.162629][T11326] RIP: 0033:0x4665e9 [ 221.166524][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:30:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000180)={0x1000, 0xfffffff9, 0x5, 0xfffffffb, 0x952}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x7, 0x0, &(0x7f0000000080)) sendfile(r0, r2, &(0x7f0000000180)=0x7, 0x200) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x81) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = syz_io_uring_complete(0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000240)="203cb5423d32069f96bc8dabb6240f677c3d5e1f4c06c8e115c6b927d8880cae8f053380bddce9df775f8786972a179f72b175772ff8ffc452294c3e9bd3827cc349da392d922fdeac4e9a2c3d86e0b8345f01401b3952b9fb625411d0ef171262a13063530034ce7bcc7a60d89a7aac872bc533bdc1f47a5a0e2e1ec5b49aaa1ff56a66ac8264d2b195febd4156802027611a7c19f793b8db36da2b7b4cd4b965b2bc04c3c1381510b6e9ad483c13e4024675eae15352bb30a6ce6c23ced28ccba08b462067c2c4ad8bdc4e907ac8d9d318a58ad59267cd3c1862c04f6d6fdebdb73e6b76c67701888621a5d672c4", 0xef, 0x20000041, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000340)={0x482, 0x3}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 221.186395][T11326] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 221.194992][T11326] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 221.202971][T11326] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 221.211201][T11326] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 221.219259][T11326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.227425][T11326] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) 08:30:09 executing program 1 (fault-call:9 fault-nth:76): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000240)=""/177, 0xb1}, {&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/166, 0xa6}], 0x6, 0x2, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000001680), 0x0, 0xd9c, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000680)={{r1}, "90b265d868c4c6ef52cdd6fddd4f653a4a5adaf0984dbbfb6851a922ac9d4e9ccafe7203bce2231b43aa7d556dfd5d81106f9add24c1be6369d000136187d432a535a5ffa8058a6938ca992f803438beed741044593f36a4c7ea4fb2cd37cab140c25ee7c526f2435b98607fdaf10e177b906c2910a70a44ee608c718f6641b98ab523f285c0bcc8f2155539185bbb5613cb744da0b43711884815ca03b71b84111758c5984ad55bf1580f7e30f80d4a61b44d64bf8b3057be1f6ac9e69c2c9f29b26bf06e0484626272f48fdb27671efabfea3f5f42b398978b55e78cbef8f6ad3625e2a691f536251d58e739f092e2c18ba83404cae437d898066380ff68e7d26e815cf443459be6aa5b3601dd57a34aef39eb7093db666104434d2cd54e298c74a7198b6cd038bfb22be24f3fcd2c4918989e4043c2dc50a3acbd71a64f177c73c3abad14d8d1c60b00636661bba2ae71b005d7427f37f06390cdec4229b319fba22f0a0ddae1c3bd54b65e4f9b9d62d5c11b291ca7136abcb3dc98d185c7f3b26b98a55c7bc3a9a11d9035509f57c9409ed03bc1d3a1cb388a401b6cae7787ba99e1706f86c3dd28d35ceb6b79df319cf3a6551212ae2f09fd9953c260da877a170eb32cfb0f15765ed63fac132d28b0d311c7e1c9be9c458860c382f5ab4b33ee9681391720ca4d419d73d1bf0c86037b03da41d402816c68ff8d922de3eb24c2784274a3e2f8c71d14e23793b3e00419f0fcd6604f72377e4ec6f82a72aa68588bb3662270b4a7fddaf05462869ac030afcbd171b1db64adea6e93699c47d2663e73109e1d8494d6a45d7663f7dfb18f7ee5996b7ef97c4f01d02a344b54134a18ca9e31d205c7606d1c517c730ef4eb3b7cc60942326ddf0053adec669bd4d97dfe4c37eabde71221d9f55396368d8f8f5964c0e594a9b47e170983448c6e3f47d6c52a0b6c64670b75532a9bec98fff321a7134eae2cdba094b51cbaa18f84b9cd48556d478f88d78b62dadc6af3a427b5be71e96fa1e8ed3d81659de34ba359d183a9bbd4f27fa0bc7fd90976c0818e4ab84b9f68e01745548f55d124dec9144daf9dc65a90ea99f89add8f983988820473cb6201639003b00fd7bd664bf587f58038c2c266c75a762e17243195a7b8cd67ffbafb098e8999e94b0fbdc0a2d740c00897ce334ce6db01762a27f0066b09574776b58bf856a3c65e3666600d84c12b34522954b250df28cd7e3b8effbaaca60492d648158d426b7b08e7b50d76a74dfec9f45e4f2f4020da367e33731ac0c128878e69a583c7290dcf09fa393ca4323586f0940c1ae0d3ab31b63d74178a56fc1b6ffc32544d9e0743978ec70901fb89d70b02e33af02f537e9062abadd5745bc02afb6c21a91029cd8ed68b498431811b8b8d321d3edcd82fde821cde1ba52575f45f329a0c6af660c310a1f1fdd17c28c83b3c02b0ce6e876d18851f265f5eccd058293e5b5874640aaf473baeff82e1d86039d0b0c43cff6e395dbc68be3fd5084ac68bdc6bda6257202b28f1e488c9073da7025a58f5d11338c37c1815c389033632d97909e5614eea6848dfac393f3ed29fdb8e377a3e3a7f51095a217ba68aa7a37949099a78e7931ab321cf16b939d32306e1a4f115c81865d94819fed92ea249bec2a9bc2108e572e62a5fdead1c650e02fa2b21ec8098781fd60fb02e023f96dd44141f004500563fb5bb2801e3d06a4ea5ca11153882ca44cf0b3ebb44eb0336e7dc96ee5369e0aafa0c5f19a73d1c4617fda65f5b1d66e4ad441616c43f0b4a27c121659e1ec9f2a346b191da5c6ba7ee3705e2f8c204c29911202a55a3dcd1b8cc881017f2d153677ccda55c5830b4a13634df58aed7fdf91fe9f283c04d76511661204b11932e40127a13c787ea820ab5745122d8ae76e13d84f0a91f82fc92b0291ab0dc4d112cb5db1e19eecf2a7456987e9bd66c6cbcab0e3ba3ced650ea66f5e0893006468a93e33d0d510219a7602dcc0e8f4ce81b208912c3c85cbcef2cb4aed66befa59a50b1cd0d7a8925c039d3e4120e517b3d71d6943915bbb2c95861874c8e1d3a4b0a62d983b490750612935a8f45bb02e5ba4eff4af85dacba20d3f9cb46f97291ced4331a931b4356c1131422c683a16b2394ed834dc1e47024ccaf5a955a0a16e2ca06aad15aec1dd3f3d7a212355348a062208d0cb0b945f57b9c71bfcc05be22e82b2d38decc010b4b1873c2a0a7c8c33cf7a1c87adac5ca04c3b6e3f75b2e7b3a7480b5de8c532a4540a267f0aed365876f73f921f7ec01153862c3caac485e654d2ce62232ca0137973236fb73708a82ab76432d2b83e9bba22ee3111a6c3f8ce79bdd9e87142766631ae7ec6f05c968ec87d3dcde8582c285ec39b83ecca3e9904f6acbb715e5fec7e799e808bb5ddab5033f54022ea59b21ce7a57312877b11566d9f04ae943979c079e98785bc6b1ec81262ed97ea08b7aeea9f8dcd1fb7388d26dfe3f51ab369c11301f428b8fa802d56452ddec13e31bfa94acae014ad0b052924fbc0f92104d48d2b5301ac710cc4640af9f003dd338d8f852eb0f71a245f0f75b5583560ab31f3b049b10fcde2d17316ec5a997fa9e82546d9ab327dce434bd0e91d76b2a60e11cc8a59f4491ffb48b00054d748fe35e6c5994f484f761cbdea0102ef2e40efa668664bd6889bbf008b7daff53114e8a038a63f03e30de04a7f8cf62b8c9135105e00a3a56320fa8e954f09d7647b175ad152d8180dd2f737256e793f9d3e45e9bb09a7b519393b0d1665d673fffafa334aa14bd967bf3a4d36ac959c72436f73be714dd37b254e33d29dbb0de2321cc0ee4220b3f04be3e8340d539ac6d99093b9114fd5a0e36512f2aee6c065a0c0701d6ba933c5cb57d5f891217c0f7f5294c10ea1fd8de09c50e44191470195ddc660d003b7ca09481d7b6b5b19497637e93fb37a65e70ec3e4ea415765650d6f918ad956ae52ff9c13275c587bcac1d6405f6d8bd48156031f6a27fb6a41b84f53b26df876a4b3cd10e781dd8414c32f694c0a23456a5856e7b98e605aa8e55cec76b4486a594b7f3cfd5b8e64a6c85112aaa52262d35d1a67f82bd99667b7ff748610f8675cbb2c58675a71ae3b6ea18655ce99208ef5028956a43e8a93135a82947f8f8e19ebf79d204315e9ed731e69fa81b9f4042f237d1ffeeb21469521909565453691e4e3182c43d0217423e08b87deaeb732b8c921b61c557fc3159d3c2795eb7e6eb5ea11ce740d46bcd41a6ef0991176df260f4d261b8b7b2e1c670817d3862d1ed45e3b6592e5cac0d21fb74de69c7ec6921baafb034563c0e860d7770cc331ae6435a3d8df6c1acf26206195b392512e8055d131062d86ad7a6b211b4f7238ef868f281b2b111c7f26457aa6c40a69837917d80ad785bac7a242b4880d014d69c957dc9d11b3d105dad91d2627c4065d3abe862947f4fe1e9eeda7ec55e7a03116a8fb5105a29c4c65c9bbfee015317757f3ec58cc31baac7155772f9506e896aba2fc9a59935ccb82c9b2e8d0461829c8fc830ad038470ed613570029859d01e469a2fa061a67b28bb58fa1490aa8579c737857362b349c8b7eb1ee6fe6ac9a29fffe902f5bf2be090f4835cf4b04a7a9b2f087a4e7fd31b71765104c727936196345f9bbb7fdce8d90157955a701525d1820c910a0d80cdd92fe097e9a8ccaba8a4fb85eae1c3d618c19e8b6d2741513872842bfafc1bb9fa63dcd3ee7682c76664e7252722cf5f01f3c2fcd3d00198be76379ac7222b24ceca64aba7bd462cb86833365f0df310f8b82680262e84c2dae421df47728de657c63f67cd61705e94de5d281b3cfcfe4ef4d05782a78f6343603134c7ff4548bc98c19f756b9f54468db6e3650467ddbda917142ea7130ed836c7afab43c42286f3077213aaf539905e9ee9934ef1f6fe8be0c328c68fa2c5c51ced3ac821fa1f04b9099a0675383e4dac2c8e466a34e11d47077807591acb34692ceb9ff16189b93c7c54d54f0af36e3339d9ed560501101f6da3086a869868344d4dcfe92e02e257abe8c48f635753474a93214fbed592acca835cd4583ec406c0dde6131da9da3afd4254139ff2555ac4ff66ca5d5fe96d6eeb5c68e2bc38c69fddd90495cf8270fb5fa4bd477b74cf65f7732f4c2043a9cd73942768e76819688d9c1b791d6f29f3b34115c81c177218a0f465efed7022798cdf4a75bba7eebf008514a2b05fa8c87a119ff856c512e3458ef1a9a0670402450ea231d1c73b2f3e127e8c09062ae8280443a98ba208e3ecbca172b3585683b2787ea121f3f31e397537dfd07d503e3e2cd8fa327ad67716fe8f7e95dff2ba5db27bf47604da6f48390d7f8b531798760271144994da0262b7571dfcb74641ddd671ded3241b37be49dbb83a7213b8c67426b020c80896f3c8f8a486fdf7e8566e3d569adcc7aafedde907a9f378ab344cff745727c6fc8008c7a3112c372fad8dceaecffacfa844d3813cd4b0ed35957ebdfe171cd3811eb9c2dd972717cb6b74ca8eca8805d9727740097b01db9276403fcf0ce3ed03495072343bbcfa961af5924e3ba1436c15bcad5f53ca4310ef0ea6b0d9a3cc16e1d0e51596735c7c987ca95e6f8d60d90670b3c0740413abc08c3b5b9a04fd9a3c312276452f875117adc71e8dad81505679a2f838f3c023e522d7127f7f1b0f5a357385d3a0d4d3e5ce901b5b64af9d765c474c16577e6826fc06c1822ce73f73b016cb29a368453f89114a4b1144854627d9de1104295aecd20f023d710dae85af3fda441b363c7e5616eb763db6435e15c317a83f0691eecba67ca4460955f06811ca25f1fbf1b28e66caa8c154b29c7169505c4da98b04fd97c21c0333a8969bd8834df31d913dff0456664b69215108e7c5c0eed30090fbd721e211d399fbc235159b28cc5eef4b987e9313a4cbea5c6d1c0f76ba3ceb2e9584a3956543d2df1a0d49c0382e6d58f163e89f42aaf0e566b598076ebb2155c425d23ef3574c36bcd3041dd2873fe7f522c3b36c8b3758ab40e66e233a922d75e336ffc52244bb6990695b6c4c02309893b96e3e1b956ed824e47c684fe485c6e6e16e47f42c6705e7b31a5ac476c82dd789bd5c2651f23d1fd2538c904983339cec53f53041e7998d366787dcd36a7431f5318f4724bc8f1057955a7468565148664db4cd42ee9359f69bfa64446ac01d807eb6528efde89d1e3c8971f324a2b05f83c3b769f48e6607a38e866276db6be6383af2f2715313f560ace40564b0251f6fe15dea49ac6ec2b7d6296ece5171feaabcd176e4cadf0914d301abefbff0a55a0f24d4b1ff7f4946a568c9badc647f723eaa16541ceebd37f6cead2b57097fbc216164b2c3fddcb0d2da2febe48eadd81866cf8d3f38d5dfb049c77fb70106b1b7b5dba98de7fce0053e2f247bb084796cdbdef21bbc5aac6b5c5ba9e07136868420eb7a846e9741f800cc8ee4357442484e65df287aecc6c61a51b124c8dc875898587469824f59a4a33e10a2c04a6da34baae4e0d280f78b6dffaa7cf3b01040ea7c974163b02c684042f872acac15eb2b29893aaab0750320614b2b424968be2a02a5c811408681c9fb046eedc2a30809de43d29f6a31fe7a59727819ddf4e6bfa1324b972e2c9c2a3b1c4f2763d5b34073ad6055aec949c5f4154af5b808ffac3a88afefd00405868f12b968b1fa0cac953d025ccdf2d2aa65617cf967b31bd445efd769e2dbc933ceb281bd54"}) bind(0xffffffffffffffff, &(0x7f0000001680)=@llc={0x1a, 0x302, 0x1, 0x80, 0x4, 0x81, @local}, 0x80) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) [ 221.462275][T11349] FAULT_INJECTION: forcing a failure. [ 221.462275][T11349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.475926][T11349] CPU: 0 PID: 11349 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 221.484930][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.495345][T11349] Call Trace: [ 221.498875][T11349] dump_stack_lvl+0xb7/0x103 [ 221.503586][T11349] dump_stack+0x11/0x1a [ 221.507774][T11349] should_fail+0x23c/0x250 [ 221.512199][T11349] should_fail_usercopy+0x16/0x20 [ 221.517355][T11349] _copy_from_user+0x1c/0xd0 [ 221.522288][T11349] move_addr_to_kernel+0x7e/0x110 [ 221.527856][T11349] io_issue_sqe+0x2489/0x6870 [ 221.532645][T11349] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 221.538463][T11349] ? __list_del_entry_valid+0x54/0xc0 [ 221.543879][T11349] ? rmqueue_pcplist+0x145/0x1d0 [ 221.548972][T11349] ? mntput_no_expire+0x64/0x730 [ 221.554232][T11349] ? _raw_spin_lock_irqsave+0x25/0x80 [ 221.559791][T11349] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 221.565625][T11349] ? percpu_counter_add_batch+0xc0/0xd0 [ 221.571253][T11349] ? io_submit_flush_completions+0x31e/0x3f0 [ 221.577226][T11349] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 221.582926][T11349] __io_queue_sqe+0xe7/0x360 [ 221.587581][T11349] io_submit_sqe+0x1695/0x3400 [ 221.592518][T11349] ? kmem_cache_alloc_bulk+0x289/0x340 [ 221.598116][T11349] io_submit_sqes+0x822/0xe50 [ 221.602988][T11349] __se_sys_io_uring_enter+0x1c7/0xa10 08:30:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000002c0)=0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="5690b3b674679a958422b22c98bf4d060246d4e87b49128ff003", 0x1a, 0x7}], 0x480, &(0x7f0000000300)={[{@jqfmt_vfsv1}, {@sb={'sb', 0x3d, 0x7}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@nobarrier}, {@grpjquota}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@debug}, {@norecovery}, {@journal_async_commit}], [{@fowner_gt={'fowner>', 0xee01}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@context={'context', 0x3d, 'root'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@euid_gt={'euid>', r3}}, {@measure}]}) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) 08:30:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000140)=""/121, 0x79}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000002c0)=""/15, 0xf}, {&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000500)=""/251, 0xfb}], 0x7, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() write$eventfd(r3, &(0x7f0000000080)=0x100000001, 0x8) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1f) [ 221.608676][T11349] ? __fget_light+0x21b/0x260 [ 221.613630][T11349] ? fput+0x2d/0x130 [ 221.617533][T11349] __x64_sys_io_uring_enter+0x74/0x80 [ 221.622941][T11349] do_syscall_64+0x3d/0x90 [ 221.627359][T11349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.633381][T11349] RIP: 0033:0x4665e9 [ 221.637439][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:30:09 executing program 0 (fault-call:1 fault-nth:0): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 221.657387][T11349] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 221.666156][T11349] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 221.674291][T11349] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 221.682702][T11349] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 221.690328][T11366] FAULT_INJECTION: forcing a failure. [ 221.690328][T11366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.690891][T11349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.713701][T11349] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 221.721895][T11366] CPU: 1 PID: 11366 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 221.730678][T11366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 221.741126][T11366] Call Trace: [ 221.744612][T11366] dump_stack_lvl+0xb7/0x103 [ 221.749281][T11366] dump_stack+0x11/0x1a [ 221.753479][T11366] should_fail+0x23c/0x250 [ 221.757963][T11366] should_fail_usercopy+0x16/0x20 [ 221.763011][T11366] _copy_from_user+0x1c/0xd0 [ 221.767610][T11366] __copy_msghdr_from_user+0x44/0x350 [ 221.773447][T11366] ? __fget_light+0x21b/0x260 [ 221.778140][T11366] __sys_sendmsg+0x135/0x270 [ 221.782745][T11366] ? kstrtouint_from_user+0x104/0x130 [ 221.788199][T11366] ? fsnotify_perm+0x59/0x2e0 [ 221.793178][T11366] ? __fsnotify_parent+0x32f/0x430 [ 221.798305][T11366] ? get_pid_task+0x8b/0xc0 [ 221.802976][T11366] ? vfs_write+0x50c/0x770 [ 221.807755][T11366] ? __fget_light+0x21b/0x260 [ 221.812415][T11366] ? perf_trace_sys_enter+0x4d/0x2c0 [ 221.817975][T11366] ? fput+0x2d/0x130 [ 221.822033][T11366] ? syscall_trace_enter+0x153/0x290 [ 221.827605][T11366] __x64_sys_sendmsg+0x42/0x50 [ 221.832358][T11366] do_syscall_64+0x3d/0x90 [ 221.837022][T11366] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 221.843234][T11366] RIP: 0033:0x4665e9 [ 221.847208][T11366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 221.866991][T11366] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.875828][T11366] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 221.884216][T11366] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 221.892180][T11366] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 221.900169][T11366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.908451][T11366] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 08:30:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=""/193, 0xc1}], 0x1, 0x3ff, 0x6) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x4080, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = getuid() mount$9p_xen(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000, &(0x7f0000000300)={'trans=xen,', {[{@access_user}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise}, {@euid_eq={'euid', 0x3d, r4}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@seclabel}, {@uid_lt={'uid<', 0xee01}}, {@appraise_type}, {@smackfstransmute}]}}) 08:30:09 executing program 1 (fault-call:9 fault-nth:77): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:09 executing program 0 (fault-call:1 fault-nth:1): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 221.985642][T11377] FAULT_INJECTION: forcing a failure. [ 221.985642][T11377] name failslab, interval 1, probability 0, space 0, times 0 [ 221.988470][T11380] FAULT_INJECTION: forcing a failure. [ 221.988470][T11380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.998908][T11377] CPU: 0 PID: 11377 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 222.021316][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.031461][T11377] Call Trace: [ 222.034760][T11377] dump_stack_lvl+0xb7/0x103 [ 222.039379][T11377] dump_stack+0x11/0x1a [ 222.043638][T11377] should_fail+0x23c/0x250 [ 222.048040][T11377] ? dst_alloc+0x108/0x300 [ 222.052790][T11377] __should_failslab+0x81/0x90 [ 222.057802][T11377] should_failslab+0x5/0x20 [ 222.062548][T11377] kmem_cache_alloc+0x46/0x2e0 [ 222.067567][T11377] ? fib4_rule_suppress+0x147/0x270 [ 222.072851][T11377] dst_alloc+0x108/0x300 [ 222.077445][T11377] __mkroute_output+0x452/0xc40 [ 222.082311][T11377] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 222.088194][T11377] ip_route_output_key_hash+0xa8/0xe0 [ 222.093559][T11377] __ip4_datagram_connect+0x3e0/0x710 [ 222.098937][T11377] ? __inet_bind+0x560/0x560 [ 222.104071][T11377] ip4_datagram_connect+0x2a/0x40 [ 222.109335][T11377] inet_dgram_connect+0x107/0x190 [ 222.114439][T11377] __sys_connect_file+0xd3/0xe0 [ 222.120144][T11377] io_issue_sqe+0xf52/0x6870 [ 222.125097][T11377] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 222.130902][T11377] ? __list_del_entry_valid+0x54/0xc0 [ 222.136463][T11377] ? rmqueue_pcplist+0x145/0x1d0 [ 222.141384][T11377] ? mntput_no_expire+0x64/0x730 [ 222.146390][T11377] ? _raw_spin_lock_irqsave+0x25/0x80 [ 222.151949][T11377] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 222.158177][T11377] ? percpu_counter_add_batch+0xc0/0xd0 [ 222.163721][T11377] ? io_submit_flush_completions+0x31e/0x3f0 [ 222.169704][T11377] __io_queue_sqe+0xe7/0x360 [ 222.174371][T11377] io_submit_sqe+0x1695/0x3400 [ 222.179115][T11377] ? kmem_cache_alloc_bulk+0x289/0x340 [ 222.184560][T11377] io_submit_sqes+0x822/0xe50 [ 222.189220][T11377] __se_sys_io_uring_enter+0x1c7/0xa10 [ 222.194664][T11377] ? __fget_light+0x21b/0x260 [ 222.199380][T11377] ? fput+0x2d/0x130 [ 222.203271][T11377] __x64_sys_io_uring_enter+0x74/0x80 [ 222.208625][T11377] do_syscall_64+0x3d/0x90 [ 222.213024][T11377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.218971][T11377] RIP: 0033:0x4665e9 [ 222.222857][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.242998][T11377] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 222.251583][T11377] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 222.259633][T11377] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 222.267779][T11377] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 222.275729][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.283774][T11377] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 222.291873][T11380] CPU: 1 PID: 11380 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 222.301279][T11380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.311330][T11380] Call Trace: [ 222.314695][T11380] dump_stack_lvl+0xb7/0x103 [ 222.319339][T11380] dump_stack+0x11/0x1a [ 222.323582][T11380] should_fail+0x23c/0x250 [ 222.328113][T11380] should_fail_usercopy+0x16/0x20 [ 222.333185][T11380] _copy_from_user+0x1c/0xd0 [ 222.337776][T11380] iovec_from_user+0xc4/0x2d0 [ 222.342468][T11380] __import_iovec+0x57/0x2c0 [ 222.347319][T11380] ? _copy_from_user+0x94/0xd0 [ 222.348795][T11383] FAULT_INJECTION: forcing a failure. [ 222.348795][T11383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.352089][T11380] import_iovec+0x69/0x80 [ 222.369795][T11380] __sys_sendmsg+0x1ab/0x270 [ 222.374404][T11380] ? fsnotify_perm+0x59/0x2e0 [ 222.379149][T11380] ? __fsnotify_parent+0x32f/0x430 [ 222.384282][T11380] ? get_pid_task+0x8b/0xc0 [ 222.388804][T11380] ? vfs_write+0x50c/0x770 [ 222.393231][T11380] ? __fget_light+0x21b/0x260 [ 222.397965][T11380] ? perf_trace_sys_enter+0x4d/0x2c0 [ 222.403361][T11380] ? fput+0x2d/0x130 [ 222.407336][T11380] ? syscall_trace_enter+0x153/0x290 [ 222.412602][T11380] __x64_sys_sendmsg+0x42/0x50 [ 222.417437][T11380] do_syscall_64+0x3d/0x90 [ 222.421851][T11380] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.428522][T11380] RIP: 0033:0x4665e9 [ 222.432501][T11380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.452089][T11380] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.460520][T11380] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 222.468508][T11380] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 222.476545][T11380] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 08:30:10 executing program 1 (fault-call:9 fault-nth:78): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:10 executing program 3: r0 = syz_io_uring_setup(0x2dc0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x34c7, &(0x7f0000000200)={0x0, 0x685, 0x4, 0x1, 0x3d3, 0x0, r0}, &(0x7f0000478000/0x1000)=nil, &(0x7f00004cd000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) r4 = syz_io_uring_setup(0x6cba, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000379000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(0x0, r3, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r7, 0x76bd, 0xce67, 0x0, &(0x7f0000000000)={[0x2]}, 0x8) [ 222.484671][T11380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.492925][T11380] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 222.500893][T11383] CPU: 0 PID: 11383 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 222.509853][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.519904][T11383] Call Trace: [ 222.523260][T11383] dump_stack_lvl+0xb7/0x103 [ 222.527965][T11383] dump_stack+0x11/0x1a [ 222.532137][T11383] should_fail+0x23c/0x250 [ 222.536600][T11383] should_fail_usercopy+0x16/0x20 [ 222.541701][T11383] _copy_from_user+0x1c/0xd0 [ 222.546290][T11383] move_addr_to_kernel+0x7e/0x110 [ 222.551412][T11383] io_issue_sqe+0x2489/0x6870 [ 222.556159][T11383] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 222.561963][T11383] ? __list_del_entry_valid+0x54/0xc0 [ 222.567341][T11383] ? rmqueue_pcplist+0x145/0x1d0 [ 222.572366][T11383] ? mntput_no_expire+0x64/0x730 [ 222.577302][T11383] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 222.583122][T11383] ? _raw_spin_lock_irqsave+0x25/0x80 [ 222.588770][T11383] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 222.594583][T11383] ? percpu_counter_add_batch+0xc0/0xd0 [ 222.600413][T11383] ? io_submit_flush_completions+0x31e/0x3f0 [ 222.606478][T11383] __io_queue_sqe+0xe7/0x360 [ 222.611174][T11383] io_submit_sqe+0x1695/0x3400 [ 222.616235][T11383] ? kmem_cache_alloc_bulk+0x289/0x340 [ 222.621726][T11383] io_submit_sqes+0x822/0xe50 [ 222.626405][T11383] __se_sys_io_uring_enter+0x1c7/0xa10 [ 222.631873][T11383] ? __fget_light+0x21b/0x260 08:30:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) 08:30:10 executing program 0 (fault-call:1 fault-nth:2): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 222.636545][T11383] ? fput+0x2d/0x130 [ 222.640448][T11383] __x64_sys_io_uring_enter+0x74/0x80 [ 222.646000][T11383] do_syscall_64+0x3d/0x90 [ 222.650415][T11383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.656504][T11383] RIP: 0033:0x4665e9 [ 222.660431][T11383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:30:10 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r0, 0xb515c000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @remote, 0x1}, 0x1c) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() mmap(&(0x7f000049b000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x95e20000) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r5 = signalfd(r0, &(0x7f0000000080)={[0x6c]}, 0x8) readv(r5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/236, 0xec}], 0x3) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 222.680611][T11383] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 222.689294][T11383] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 222.697453][T11383] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 222.705682][T11383] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 222.713803][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.721779][T11383] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:10 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x5}, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:10 executing program 1 (fault-call:9 fault-nth:79): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 222.736908][T11396] FAULT_INJECTION: forcing a failure. [ 222.736908][T11396] name failslab, interval 1, probability 0, space 0, times 0 [ 222.749737][T11396] CPU: 0 PID: 11396 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 222.758790][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.769075][T11396] Call Trace: [ 222.772451][T11396] dump_stack_lvl+0xb7/0x103 [ 222.777392][T11396] dump_stack+0x11/0x1a [ 222.781786][T11396] should_fail+0x23c/0x250 [ 222.786469][T11396] __should_failslab+0x81/0x90 [ 222.791955][T11396] should_failslab+0x5/0x20 [ 222.796643][T11396] kmem_cache_alloc_node+0x58/0x2b0 [ 222.801962][T11396] ? __alloc_skb+0xed/0x420 [ 222.806470][T11396] __alloc_skb+0xed/0x420 [ 222.807748][T11405] FAULT_INJECTION: forcing a failure. [ 222.807748][T11405] name failslab, interval 1, probability 0, space 0, times 0 [ 222.810813][T11396] netlink_sendmsg+0x4c4/0x7c0 [ 222.810837][T11396] ? netlink_getsockopt+0x720/0x720 [ 222.833504][T11396] ____sys_sendmsg+0x360/0x4d0 [ 222.838274][T11396] ? import_iovec+0x69/0x80 [ 222.842767][T11396] __sys_sendmsg+0x1ed/0x270 [ 222.847429][T11396] ? __fsnotify_parent+0x32f/0x430 [ 222.852670][T11396] ? get_pid_task+0x8b/0xc0 [ 222.857177][T11396] ? vfs_write+0x50c/0x770 [ 222.861638][T11396] ? __fget_light+0x21b/0x260 [ 222.866432][T11396] ? perf_trace_sys_enter+0x4d/0x2c0 [ 222.871794][T11396] ? fput+0x2d/0x130 [ 222.876292][T11396] ? syscall_trace_enter+0x153/0x290 [ 222.881572][T11396] __x64_sys_sendmsg+0x42/0x50 [ 222.886426][T11396] do_syscall_64+0x3d/0x90 [ 222.890825][T11396] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 222.896751][T11396] RIP: 0033:0x4665e9 [ 222.900901][T11396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 222.920824][T11396] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.929251][T11396] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 222.937489][T11396] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 222.945786][T11396] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 222.953920][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.961981][T11396] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 222.970215][T11405] CPU: 1 PID: 11405 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 08:30:10 executing program 0 (fault-call:1 fault-nth:3): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 222.979417][T11405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 222.991487][T11405] Call Trace: [ 222.994856][T11405] dump_stack_lvl+0xb7/0x103 [ 222.999501][T11405] dump_stack+0x11/0x1a [ 223.003841][T11405] should_fail+0x23c/0x250 [ 223.008521][T11405] ? dst_alloc+0x108/0x300 [ 223.012963][T11405] __should_failslab+0x81/0x90 [ 223.017726][T11405] should_failslab+0x5/0x20 [ 223.022227][T11405] kmem_cache_alloc+0x46/0x2e0 [ 223.026991][T11405] ? fib4_rule_suppress+0x147/0x270 [ 223.032427][T11405] dst_alloc+0x108/0x300 [ 223.036761][T11405] __mkroute_output+0x452/0xc40 [ 223.041924][T11405] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 223.047885][T11405] ip_route_output_key_hash+0xa8/0xe0 [ 223.049012][T11414] FAULT_INJECTION: forcing a failure. [ 223.049012][T11414] name failslab, interval 1, probability 0, space 0, times 0 [ 223.053338][T11405] __ip4_datagram_connect+0x3e0/0x710 [ 223.053368][T11405] ? __inet_bind+0x560/0x560 [ 223.076202][T11405] ip4_datagram_connect+0x2a/0x40 [ 223.081306][T11405] inet_dgram_connect+0x107/0x190 [ 223.086440][T11405] __sys_connect_file+0xd3/0xe0 [ 223.091545][T11405] io_issue_sqe+0xf52/0x6870 [ 223.096139][T11405] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 223.102277][T11405] ? __list_del_entry_valid+0x54/0xc0 [ 223.107743][T11405] ? rmqueue_pcplist+0x145/0x1d0 [ 223.112966][T11405] ? mntput_no_expire+0x64/0x730 [ 223.117884][T11405] ? _raw_spin_lock_irqsave+0x25/0x80 [ 223.123335][T11405] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 223.129317][T11405] ? percpu_counter_add_batch+0xc0/0xd0 [ 223.135043][T11405] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 223.144307][T11405] __io_queue_sqe+0xe7/0x360 [ 223.148892][T11405] io_submit_sqe+0x1695/0x3400 [ 223.153639][T11405] ? kmem_cache_alloc_bulk+0x289/0x340 [ 223.159126][T11405] io_submit_sqes+0x822/0xe50 [ 223.163785][T11405] __se_sys_io_uring_enter+0x1c7/0xa10 [ 223.169310][T11405] ? __fget_light+0x21b/0x260 [ 223.174131][T11405] ? fput+0x2d/0x130 [ 223.178105][T11405] __x64_sys_io_uring_enter+0x74/0x80 [ 223.183527][T11405] do_syscall_64+0x3d/0x90 [ 223.187944][T11405] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.193908][T11405] RIP: 0033:0x4665e9 [ 223.197783][T11405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.217490][T11405] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 223.225931][T11405] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 223.233974][T11405] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 223.242513][T11405] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.250932][T11405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.259113][T11405] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 223.267155][T11414] CPU: 0 PID: 11414 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 223.276171][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.286350][T11414] Call Trace: 08:30:11 executing program 1 (fault-call:9 fault-nth:80): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:11 executing program 2: ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000080)={0x2, 0xd444, 0xc3, &(0x7f0000000140)=""/195}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00004f7000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0xabe4e000) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) [ 223.289898][T11414] dump_stack_lvl+0xb7/0x103 [ 223.294751][T11414] dump_stack+0x11/0x1a [ 223.298998][T11414] should_fail+0x23c/0x250 [ 223.303525][T11414] __should_failslab+0x81/0x90 [ 223.308381][T11414] should_failslab+0x5/0x20 [ 223.313140][T11414] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 223.318861][T11414] ? __kmalloc_node_track_caller+0x30/0x40 [ 223.324795][T11414] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 223.330316][T11414] __kmalloc_node_track_caller+0x30/0x40 [ 223.336142][T11414] ? netlink_sendmsg+0x4c4/0x7c0 [ 223.341263][T11414] __alloc_skb+0x187/0x420 [ 223.345699][T11414] netlink_sendmsg+0x4c4/0x7c0 [ 223.345755][T11418] FAULT_INJECTION: forcing a failure. [ 223.345755][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.350493][T11414] ? netlink_getsockopt+0x720/0x720 [ 223.350515][T11414] ____sys_sendmsg+0x360/0x4d0 [ 223.350577][T11414] ? import_iovec+0x69/0x80 [ 223.378307][T11414] __sys_sendmsg+0x1ed/0x270 [ 223.382889][T11414] ? __fsnotify_parent+0x32f/0x430 [ 223.387988][T11414] ? get_pid_task+0x8b/0xc0 [ 223.392989][T11414] ? vfs_write+0x50c/0x770 [ 223.397390][T11414] ? __fget_light+0x21b/0x260 [ 223.402046][T11414] ? perf_trace_sys_enter+0x4d/0x2c0 [ 223.407312][T11414] ? fput+0x2d/0x130 [ 223.411327][T11414] ? syscall_trace_enter+0x153/0x290 [ 223.416829][T11414] __x64_sys_sendmsg+0x42/0x50 [ 223.421726][T11414] do_syscall_64+0x3d/0x90 [ 223.426124][T11414] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.432022][T11414] RIP: 0033:0x4665e9 [ 223.436081][T11414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.455940][T11414] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.464429][T11414] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 223.472388][T11414] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 223.480451][T11414] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.488817][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.496767][T11414] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 223.504794][T11418] CPU: 1 PID: 11418 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 223.513570][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.523627][T11418] Call Trace: [ 223.526920][T11418] dump_stack_lvl+0xb7/0x103 [ 223.531569][T11418] dump_stack+0x11/0x1a [ 223.535718][T11418] should_fail+0x23c/0x250 [ 223.540232][T11418] should_fail_usercopy+0x16/0x20 [ 223.545269][T11418] _copy_from_user+0x1c/0xd0 [ 223.549866][T11418] move_addr_to_kernel+0x7e/0x110 [ 223.554921][T11418] io_issue_sqe+0x2489/0x6870 [ 223.559621][T11418] ? rmqueue+0x4a/0xcc0 [ 223.563962][T11418] ? __list_del_entry_valid+0x54/0xc0 [ 223.569357][T11418] ? rmqueue_pcplist+0x145/0x1d0 [ 223.574319][T11418] ? get_page_from_freelist+0x54e/0x820 [ 223.579935][T11418] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 223.585823][T11418] ? _raw_spin_lock_irqsave+0x25/0x80 08:30:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:11 executing program 0 (fault-call:1 fault-nth:4): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) [ 223.591205][T11418] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 223.597046][T11418] ? percpu_counter_add_batch+0xc0/0xd0 [ 223.602603][T11418] ? io_submit_flush_completions+0x31e/0x3f0 [ 223.608583][T11418] __io_queue_sqe+0xe7/0x360 [ 223.613204][T11418] io_submit_sqe+0x1695/0x3400 [ 223.617613][T11430] FAULT_INJECTION: forcing a failure. [ 223.617613][T11430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.617976][T11418] ? kmem_cache_alloc_bulk+0x289/0x340 [ 223.636623][T11418] io_submit_sqes+0x822/0xe50 [ 223.641296][T11418] __se_sys_io_uring_enter+0x1c7/0xa10 [ 223.646988][T11418] ? __fget_light+0x21b/0x260 [ 223.651826][T11418] ? fput+0x2d/0x130 [ 223.655706][T11418] __x64_sys_io_uring_enter+0x74/0x80 [ 223.661112][T11418] do_syscall_64+0x3d/0x90 [ 223.665699][T11418] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.671619][T11418] RIP: 0033:0x4665e9 [ 223.675530][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.695231][T11418] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 223.703751][T11418] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 223.711807][T11418] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 223.719760][T11418] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.727810][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 08:30:11 executing program 1 (fault-call:9 fault-nth:81): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 223.735880][T11418] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 223.744022][T11430] CPU: 0 PID: 11430 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 223.752880][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.763122][T11430] Call Trace: [ 223.766571][T11430] dump_stack_lvl+0xb7/0x103 [ 223.771359][T11430] dump_stack+0x11/0x1a [ 223.775569][T11430] should_fail+0x23c/0x250 [ 223.780020][T11430] should_fail_usercopy+0x16/0x20 [ 223.785113][T11430] _copy_from_iter+0x131/0x970 [ 223.789965][T11430] ? check_stack_object+0x61/0x70 [ 223.795018][T11430] ? __virt_addr_valid+0x15a/0x1a0 [ 223.797320][T11440] FAULT_INJECTION: forcing a failure. [ 223.797320][T11440] name failslab, interval 1, probability 0, space 0, times 0 [ 223.800128][T11430] ? __check_object_size+0x253/0x310 [ 223.800155][T11430] netlink_sendmsg+0x57c/0x7c0 [ 223.824224][T11430] ? netlink_getsockopt+0x720/0x720 [ 223.829623][T11430] ____sys_sendmsg+0x360/0x4d0 [ 223.834465][T11430] ? import_iovec+0x69/0x80 [ 223.838956][T11430] __sys_sendmsg+0x1ed/0x270 [ 223.843770][T11430] ? __fsnotify_parent+0x32f/0x430 [ 223.848881][T11430] ? get_pid_task+0x8b/0xc0 [ 223.853376][T11430] ? vfs_write+0x50c/0x770 [ 223.857853][T11430] ? __fget_light+0x21b/0x260 [ 223.862527][T11430] ? perf_trace_sys_enter+0x4d/0x2c0 [ 223.867848][T11430] ? fput+0x2d/0x130 [ 223.871746][T11430] ? syscall_trace_enter+0x153/0x290 [ 223.877037][T11430] __x64_sys_sendmsg+0x42/0x50 [ 223.881973][T11430] do_syscall_64+0x3d/0x90 [ 223.886549][T11430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 223.892511][T11430] RIP: 0033:0x4665e9 [ 223.896469][T11430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 223.916067][T11430] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.924468][T11430] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 223.932418][T11430] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 223.940380][T11430] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 223.948362][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.956312][T11430] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 223.964428][T11440] CPU: 1 PID: 11440 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 223.973264][T11440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.983504][T11440] Call Trace: [ 223.986811][T11440] dump_stack_lvl+0xb7/0x103 08:30:11 executing program 0 (fault-call:1 fault-nth:5): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 223.991401][T11440] dump_stack+0x11/0x1a [ 223.995605][T11440] should_fail+0x23c/0x250 [ 224.000081][T11440] ? dst_alloc+0x108/0x300 [ 224.004501][T11440] __should_failslab+0x81/0x90 [ 224.009299][T11440] should_failslab+0x5/0x20 [ 224.013853][T11440] kmem_cache_alloc+0x46/0x2e0 [ 224.018633][T11440] ? fib4_rule_suppress+0x147/0x270 [ 224.022793][T11444] FAULT_INJECTION: forcing a failure. [ 224.022793][T11444] name failslab, interval 1, probability 0, space 0, times 0 [ 224.023876][T11440] dst_alloc+0x108/0x300 [ 224.023902][T11440] __mkroute_output+0x452/0xc40 [ 224.045870][T11440] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 224.051763][T11440] ip_route_output_key_hash+0xa8/0xe0 [ 224.057389][T11440] __ip4_datagram_connect+0x3e0/0x710 [ 224.062777][T11440] ? __inet_bind+0x560/0x560 [ 224.067352][T11440] ip4_datagram_connect+0x2a/0x40 [ 224.072408][T11440] inet_dgram_connect+0x107/0x190 [ 224.077466][T11440] __sys_connect_file+0xd3/0xe0 [ 224.082346][T11440] io_issue_sqe+0xf52/0x6870 [ 224.087092][T11440] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 224.092989][T11440] ? __list_del_entry_valid+0x54/0xc0 [ 224.098344][T11440] ? rmqueue_pcplist+0x145/0x1d0 [ 224.103273][T11440] ? mntput_no_expire+0x64/0x730 [ 224.108378][T11440] ? _raw_spin_lock_irqsave+0x25/0x80 [ 224.113750][T11440] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 224.119795][T11440] ? percpu_counter_add_batch+0xc0/0xd0 [ 224.125335][T11440] ? io_submit_flush_completions+0x31e/0x3f0 [ 224.131331][T11440] __io_queue_sqe+0xe7/0x360 [ 224.136986][T11440] io_submit_sqe+0x1695/0x3400 [ 224.141902][T11440] ? kmem_cache_alloc_bulk+0x289/0x340 [ 224.147485][T11440] io_submit_sqes+0x822/0xe50 [ 224.152233][T11440] __se_sys_io_uring_enter+0x1c7/0xa10 [ 224.157697][T11440] ? __fget_light+0x21b/0x260 [ 224.162373][T11440] ? fput+0x2d/0x130 [ 224.166361][T11440] __x64_sys_io_uring_enter+0x74/0x80 [ 224.171742][T11440] do_syscall_64+0x3d/0x90 [ 224.176309][T11440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.182760][T11440] RIP: 0033:0x4665e9 [ 224.186685][T11440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.206660][T11440] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 224.215147][T11440] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 224.223104][T11440] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 224.231214][T11440] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.239227][T11440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.247357][T11440] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 224.255364][T11444] CPU: 0 PID: 11444 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 224.264425][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.275021][T11444] Call Trace: [ 224.278732][T11444] dump_stack_lvl+0xb7/0x103 [ 224.283360][T11444] dump_stack+0x11/0x1a [ 224.287891][T11444] should_fail+0x23c/0x250 [ 224.292367][T11444] __should_failslab+0x81/0x90 [ 224.297133][T11444] should_failslab+0x5/0x20 [ 224.301654][T11444] kmem_cache_alloc_node+0x58/0x2b0 [ 224.307131][T11444] ? __alloc_skb+0xed/0x420 [ 224.311825][T11444] __alloc_skb+0xed/0x420 [ 224.316187][T11444] netlink_dump+0x15f/0x860 [ 224.320707][T11444] ? __netlink_lookup+0x8c/0x250 [ 224.326252][T11444] ? __netlink_lookup+0x21c/0x250 [ 224.331439][T11444] __netlink_dump_start+0x3e3/0x4d0 [ 224.336744][T11444] rtnetlink_rcv_msg+0x69c/0x7a0 [ 224.341847][T11444] ? tc_get_tfilter+0xc00/0xc00 [ 224.346946][T11444] ? tc_get_tfilter+0xc00/0xc00 [ 224.351790][T11444] ? rb_erase+0x4ef/0x750 [ 224.356256][T11444] ? save_fpregs_to_fpstate+0xd8/0x110 [ 224.362052][T11444] ? finish_task_switch+0xce/0x290 [ 224.367447][T11444] ? __schedule+0x42a/0x670 [ 224.371983][T11444] ? should_fail+0x2a/0x250 [ 224.376506][T11444] ? avc_has_perm_noaudit+0x19a/0x240 [ 224.382104][T11444] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 224.388087][T11444] ? rhashtable_jhash2+0x13a/0x1a0 [ 224.393318][T11444] ? jhash+0x2b0/0x2b0 [ 224.397390][T11444] netlink_rcv_skb+0x13e/0x240 [ 224.402149][T11444] ? rtnetlink_bind+0x60/0x60 [ 224.406920][T11444] rtnetlink_rcv+0x18/0x20 [ 224.411330][T11444] netlink_unicast+0x5ec/0x6b0 [ 224.416166][T11444] netlink_sendmsg+0x6d9/0x7c0 [ 224.421039][T11444] ? netlink_getsockopt+0x720/0x720 [ 224.426282][T11444] ____sys_sendmsg+0x360/0x4d0 [ 224.431210][T11444] ? import_iovec+0x69/0x80 [ 224.435731][T11444] __sys_sendmsg+0x1ed/0x270 [ 224.440590][T11444] ? __fsnotify_parent+0x32f/0x430 [ 224.445685][T11444] ? get_pid_task+0x8b/0xc0 [ 224.450168][T11444] ? vfs_write+0x50c/0x770 [ 224.454717][T11444] ? __fget_light+0x21b/0x260 [ 224.459394][T11444] ? perf_trace_sys_enter+0x4d/0x2c0 [ 224.464741][T11444] ? fput+0x2d/0x130 [ 224.468698][T11444] ? syscall_trace_enter+0x153/0x290 [ 224.474213][T11444] __x64_sys_sendmsg+0x42/0x50 [ 224.479065][T11444] do_syscall_64+0x3d/0x90 [ 224.483462][T11444] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.489334][T11444] RIP: 0033:0x4665e9 [ 224.493212][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.514011][T11444] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.523093][T11444] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 224.531204][T11444] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 08:30:12 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3c0a, &(0x7f0000000000)={0x0, 0x94e6, 0x10, 0x0, 0x76}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x400000b, 0x4009110, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x8) 08:30:12 executing program 1 (fault-call:9 fault-nth:82): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:12 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r4, 0xb3914000) tkill(r3, 0x1000000000016) 08:30:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x10, r0, 0xb515c000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @remote, 0x1}, 0x1c) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() mmap(&(0x7f000049b000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x95e20000) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r5 = signalfd(r0, &(0x7f0000000080)={[0x6c]}, 0x8) readv(r5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000140)=""/219, 0xdb}, {&(0x7f0000000240)=""/236, 0xec}], 0x3) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:12 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 224.539404][T11444] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.547469][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.555621][T11444] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 08:30:12 executing program 0 (fault-call:1 fault-nth:6): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 224.631178][T11464] FAULT_INJECTION: forcing a failure. [ 224.631178][T11464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.631995][T11466] FAULT_INJECTION: forcing a failure. [ 224.631995][T11466] name failslab, interval 1, probability 0, space 0, times 0 [ 224.645985][T11464] CPU: 0 PID: 11464 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 224.646005][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.678157][T11464] Call Trace: [ 224.681534][T11464] dump_stack_lvl+0xb7/0x103 [ 224.686224][T11464] dump_stack+0x11/0x1a [ 224.692391][T11464] should_fail+0x23c/0x250 [ 224.696858][T11464] should_fail_usercopy+0x16/0x20 [ 224.702838][T11464] _copy_from_user+0x1c/0xd0 [ 224.707540][T11464] move_addr_to_kernel+0x7e/0x110 [ 224.712772][T11464] io_issue_sqe+0x2489/0x6870 [ 224.717733][T11464] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 224.724120][T11464] ? __list_del_entry_valid+0x54/0xc0 [ 224.729805][T11464] ? rmqueue_pcplist+0x145/0x1d0 [ 224.735352][T11464] ? mntput_no_expire+0x64/0x730 [ 224.741328][T11464] ? _raw_spin_lock_irqsave+0x25/0x80 [ 224.747025][T11464] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 224.752995][T11464] ? percpu_counter_add_batch+0xc0/0xd0 [ 224.759046][T11464] ? io_submit_flush_completions+0x31e/0x3f0 [ 224.765397][T11464] __io_queue_sqe+0xe7/0x360 [ 224.770499][T11464] io_submit_sqe+0x1695/0x3400 [ 224.775548][T11464] ? kmem_cache_alloc_bulk+0x289/0x340 [ 224.781636][T11464] io_submit_sqes+0x822/0xe50 [ 224.787325][T11464] __se_sys_io_uring_enter+0x1c7/0xa10 [ 224.793740][T11464] ? __fget_light+0x21b/0x260 [ 224.800828][T11464] ? fput+0x2d/0x130 [ 224.805423][T11464] __x64_sys_io_uring_enter+0x74/0x80 [ 224.811235][T11464] do_syscall_64+0x3d/0x90 [ 224.815915][T11464] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 224.822016][T11464] RIP: 0033:0x4665e9 [ 224.826104][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 224.848858][T11464] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 224.857436][T11464] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 224.867044][T11464] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 08:30:12 executing program 1 (fault-call:9 fault-nth:83): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 224.875763][T11464] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 224.884096][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.892672][T11464] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 224.901221][T11466] CPU: 1 PID: 11466 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 224.910300][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 224.921000][T11466] Call Trace: [ 224.924278][T11466] dump_stack_lvl+0xb7/0x103 08:30:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 224.929106][T11466] dump_stack+0x11/0x1a [ 224.933466][T11466] should_fail+0x23c/0x250 [ 224.937888][T11466] __should_failslab+0x81/0x90 [ 224.942727][T11466] should_failslab+0x5/0x20 [ 224.947240][T11466] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 224.953183][T11466] ? __kmalloc_node_track_caller+0x30/0x40 [ 224.959775][T11466] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 224.965249][T11466] __kmalloc_node_track_caller+0x30/0x40 [ 224.971092][T11466] ? netlink_dump+0x15f/0x860 [ 224.974602][T11473] FAULT_INJECTION: forcing a failure. [ 224.974602][T11473] name failslab, interval 1, probability 0, space 0, times 0 [ 224.975820][T11466] __alloc_skb+0x187/0x420 [ 224.975846][T11466] netlink_dump+0x15f/0x860 [ 224.975860][T11466] ? __netlink_lookup+0x8c/0x250 [ 224.975879][T11466] ? __netlink_lookup+0x21c/0x250 [ 225.011589][T11466] __netlink_dump_start+0x3e3/0x4d0 [ 225.016872][T11466] rtnetlink_rcv_msg+0x69c/0x7a0 [ 225.021887][T11466] ? tc_get_tfilter+0xc00/0xc00 [ 225.026734][T11466] ? tc_get_tfilter+0xc00/0xc00 [ 225.031687][T11466] ? __wake_up+0x8d/0xc0 [ 225.036146][T11466] ? __d_rehash+0x125/0x180 [ 225.040671][T11466] ? __d_add+0x3bf/0x490 [ 225.045171][T11466] ? should_fail+0x2a/0x250 [ 225.049917][T11466] ? avc_has_perm_noaudit+0x19a/0x240 [ 225.055270][T11466] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 225.061074][T11466] ? rhashtable_jhash2+0x13a/0x1a0 [ 225.066605][T11466] ? jhash+0x2b0/0x2b0 [ 225.070743][T11466] netlink_rcv_skb+0x13e/0x240 [ 225.075689][T11466] ? rtnetlink_bind+0x60/0x60 [ 225.081084][T11466] rtnetlink_rcv+0x18/0x20 [ 225.085750][T11466] netlink_unicast+0x5ec/0x6b0 [ 225.093407][T11466] netlink_sendmsg+0x6d9/0x7c0 [ 225.098233][T11466] ? netlink_getsockopt+0x720/0x720 [ 225.103417][T11466] ____sys_sendmsg+0x360/0x4d0 [ 225.108379][T11466] ? import_iovec+0x69/0x80 [ 225.112890][T11466] __sys_sendmsg+0x1ed/0x270 [ 225.117570][T11466] ? __fsnotify_parent+0x32f/0x430 [ 225.122754][T11466] ? get_pid_task+0x8b/0xc0 [ 225.127498][T11466] ? vfs_write+0x50c/0x770 [ 225.133134][T11466] ? __fget_light+0x21b/0x260 [ 225.139008][T11466] ? perf_trace_sys_enter+0x4d/0x2c0 [ 225.145734][T11466] ? fput+0x2d/0x130 [ 225.149710][T11466] ? syscall_trace_enter+0x153/0x290 [ 225.155847][T11466] __x64_sys_sendmsg+0x42/0x50 [ 225.160709][T11466] do_syscall_64+0x3d/0x90 [ 225.165206][T11466] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.171294][T11466] RIP: 0033:0x4665e9 [ 225.175332][T11466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.195208][T11466] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.203711][T11466] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 225.211900][T11466] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 225.220064][T11466] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 225.228114][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.236237][T11466] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 225.244280][T11473] CPU: 0 PID: 11473 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 225.253304][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.263626][T11473] Call Trace: [ 225.266979][T11473] dump_stack_lvl+0xb7/0x103 [ 225.271763][T11473] dump_stack+0x11/0x1a [ 225.276182][T11473] should_fail+0x23c/0x250 08:30:13 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:13 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:13 executing program 0 (fault-call:1 fault-nth:7): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 225.280967][T11473] ? dst_alloc+0x108/0x300 [ 225.285834][T11473] __should_failslab+0x81/0x90 [ 225.290898][T11473] should_failslab+0x5/0x20 [ 225.296191][T11473] kmem_cache_alloc+0x46/0x2e0 [ 225.301056][T11473] ? fib4_rule_suppress+0x147/0x270 [ 225.306696][T11473] dst_alloc+0x108/0x300 [ 225.310946][T11473] __mkroute_output+0x452/0xc40 [ 225.315978][T11473] ? rb_erase+0x623/0x750 [ 225.320366][T11473] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 225.326279][T11473] ip_route_output_key_hash+0xa8/0xe0 [ 225.331828][T11473] __ip4_datagram_connect+0x3e0/0x710 [ 225.337437][T11473] ? __inet_bind+0x560/0x560 [ 225.342036][T11473] ip4_datagram_connect+0x2a/0x40 [ 225.347135][T11473] inet_dgram_connect+0x107/0x190 [ 225.352196][T11473] __sys_connect_file+0xd3/0xe0 [ 225.356371][T11487] FAULT_INJECTION: forcing a failure. [ 225.356371][T11487] name failslab, interval 1, probability 0, space 0, times 0 [ 225.357144][T11473] io_issue_sqe+0xf52/0x6870 [ 225.374456][T11473] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 225.380547][T11473] ? __list_del_entry_valid+0x54/0xc0 [ 225.386182][T11473] ? rmqueue_pcplist+0x145/0x1d0 [ 225.391202][T11473] ? mntput_no_expire+0x64/0x730 [ 225.396503][T11473] ? _raw_spin_lock_irqsave+0x25/0x80 [ 225.402267][T11473] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 225.408385][T11473] ? percpu_counter_add_batch+0xc0/0xd0 [ 225.413949][T11473] ? io_submit_flush_completions+0x31e/0x3f0 [ 225.421045][T11473] __io_queue_sqe+0xe7/0x360 [ 225.425698][T11473] io_submit_sqe+0x1695/0x3400 [ 225.430727][T11473] ? kmem_cache_alloc_bulk+0x289/0x340 [ 225.436259][T11473] io_submit_sqes+0x822/0xe50 [ 225.440932][T11473] __se_sys_io_uring_enter+0x1c7/0xa10 [ 225.446641][T11473] ? __fget_light+0x21b/0x260 [ 225.451315][T11473] ? fput+0x2d/0x130 [ 225.455228][T11473] __x64_sys_io_uring_enter+0x74/0x80 [ 225.460907][T11473] do_syscall_64+0x3d/0x90 [ 225.465679][T11473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.471621][T11473] RIP: 0033:0x4665e9 [ 225.475892][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.497114][T11473] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 225.506506][T11473] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 225.514649][T11473] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 225.522765][T11473] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 225.530926][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.539336][T11473] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 225.547682][T11487] CPU: 1 PID: 11487 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 225.557099][T11487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.567406][T11487] Call Trace: [ 225.570691][T11487] dump_stack_lvl+0xb7/0x103 [ 225.575284][T11487] dump_stack+0x11/0x1a [ 225.579489][T11487] should_fail+0x23c/0x250 08:30:13 executing program 1 (fault-call:9 fault-nth:84): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 225.584194][T11487] __should_failslab+0x81/0x90 [ 225.589225][T11487] should_failslab+0x5/0x20 [ 225.593911][T11487] kmem_cache_alloc_node+0x58/0x2b0 [ 225.597431][T11494] FAULT_INJECTION: forcing a failure. [ 225.597431][T11494] name failslab, interval 1, probability 0, space 0, times 0 [ 225.599122][T11487] ? __alloc_skb+0xed/0x420 [ 225.599147][T11487] ? netlink_deliver_tap+0x6a/0x4d0 [ 225.622749][T11487] __alloc_skb+0xed/0x420 [ 225.627703][T11487] netlink_dump+0x15f/0x860 [ 225.632355][T11487] ? __netlink_lookup+0x8c/0x250 [ 225.638004][T11487] ? __netlink_lookup+0x21c/0x250 [ 225.643240][T11487] __netlink_dump_start+0x3e3/0x4d0 [ 225.648852][T11487] rtnetlink_rcv_msg+0x69c/0x7a0 [ 225.654358][T11487] ? rtnl_stats_get+0x4d0/0x4d0 [ 225.659820][T11487] ? rtnl_stats_get+0x4d0/0x4d0 [ 225.665703][T11487] ? __wake_up+0x8d/0xc0 [ 225.669943][T11487] ? __d_rehash+0x125/0x180 [ 225.674450][T11487] ? __d_add+0x3bf/0x490 [ 225.678840][T11487] ? should_fail+0x2a/0x250 [ 225.683517][T11487] ? avc_has_perm_noaudit+0x19a/0x240 [ 225.689202][T11487] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 225.695270][T11487] ? rhashtable_jhash2+0x13a/0x1a0 [ 225.700490][T11487] ? jhash+0x2b0/0x2b0 [ 225.705422][T11487] netlink_rcv_skb+0x13e/0x240 [ 225.710343][T11487] ? rtnetlink_bind+0x60/0x60 [ 225.715851][T11487] rtnetlink_rcv+0x18/0x20 [ 225.720605][T11487] netlink_unicast+0x5ec/0x6b0 [ 225.725500][T11487] netlink_sendmsg+0x6d9/0x7c0 [ 225.730500][T11487] ? netlink_getsockopt+0x720/0x720 [ 225.736028][T11487] ____sys_sendmsg+0x360/0x4d0 [ 225.740930][T11487] ? import_iovec+0x69/0x80 [ 225.745423][T11487] __sys_sendmsg+0x1ed/0x270 [ 225.751231][T11487] ? __fsnotify_parent+0x32f/0x430 [ 225.756411][T11487] ? get_pid_task+0x8b/0xc0 [ 225.761424][T11487] ? vfs_write+0x50c/0x770 [ 225.765996][T11487] ? __fget_light+0x21b/0x260 [ 225.770831][T11487] ? perf_trace_sys_enter+0x4d/0x2c0 [ 225.776415][T11487] ? fput+0x2d/0x130 [ 225.780814][T11487] ? syscall_trace_enter+0x153/0x290 [ 225.786187][T11487] __x64_sys_sendmsg+0x42/0x50 [ 225.790935][T11487] do_syscall_64+0x3d/0x90 [ 225.795337][T11487] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 225.801323][T11487] RIP: 0033:0x4665e9 [ 225.805223][T11487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 225.825249][T11487] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.833995][T11487] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 225.842056][T11487] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 225.850360][T11487] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 225.858400][T11487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.866807][T11487] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 225.875248][T11494] CPU: 0 PID: 11494 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 225.884685][T11494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 225.894922][T11494] Call Trace: [ 225.898266][T11494] dump_stack_lvl+0xb7/0x103 [ 225.903052][T11494] dump_stack+0x11/0x1a [ 225.907207][T11494] should_fail+0x23c/0x250 [ 225.911685][T11494] ? dst_alloc+0x108/0x300 [ 225.916288][T11494] __should_failslab+0x81/0x90 [ 225.921418][T11494] should_failslab+0x5/0x20 [ 225.929356][T11494] kmem_cache_alloc+0x46/0x2e0 [ 225.934132][T11494] ? fib4_rule_suppress+0x147/0x270 [ 225.939500][T11494] dst_alloc+0x108/0x300 [ 225.943769][T11494] __mkroute_output+0x452/0xc40 [ 225.948815][T11494] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 225.954901][T11494] ip_route_output_key_hash+0xa8/0xe0 [ 225.960611][T11494] __ip4_datagram_connect+0x3e0/0x710 [ 225.965992][T11494] ? __inet_bind+0x560/0x560 [ 225.970701][T11494] ip4_datagram_connect+0x2a/0x40 [ 225.975733][T11494] inet_dgram_connect+0x107/0x190 [ 225.980745][T11494] __sys_connect_file+0xd3/0xe0 [ 225.985752][T11494] io_issue_sqe+0xf52/0x6870 [ 225.990791][T11494] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 225.996673][T11494] ? __list_del_entry_valid+0x54/0xc0 [ 226.002072][T11494] ? rmqueue_pcplist+0x145/0x1d0 [ 226.008611][T11494] ? mntput_no_expire+0x64/0x730 [ 226.013904][T11494] ? _raw_spin_lock_irqsave+0x25/0x80 [ 226.021600][T11494] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 226.027583][T11494] ? percpu_counter_add_batch+0xc0/0xd0 [ 226.033208][T11494] ? io_submit_flush_completions+0x31e/0x3f0 [ 226.039542][T11494] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 226.045533][T11494] __io_queue_sqe+0xe7/0x360 [ 226.050132][T11494] io_submit_sqe+0x1695/0x3400 [ 226.055116][T11494] io_submit_sqes+0x822/0xe50 [ 226.059927][T11494] __se_sys_io_uring_enter+0x1c7/0xa10 [ 226.065562][T11494] ? __fget_light+0x21b/0x260 [ 226.070624][T11494] ? fput+0x2d/0x130 [ 226.074518][T11494] __x64_sys_io_uring_enter+0x74/0x80 [ 226.080132][T11494] do_syscall_64+0x3d/0x90 [ 226.084960][T11494] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.091275][T11494] RIP: 0033:0x4665e9 [ 226.095176][T11494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.115137][T11494] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 226.125084][T11494] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 08:30:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:14 executing program 0 (fault-call:1 fault-nth:8): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:14 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x2}, 0x1) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:14 executing program 4 (fault-call:7 fault-nth:0): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:30:14 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) read$eventfd(r1, &(0x7f0000000280), 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000003c0)=""/56, 0x38}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/173, 0xad}], 0x8, 0xea, 0x3) mmap(&(0x7f000041e000/0xd000)=nil, 0xd000, 0x4, 0x10, r0, 0x2b48a000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$tcp_mem(r4, &(0x7f0000000880)={0x7, 0x20, 0xbf, 0x20, 0x8}, 0x48) timer_create(0x7, &(0x7f0000000200)={0x0, 0x0, 0x4, @thr={&(0x7f0000000080)="c50ae97808e4f615a092b50f756d1e3f2d9c120740de152477a3adf3f1099cabc0ef758c7ace231f17d98fd20ff54b22345ba4c5663a3d2e762b678b8f460baf4f2311109aa98491b9b90ec37602d38d33dfad55a4d84f22898be5b77c61b478be46776b55858eb11ee378c95aa02047032f", &(0x7f0000000140)="095427354dfb884af99fd717f51aac12d5743fb2014588e316c694aff52f42a8a6c8120177d5f634e6eca9e2b9dab3de422b72e88a3109a64ed5632e659f788ad22a8a1eaf8be0457888ac8efb4498510c2bc7b87ebeffad036cebe3499b09dfd17ea8fc33f17c33a681ba8bb5a5e93a5a249287abdddbe16d4d03832a63715bf789884255acefb18c59cd82b8a7521e4a914b2a48"}}, &(0x7f0000000240)) 08:30:14 executing program 1 (fault-call:9 fault-nth:85): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 226.133750][T11494] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 226.143339][T11494] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.151917][T11494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.160233][T11494] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 226.225871][T11510] FAULT_INJECTION: forcing a failure. [ 226.225871][T11510] name failslab, interval 1, probability 0, space 0, times 0 [ 226.230388][T11507] FAULT_INJECTION: forcing a failure. [ 226.230388][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 226.238709][T11510] CPU: 0 PID: 11510 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 226.260682][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.270817][T11510] Call Trace: [ 226.274320][T11510] dump_stack_lvl+0xb7/0x103 [ 226.278916][T11510] dump_stack+0x11/0x1a [ 226.283148][T11510] should_fail+0x23c/0x250 [ 226.287583][T11510] __should_failslab+0x81/0x90 [ 226.292420][T11510] should_failslab+0x5/0x20 [ 226.296906][T11510] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 226.302618][T11510] ? __kmalloc_node_track_caller+0x30/0x40 [ 226.308408][T11510] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 226.314064][T11510] __kmalloc_node_track_caller+0x30/0x40 [ 226.320280][T11510] ? netlink_dump+0x15f/0x860 [ 226.325125][T11510] __alloc_skb+0x187/0x420 [ 226.329721][T11510] netlink_dump+0x15f/0x860 [ 226.334330][T11510] ? __netlink_lookup+0x8c/0x250 [ 226.339595][T11510] ? __netlink_lookup+0x21c/0x250 [ 226.344806][T11510] __netlink_dump_start+0x3e3/0x4d0 [ 226.350420][T11510] rtnetlink_rcv_msg+0x69c/0x7a0 [ 226.355532][T11510] ? rtnl_stats_get+0x4d0/0x4d0 [ 226.360635][T11510] ? rtnl_stats_get+0x4d0/0x4d0 [ 226.366653][T11510] ? __wake_up+0x8d/0xc0 [ 226.371599][T11510] ? __d_rehash+0x125/0x180 [ 226.376101][T11510] ? __d_add+0x3bf/0x490 [ 226.380675][T11510] ? should_fail+0x2a/0x250 [ 226.385335][T11510] ? avc_has_perm_noaudit+0x19a/0x240 [ 226.390739][T11510] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 226.396755][T11510] ? rhashtable_jhash2+0x13a/0x1a0 [ 226.402059][T11510] ? jhash+0x2b0/0x2b0 [ 226.406196][T11510] netlink_rcv_skb+0x13e/0x240 [ 226.411051][T11510] ? rtnetlink_bind+0x60/0x60 [ 226.415828][T11510] rtnetlink_rcv+0x18/0x20 [ 226.420745][T11510] netlink_unicast+0x5ec/0x6b0 [ 226.425526][T11510] netlink_sendmsg+0x6d9/0x7c0 [ 226.430376][T11510] ? netlink_getsockopt+0x720/0x720 [ 226.435591][T11510] ____sys_sendmsg+0x360/0x4d0 [ 226.440981][T11510] ? import_iovec+0x69/0x80 [ 226.445795][T11510] __sys_sendmsg+0x1ed/0x270 [ 226.450747][T11510] ? __fsnotify_parent+0x32f/0x430 [ 226.456127][T11510] ? get_pid_task+0x8b/0xc0 [ 226.461089][T11510] ? vfs_write+0x50c/0x770 [ 226.465728][T11510] ? __fget_light+0x21b/0x260 [ 226.470432][T11510] ? perf_trace_sys_enter+0x4d/0x2c0 [ 226.475892][T11510] ? fput+0x2d/0x130 [ 226.479943][T11510] ? syscall_trace_enter+0x153/0x290 [ 226.485300][T11510] __x64_sys_sendmsg+0x42/0x50 [ 226.490332][T11510] do_syscall_64+0x3d/0x90 [ 226.494910][T11510] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.500958][T11510] RIP: 0033:0x4665e9 [ 226.505006][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.526278][T11510] RSP: 002b:00007fad240d5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.535563][T11510] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 226.543954][T11510] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 226.552090][T11510] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.560918][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.569294][T11510] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 226.577261][T11507] CPU: 1 PID: 11507 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 226.587332][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.590041][T11515] FAULT_INJECTION: forcing a failure. [ 226.590041][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 226.597378][T11507] Call Trace: [ 226.597388][T11507] dump_stack_lvl+0xb7/0x103 [ 226.617905][T11507] dump_stack+0x11/0x1a [ 226.622052][T11507] should_fail+0x23c/0x250 [ 226.626480][T11507] ? dst_alloc+0x108/0x300 [ 226.631038][T11507] __should_failslab+0x81/0x90 [ 226.635817][T11507] should_failslab+0x5/0x20 [ 226.640469][T11507] kmem_cache_alloc+0x46/0x2e0 [ 226.645238][T11507] ? fib4_rule_suppress+0x147/0x270 [ 226.650572][T11507] dst_alloc+0x108/0x300 [ 226.655564][T11507] __mkroute_output+0x452/0xc40 [ 226.660591][T11507] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 226.666561][T11507] ip_route_output_key_hash+0xa8/0xe0 [ 226.672188][T11507] __ip4_datagram_connect+0x3e0/0x710 [ 226.677546][T11507] ? __inet_bind+0x560/0x560 [ 226.682151][T11507] ip4_datagram_connect+0x2a/0x40 [ 226.687335][T11507] inet_dgram_connect+0x107/0x190 [ 226.692441][T11507] __sys_connect_file+0xd3/0xe0 [ 226.697394][T11507] io_issue_sqe+0xf52/0x6870 [ 226.701973][T11507] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 226.707819][T11507] ? __list_del_entry_valid+0x54/0xc0 [ 226.713366][T11507] ? rmqueue_pcplist+0x145/0x1d0 [ 226.718384][T11507] ? mntput_no_expire+0x64/0x730 [ 226.723543][T11507] ? _raw_spin_lock_irqsave+0x25/0x80 [ 226.728901][T11507] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 226.735447][T11507] ? percpu_counter_add_batch+0xc0/0xd0 [ 226.741283][T11507] ? io_submit_flush_completions+0x31e/0x3f0 [ 226.747333][T11507] __io_queue_sqe+0xe7/0x360 [ 226.752374][T11507] io_submit_sqe+0x1695/0x3400 [ 226.757293][T11507] ? kmem_cache_alloc_bulk+0x289/0x340 [ 226.763024][T11507] io_submit_sqes+0x822/0xe50 [ 226.768780][T11507] __se_sys_io_uring_enter+0x1c7/0xa10 [ 226.774822][T11507] ? __fget_light+0x21b/0x260 [ 226.779567][T11507] ? fput+0x2d/0x130 [ 226.783603][T11507] __x64_sys_io_uring_enter+0x74/0x80 [ 226.788985][T11507] do_syscall_64+0x3d/0x90 [ 226.793646][T11507] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 226.799632][T11507] RIP: 0033:0x4665e9 [ 226.803554][T11507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 226.823663][T11507] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 226.832322][T11507] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 226.841106][T11507] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 226.850536][T11507] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 226.858745][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.866903][T11507] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 226.874870][T11515] CPU: 0 PID: 11515 Comm: syz-executor.4 Not tainted 5.14.0-rc2-syzkaller #0 [ 226.883962][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 226.894195][T11515] Call Trace: [ 226.897554][T11515] dump_stack_lvl+0xb7/0x103 [ 226.902448][T11515] dump_stack+0x11/0x1a [ 226.906617][T11515] should_fail+0x23c/0x250 [ 226.911148][T11515] __should_failslab+0x81/0x90 [ 226.916173][T11515] should_failslab+0x5/0x20 [ 226.920887][T11515] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 226.926689][T11515] ? __get_vm_area_node+0x11b/0x260 [ 226.932177][T11515] ? local_bh_enable+0x1b/0x20 [ 226.935658][T11521] FAULT_INJECTION: forcing a failure. [ 226.935658][T11521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.937132][T11515] ? lock_sock_nested+0x128/0x160 [ 226.937157][T11515] __get_vm_area_node+0x11b/0x260 [ 226.961492][T11515] __vmalloc_node_range+0xb7/0x5a0 [ 226.966830][T11515] ? netlink_sendmsg+0x427/0x7c0 [ 226.971856][T11515] ? rht_key_hashfn+0x60/0x60 [ 226.976606][T11515] ? netlink_hash+0x90/0x90 [ 226.981345][T11515] ? netlink_sendmsg+0x427/0x7c0 [ 226.986398][T11515] vmalloc+0x5a/0x70 [ 226.990337][T11515] ? netlink_sendmsg+0x427/0x7c0 [ 226.995506][T11515] netlink_sendmsg+0x427/0x7c0 [ 227.000269][T11515] ? netlink_getsockopt+0x720/0x720 [ 227.005537][T11515] kernel_sendmsg+0x97/0xd0 [ 227.010055][T11515] sock_no_sendpage+0x84/0xb0 [ 227.014779][T11515] ? restore_image+0x21/0x30 [ 227.019515][T11515] ? __receive_sock+0x20/0x20 [ 227.024532][T11515] kernel_sendpage+0x187/0x200 [ 227.029283][T11515] ? __receive_sock+0x20/0x20 [ 227.033959][T11515] sock_sendpage+0x5a/0x70 [ 227.038447][T11515] pipe_to_sendpage+0x128/0x160 [ 227.043441][T11515] ? sock_fasync+0xc0/0xc0 [ 227.047973][T11515] __splice_from_pipe+0x207/0x500 [ 227.053132][T11515] ? generic_splice_sendpage+0xb0/0xb0 [ 227.058651][T11515] generic_splice_sendpage+0x80/0xb0 [ 227.063945][T11515] ? iter_file_splice_write+0x750/0x750 [ 227.069492][T11515] do_splice+0x9aa/0xd30 [ 227.074714][T11515] ? vfs_write+0x50c/0x770 [ 227.079310][T11515] ? __fget_light+0x21b/0x260 [ 227.084052][T11515] __se_sys_splice+0x2a6/0x390 [ 227.089131][T11515] __x64_sys_splice+0x74/0x80 [ 227.094001][T11515] do_syscall_64+0x3d/0x90 [ 227.098524][T11515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.104554][T11515] RIP: 0033:0x4665e9 [ 227.108616][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.128380][T11515] RSP: 002b:00007ff9e4f80188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 227.138463][T11515] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 227.146796][T11515] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 227.154760][T11515] RBP: 00007ff9e4f801d0 R08: 000000000004ffe0 R09: 0000000000000000 [ 227.162724][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.170695][T11515] R13: 00007ffe3f6036df R14: 00007ff9e4f80300 R15: 0000000000022000 [ 227.178737][T11521] CPU: 1 PID: 11521 Comm: syz-executor.0 Not tainted 5.14.0-rc2-syzkaller #0 [ 227.178800][T11515] syz-executor.4: vmalloc error: size 4416, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 227.187641][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.187652][T11521] Call Trace: [ 227.187659][T11521] dump_stack_lvl+0xb7/0x103 [ 227.199902][T11515] ,cpuset= [ 227.210876][T11521] dump_stack+0x11/0x1a [ 227.210901][T11521] should_fail+0x23c/0x250 [ 227.214890][T11515] /,mems_allowed=0 [ 227.236050][T11521] should_fail_usercopy+0x16/0x20 [ 227.241244][T11521] _copy_to_user+0x1c/0x90 [ 227.246043][T11521] simple_read_from_buffer+0xab/0x120 [ 227.251971][T11521] proc_fail_nth_read+0xf6/0x140 [ 227.256996][T11521] ? rw_verify_area+0x136/0x250 [ 227.262702][T11521] ? proc_fault_inject_write+0x200/0x200 [ 227.268571][T11521] vfs_read+0x154/0x5d0 [ 227.273110][T11521] ? finish_task_switch+0xce/0x290 [ 227.278832][T11521] ? __fget_light+0x21b/0x260 [ 227.283501][T11521] ? __cond_resched+0x11/0x40 [ 227.288607][T11521] ksys_read+0xce/0x180 [ 227.293239][T11521] __x64_sys_read+0x3e/0x50 [ 227.297935][T11521] do_syscall_64+0x3d/0x90 [ 227.302613][T11521] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.310491][T11521] RIP: 0033:0x41936c [ 227.314615][T11521] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 227.334397][T11521] RSP: 002b:00007fad240d5170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.343146][T11521] RAX: ffffffffffffffda RBX: 000000000000004c RCX: 000000000041936c [ 227.351195][T11521] RDX: 000000000000000f RSI: 00007fad240d51e0 RDI: 0000000000000004 [ 227.359156][T11521] RBP: 00007fad240d51d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.367464][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 08:30:14 executing program 1 (fault-call:9 fault-nth:86): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:14 executing program 0 (fault-call:1 fault-nth:9): r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:15 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 227.375791][T11521] R13: 00007ffe6ae0e73f R14: 00007fad240d5300 R15: 0000000000022000 [ 227.384155][T11515] CPU: 0 PID: 11515 Comm: syz-executor.4 Not tainted 5.14.0-rc2-syzkaller #0 [ 227.393308][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.408854][T11515] Call Trace: [ 227.412131][T11515] dump_stack_lvl+0xb7/0x103 [ 227.416861][T11515] dump_stack+0x11/0x1a [ 227.421239][T11515] warn_alloc+0x105/0x160 08:30:15 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 227.428572][T11515] ? lock_sock_nested+0x128/0x160 [ 227.433771][T11515] __vmalloc_node_range+0x20f/0x5a0 [ 227.439236][T11515] ? rht_key_hashfn+0x60/0x60 [ 227.444077][T11515] ? netlink_hash+0x90/0x90 [ 227.448803][T11527] FAULT_INJECTION: forcing a failure. [ 227.448803][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.448945][T11515] ? netlink_sendmsg+0x427/0x7c0 [ 227.468334][T11515] vmalloc+0x5a/0x70 [ 227.472396][T11515] ? netlink_sendmsg+0x427/0x7c0 [ 227.477540][T11515] netlink_sendmsg+0x427/0x7c0 [ 227.482615][T11515] ? netlink_getsockopt+0x720/0x720 [ 227.487885][T11515] kernel_sendmsg+0x97/0xd0 [ 227.492458][T11515] sock_no_sendpage+0x84/0xb0 [ 227.497223][T11515] ? restore_image+0x21/0x30 [ 227.501795][T11515] ? __receive_sock+0x20/0x20 [ 227.506730][T11515] kernel_sendpage+0x187/0x200 [ 227.511562][T11515] ? __receive_sock+0x20/0x20 [ 227.516430][T11515] sock_sendpage+0x5a/0x70 [ 227.520955][T11515] pipe_to_sendpage+0x128/0x160 [ 227.526131][T11515] ? sock_fasync+0xc0/0xc0 [ 227.530671][T11515] __splice_from_pipe+0x207/0x500 [ 227.535757][T11515] ? generic_splice_sendpage+0xb0/0xb0 [ 227.541212][T11515] generic_splice_sendpage+0x80/0xb0 [ 227.546568][T11515] ? iter_file_splice_write+0x750/0x750 [ 227.552108][T11515] do_splice+0x9aa/0xd30 [ 227.556424][T11515] ? vfs_write+0x50c/0x770 [ 227.561312][T11515] ? __fget_light+0x21b/0x260 [ 227.566157][T11515] __se_sys_splice+0x2a6/0x390 [ 227.571109][T11515] __x64_sys_splice+0x74/0x80 [ 227.575871][T11515] do_syscall_64+0x3d/0x90 [ 227.580467][T11515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.586516][T11515] RIP: 0033:0x4665e9 [ 227.590566][T11515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.610906][T11515] RSP: 002b:00007ff9e4f80188 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 227.619584][T11515] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 227.627950][T11515] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 227.636700][T11515] RBP: 00007ff9e4f801d0 R08: 000000000004ffe0 R09: 0000000000000000 [ 227.645136][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.653643][T11515] R13: 00007ffe3f6036df R14: 00007ff9e4f80300 R15: 0000000000022000 [ 227.662494][T11527] CPU: 1 PID: 11527 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 227.662569][T11515] Mem-Info: [ 227.672220][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 227.672234][T11527] Call Trace: [ 227.672240][T11527] dump_stack_lvl+0xb7/0x103 [ 227.675364][T11515] active_anon:63 inactive_anon:86246 isolated_anon:0 [ 227.675364][T11515] active_file:5298 inactive_file:42710 isolated_file:0 [ 227.675364][T11515] unevictable:0 dirty:254 writeback:0 [ 227.675364][T11515] slab_reclaimable:3756 slab_unreclaimable:6538 [ 227.675364][T11515] mapped:60559 shmem:2616 pagetables:2155 bounce:0 [ 227.675364][T11515] free:1814973 free_pcp:3044 free_cma:0 [ 227.685654][T11527] dump_stack+0x11/0x1a [ 227.685679][T11527] should_fail+0x23c/0x250 [ 227.689342][T11515] Node 0 active_anon:252kB inactive_anon:344984kB active_file:21192kB inactive_file:170840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:242236kB dirty:1016kB writeback:0kB shmem:10464kB writeback_tmp:0kB kernel_stack:2416kB pagetables:8620kB all_unreclaimable? no [ 227.694073][T11527] should_fail_usercopy+0x16/0x20 [ 227.731253][T11515] Node 0 [ 227.735370][T11527] _copy_from_user+0x1c/0xd0 [ 227.735392][T11527] move_addr_to_kernel+0x7e/0x110 [ 227.739791][T11515] DMA free:15360kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 227.766980][T11527] io_issue_sqe+0x2489/0x6870 [ 227.767002][T11527] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 227.772204][T11515] lowmem_reserve[]: 0 [ 227.775172][T11527] ? __list_del_entry_valid+0x54/0xc0 [ 227.780032][T11515] 2942 7920 7920 [ 227.780049][T11515] Node 0 DMA32 free:3012568kB min:4224kB low:7236kB high:10248kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:3017344kB mlocked:0kB bounce:0kB free_pcp:4776kB local_pcp:3032kB free_cma:0kB [ 227.785082][T11527] ? rmqueue_pcplist+0x145/0x1d0 [ 227.810501][T11515] lowmem_reserve[]: [ 227.815220][T11527] ? mntput_no_expire+0x64/0x730 [ 227.821008][T11515] 0 [ 227.825056][T11527] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 227.830437][T11515] 0 4978 [ 227.834047][T11527] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 227.834070][T11527] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 227.834089][T11527] ? percpu_counter_add_batch+0xc0/0xd0 [ 227.862407][T11515] 4978 [ 227.867599][T11527] ? io_submit_flush_completions+0x31e/0x3f0 [ 227.871408][T11515] [ 227.871413][T11515] Node 0 [ 227.876316][T11527] __io_queue_sqe+0xe7/0x360 [ 227.876338][T11527] io_submit_sqe+0x1695/0x3400 [ 227.878811][T11515] Normal free:4231964kB min:7152kB low:12248kB high:17344kB reserved_highatomic:0KB active_anon:252kB inactive_anon:344984kB active_file:21192kB inactive_file:170840kB unevictable:0kB writepending:1016kB present:5242880kB managed:5098028kB mlocked:0kB bounce:0kB free_pcp:7400kB local_pcp:2432kB free_cma:0kB [ 227.884328][T11527] ? kmem_cache_alloc_bulk+0x289/0x340 [ 227.887264][T11515] lowmem_reserve[]: [ 227.892765][T11527] io_submit_sqes+0x822/0xe50 [ 227.898557][T11515] 0 [ 227.904153][T11527] __se_sys_io_uring_enter+0x1c7/0xa10 [ 227.906990][T11515] 0 [ 227.913022][T11527] ? __fget_light+0x21b/0x260 [ 227.915354][T11515] 0 [ 227.918281][T11527] ? fput+0x2d/0x130 [ 227.918299][T11527] __x64_sys_io_uring_enter+0x74/0x80 [ 227.923001][T11515] 0 [ 227.927910][T11527] do_syscall_64+0x3d/0x90 [ 227.927931][T11527] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 227.957532][T11515] Node 0 [ 227.963036][T11527] RIP: 0033:0x4665e9 [ 227.966836][T11515] DMA: 08:30:15 executing program 1 (fault-call:9 fault-nth:87): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8c800) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f0000000140)=""/36, 0x24}], 0x2, 0x200, 0x94b3) tkill(r3, 0x1000000000016) [ 227.971467][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 227.973942][T11515] 0*4kB 0*8kB [ 227.979455][T11527] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 227.979472][T11527] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 227.979483][T11527] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 227.982145][T11515] 0*16kB 08:30:15 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 227.987070][T11527] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 227.987083][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.989584][T11515] 0*32kB [ 227.993447][T11527] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 227.998926][T11515] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.114789][T11515] Node 0 DMA32: 2*4kB (M) 0*8kB 1*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 1*2048kB (M) 734*4096kB (M) = 3012568kB [ 228.131131][T11515] Node 0 Normal: 385*4kB (UME) 471*8kB (UME) 242*16kB (UME) 125*32kB (UME) 47*64kB (UM) 22*128kB (UME) 12*256kB (UME) 10*512kB (UME) 2*1024kB (M) 2*2048kB (M) 1025*4096kB (UM) = 4231740kB [ 228.134583][T11539] FAULT_INJECTION: forcing a failure. [ 228.134583][T11539] name failslab, interval 1, probability 0, space 0, times 0 [ 228.150703][T11515] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 228.150724][T11515] 17032 total pagecache pages [ 228.150730][T11515] 0 pages in swap cache [ 228.163308][T11539] CPU: 1 PID: 11539 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 228.163361][T11539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.172980][T11515] Swap cache stats: add 0, delete 0, find 0/0 [ 228.177618][T11539] Call Trace: [ 228.177627][T11539] dump_stack_lvl+0xb7/0x103 [ 228.181941][T11515] Free swap = 0kB [ 228.181947][T11515] Total swap = 0kB [ 228.191166][T11539] dump_stack+0x11/0x1a [ 228.191183][T11539] should_fail+0x23c/0x250 08:30:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 228.201623][T11515] 2097051 pages RAM [ 228.208035][T11539] ? dst_alloc+0x108/0x300 [ 228.211394][T11515] 0 pages HighMem/MovableOnly [ 228.211401][T11515] 64368 pages reserved [ 228.215955][T11539] __should_failslab+0x81/0x90 [ 228.215975][T11539] should_failslab+0x5/0x20 [ 228.261124][T11539] kmem_cache_alloc+0x46/0x2e0 [ 228.266127][T11539] ? fib4_rule_suppress+0x147/0x270 [ 228.271592][T11539] dst_alloc+0x108/0x300 [ 228.275973][T11539] __mkroute_output+0x452/0xc40 [ 228.281598][T11539] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 228.287800][T11539] ip_route_output_key_hash+0xa8/0xe0 [ 228.293788][T11539] __ip4_datagram_connect+0x3e0/0x710 [ 228.299649][T11539] ? __inet_bind+0x560/0x560 [ 228.304771][T11539] ip4_datagram_connect+0x2a/0x40 [ 228.310128][T11539] inet_dgram_connect+0x107/0x190 [ 228.315340][T11539] __sys_connect_file+0xd3/0xe0 [ 228.320429][T11539] io_issue_sqe+0xf52/0x6870 [ 228.325341][T11539] ? rmqueue+0x4a/0xcc0 [ 228.329893][T11539] ? __list_del_entry_valid+0x54/0xc0 [ 228.336010][T11539] ? rmqueue_pcplist+0x145/0x1d0 [ 228.341053][T11539] ? get_page_from_freelist+0x54e/0x820 [ 228.346941][T11539] ? _raw_spin_lock_irqsave+0x25/0x80 [ 228.353050][T11539] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 228.355102][T11553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11553 comm=syz-executor.4 [ 228.359683][T11539] ? percpu_counter_add_batch+0xc0/0xd0 [ 228.375132][T11553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11553 comm=syz-executor.4 [ 228.381370][T11539] ? io_submit_flush_completions+0x31e/0x3f0 [ 228.401465][T11539] __io_queue_sqe+0xe7/0x360 [ 228.406279][T11539] io_submit_sqe+0x1695/0x3400 [ 228.411199][T11539] ? kmem_cache_alloc_bulk+0x289/0x340 [ 228.419250][T11539] io_submit_sqes+0x822/0xe50 [ 228.424412][T11539] __se_sys_io_uring_enter+0x1c7/0xa10 [ 228.430902][T11539] ? __fget_light+0x21b/0x260 [ 228.435780][T11539] ? fput+0x2d/0x130 [ 228.440362][T11539] __x64_sys_io_uring_enter+0x74/0x80 [ 228.446650][T11539] do_syscall_64+0x3d/0x90 [ 228.451280][T11539] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.457427][T11539] RIP: 0033:0x4665e9 [ 228.461762][T11539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.483622][T11539] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 228.493178][T11539] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 228.501359][T11539] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 228.510228][T11539] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.518298][T11539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.527122][T11539] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:16 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = eventfd(0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000500)=""/241, 0xf1}, {&(0x7f0000000240)=""/152, 0x98}, {&(0x7f0000000300)=""/129, 0x81}], 0x4) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800018, 0x12, r2, 0x3000) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) close(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) tkill(r3, 0x1000000000016) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x50, r1, 0xf6066000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f00000000c0), 0x0, 0xd9f, 0x0) mmap(&(0x7f000075d000/0x2000)=nil, 0x2000, 0x0, 0x30, r4, 0xa6fd9000) 08:30:16 executing program 1 (fault-call:9 fault-nth:88): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:16 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r3 = getegid() setgroups(0x7, &(0x7f0000000780)=[0x0, r2, r2, 0x0, 0x0, 0x0, 0x0]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200002e716d97d862551f835434efb9f0c85969c5eed2133d8c17fff8ee4dcab0f3a9cd7d16c893ccfba6918cd514c402ae82711f4fc25707985c58cb993ee05500256b401ae2bdfd384a5100"/90, @ANYRES32=r1, @ANYBLOB="040002000000000008000200", @ANYRES32=r3, @ANYRES64=r0, @ANYRES16], 0x34, 0x0) r4 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r4, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r4, 0x302, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8801) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITE={0x17, 0x4, 0x2000, @fd_index=0xa, 0x2, &(0x7f0000000240)="c1c4346278c6653b35c1d89086b66953aa4dbc6ea5015502a3edb68edc5b4c69bfafac5b72caaa304ca54564a31235bd7a04ffc49362905ce5bb0e7422568518c378855e9f53e47cbd9b1d988bf63bfe135297889c5feaaeb5c3d088cd2f99537e091a045589b9a1a4d58f8b3b576e8d30b2326babb65bb74c662b440100f2286b97916ced7f4df552be37533574c4bd2a7898f60afb96afa1d06c9da23f89a1078dbffc37d8", 0xa6, 0x1}, 0x200) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34010000170001000000000000000000fc0100000000000000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000bb00"/104, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1e00011ae000000200000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000c0008000800080000000200"], 0x134}}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x7, 0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[r4, r9]}, 0x2) 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 228.604851][T11560] FAULT_INJECTION: forcing a failure. [ 228.604851][T11560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.620483][T11560] CPU: 0 PID: 11560 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 228.630750][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.641138][T11560] Call Trace: [ 228.644680][T11560] dump_stack_lvl+0xb7/0x103 [ 228.649540][T11560] dump_stack+0x11/0x1a 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 228.654754][T11560] should_fail+0x23c/0x250 [ 228.659536][T11560] should_fail_usercopy+0x16/0x20 [ 228.664591][T11560] _copy_from_user+0x1c/0xd0 [ 228.669371][T11560] move_addr_to_kernel+0x7e/0x110 [ 228.674407][T11560] io_issue_sqe+0x2489/0x6870 [ 228.679482][T11560] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 228.685479][T11560] ? __list_del_entry_valid+0x54/0xc0 [ 228.691441][T11560] ? rmqueue_pcplist+0x145/0x1d0 [ 228.696735][T11560] ? mntput_no_expire+0x64/0x730 [ 228.702179][T11560] ? _raw_spin_lock_irqsave+0x25/0x80 [ 228.703845][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.708591][T11560] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 228.708621][T11560] ? percpu_counter_add_batch+0xc0/0xd0 [ 228.708645][T11560] ? io_submit_flush_completions+0x31e/0x3f0 [ 228.737544][T11560] __io_queue_sqe+0xe7/0x360 [ 228.742403][T11560] io_submit_sqe+0x1695/0x3400 [ 228.747983][T11560] ? kmem_cache_alloc_bulk+0x289/0x340 [ 228.754467][T11560] io_submit_sqes+0x822/0xe50 [ 228.759736][T11560] __se_sys_io_uring_enter+0x1c7/0xa10 [ 228.765704][T11560] ? __fget_light+0x21b/0x260 [ 228.771789][T11560] ? fput+0x2d/0x130 [ 228.776225][T11560] __x64_sys_io_uring_enter+0x74/0x80 [ 228.782084][T11560] do_syscall_64+0x3d/0x90 [ 228.788141][T11560] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 228.794702][T11560] RIP: 0033:0x4665e9 [ 228.799052][T11560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 228.821291][T11560] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 228.830853][T11560] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 228.843312][T11560] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 08:30:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x7, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:16 executing program 1 (fault-call:9 fault-nth:89): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 228.852225][T11560] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 228.861037][T11560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.869365][T11560] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 228.929367][T11576] FAULT_INJECTION: forcing a failure. [ 228.929367][T11576] name failslab, interval 1, probability 0, space 0, times 0 [ 228.942836][T11576] CPU: 1 PID: 11576 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 228.951802][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.962364][T11576] Call Trace: [ 228.965755][T11576] dump_stack_lvl+0xb7/0x103 [ 228.970668][T11576] dump_stack+0x11/0x1a [ 228.974835][T11576] should_fail+0x23c/0x250 [ 228.979257][T11576] ? dst_alloc+0x108/0x300 [ 228.983850][T11576] __should_failslab+0x81/0x90 [ 228.989123][T11576] should_failslab+0x5/0x20 [ 228.993798][T11576] kmem_cache_alloc+0x46/0x2e0 [ 228.998946][T11576] ? fib4_rule_suppress+0x147/0x270 [ 229.004575][T11576] dst_alloc+0x108/0x300 [ 229.008901][T11576] __mkroute_output+0x452/0xc40 [ 229.013916][T11576] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 229.019990][T11576] ip_route_output_key_hash+0xa8/0xe0 [ 229.026209][T11576] __ip4_datagram_connect+0x3e0/0x710 [ 229.032082][T11576] ? __inet_bind+0x560/0x560 [ 229.036691][T11576] ip4_datagram_connect+0x2a/0x40 [ 229.042383][T11576] inet_dgram_connect+0x107/0x190 [ 229.047898][T11576] __sys_connect_file+0xd3/0xe0 [ 229.053035][T11576] io_issue_sqe+0xf52/0x6870 [ 229.057617][T11576] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 229.063898][T11576] ? __list_del_entry_valid+0x54/0xc0 [ 229.069361][T11576] ? rmqueue_pcplist+0x145/0x1d0 [ 229.074579][T11576] ? mntput_no_expire+0x64/0x730 [ 229.080488][T11576] ? _raw_spin_lock_irqsave+0x25/0x80 [ 229.087076][T11576] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 229.093106][T11576] ? percpu_counter_add_batch+0xc0/0xd0 [ 229.098976][T11576] ? io_submit_flush_completions+0x31e/0x3f0 [ 229.105084][T11576] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 229.111336][T11576] __io_queue_sqe+0xe7/0x360 [ 229.117197][T11576] io_submit_sqe+0x1695/0x3400 [ 229.122196][T11576] ? kmem_cache_alloc_bulk+0x289/0x340 [ 229.127753][T11576] io_submit_sqes+0x822/0xe50 [ 229.133142][T11576] __se_sys_io_uring_enter+0x1c7/0xa10 [ 229.139818][T11576] ? __fget_light+0x21b/0x260 [ 229.145641][T11576] ? fput+0x2d/0x130 [ 229.149906][T11576] __x64_sys_io_uring_enter+0x74/0x80 [ 229.155580][T11576] do_syscall_64+0x3d/0x90 [ 229.160092][T11576] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 229.166045][T11576] RIP: 0033:0x4665e9 08:30:16 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0xffffffffffffffff, 0x0) 08:30:16 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x28, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:17 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 229.169945][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 229.189736][T11576] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 229.198564][T11576] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 229.206858][T11576] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 229.215011][T11576] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 229.223945][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.232001][T11576] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 [ 229.486721][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 08:30:19 executing program 1 (fault-call:9 fault-nth:90): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:19 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000001800)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(xtea)\x00'}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000040)="fb2c0394b4b21f2313a5e46cae1b104a2b6e344a7834aee66f326a57e9a92cf369e05c9cd33d189b79f08a6378eb1a16581d9c986c3858d8dd3b", 0x3a}, {&(0x7f0000000200)="1c2957659c2830730a8483f3868969bd4e3d74ab05e882a3059059845c2e87629ef66798fedb346295dfe47ff0c28b30d8979ac68c0b19839ca7e1a5e6eb4dea05b0317e6cc45580512d655d0f83de1c61e730eb2e0c0d154ed476515a12c82a1fa61a2faf4b440b039fe4973e256547646d94", 0x73}, {&(0x7f0000000280)="acfbf8118493ed48077ecab975229d0baf3e07495e3d0d076580fb11c8354083833c242fa034476c568496850f94e4eff25ba8b0feef1fb506ac31a0e0f020223b81706e31dfb61bd92a19bc7babc500177f42154bd309f41a594fb100b793f597444dd9317fb69b969bc4e3393e2cf3a5449436ba1d4600565b70e7c590b03744b24901a1e60ae1c68fff23d0bd11023104a78f5fbf7627f229614744a0ce54452261da8da286cc7dfe1f2b7a55926c63ed99bed0abcc2f46fed4297089dcaa280bfd9cf65358f0d8", 0xc9}, {&(0x7f00000004c0)="af61576170cdf7a850bed4aacdccc42fccb9d194abeab08451582bcd61dedf8a1e7e2bc636000e82412d298efbd1597bda3bf5acf240c293987b17ab507e013c4c1bf1d4788d82df9584b90e9d5f87bc13ab0d47be857c09bad34a5469cf92b776fda1752ef08c8602d0aed62629035c20c43d197bd29220fc7100c4c2bf839fbcebab32fdf52114a74df7c3513e967a6fabe4d3338c64f2d15b3728859939c43248e9e4770be76d8057554934392374c76baf70feefdcbefc315dc575c46529cc25cfbb30d3229fc149f67ad5373eed61b505c3fdf6d6e888e0e94246c5459c4370a46308f84284", 0xe8}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="dedacb41792f1eb3b31aea2ce5a4991b1846178179e25126060e017cd1cc023f5aa27c490263a12d8c0834c82056a46f6cfe6ab87d2812ee75f1175afd6a7a0916932aec122de154c020c4c41f8fb58311686497166d18d858257bff9290de578435bd410cc01be362f60f09d605f9843f1efacb4a64d65b0e030b5d42da5e44921bc9c55c06", 0x86}, {&(0x7f0000000100)="dc66615a749ca59960d68935b1ac8187419148", 0x13}, {&(0x7f0000001680)="904b495f59671008362b51a77e3fcc48d0570576d559326e6ea405a9b9d33e3db1c0ba466122c56e4b4b6caeabb2864d45d852b52d8392fae1abee5bf711638c05543c86230b81a2a79f74488963c6a798de7813cc78fef5f249b0c10e8bd0d6535f8bcb6070cc2af55ff89dc25da0a7fc113173d3d8a40ab97eabe25fb7ced5ed0d58d85bb96e057f242b240839be037817a16bc3eeabb5d0ff84c0d9ad02a164ce", 0xa2}, {&(0x7f0000000380)="1cf8590cbd29ec3eea8dca7ea86e994fc5adae0433523b1d34a6564c6274f5b9c55b04d650d95ee03e66aef721aa49384efeab74cc5b0f762f2a0c07538494b89c3baf7faf4e54857b02eeeb1718c9e66297c45093e724e869e6", 0x5a}], 0x9}, 0x0, 0x20004081, 0x1}, 0x8) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x5) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:19 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x2) 08:30:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f00000000c0)=0x1e) preadv(r0, &(0x7f0000000300), 0x0, 0x401, 0xb38) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) mmap(&(0x7f00003f1000/0x3000)=nil, 0x3000, 0x1000004, 0x80911, r2, 0xe94d3000) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r5, 0x40189429, &(0x7f0000000100)={0x1, 0x1, 0x2}) preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000140)=""/213, 0xd5}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/12, 0xc}], 0x3, 0x1, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='\x00', 0x0, 0x289) 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x4ba, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 231.636420][T11606] FAULT_INJECTION: forcing a failure. [ 231.636420][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.649637][T11606] CPU: 1 PID: 11606 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 231.658596][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 231.668742][T11606] Call Trace: [ 231.672074][T11606] dump_stack_lvl+0xb7/0x103 [ 231.676846][T11606] dump_stack+0x11/0x1a [ 231.681015][T11606] should_fail+0x23c/0x250 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/177, 0xb1}], 0x1, 0x1, 0x19a) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x12, r1, 0xd3475000) r2 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 231.685471][T11606] should_fail_usercopy+0x16/0x20 [ 231.690499][T11606] _copy_from_user+0x1c/0xd0 [ 231.695102][T11606] move_addr_to_kernel+0x7e/0x110 [ 231.700486][T11606] io_issue_sqe+0x2489/0x6870 [ 231.705171][T11606] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 231.711097][T11606] ? __list_del_entry_valid+0x54/0xc0 [ 231.716493][T11606] ? rmqueue_pcplist+0x145/0x1d0 [ 231.719514][T11618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11618 comm=syz-executor.4 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 231.721622][T11606] ? mntput_no_expire+0x64/0x730 [ 231.721647][T11606] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 231.735374][T11618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11618 comm=syz-executor.4 [ 231.740273][T11606] ? _raw_spin_lock_irqsave+0x25/0x80 [ 231.764555][T11606] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 231.770368][T11606] ? percpu_counter_add_batch+0xc0/0xd0 [ 231.775930][T11606] ? io_submit_flush_completions+0x31e/0x3f0 [ 231.781938][T11606] __io_queue_sqe+0xe7/0x360 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xec0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 231.786650][T11606] io_submit_sqe+0x1695/0x3400 [ 231.791423][T11606] ? kmem_cache_alloc_bulk+0x289/0x340 [ 231.797242][T11606] io_submit_sqes+0x822/0xe50 [ 231.802192][T11606] __se_sys_io_uring_enter+0x1c7/0xa10 [ 231.807662][T11606] ? __fget_light+0x21b/0x260 [ 231.812563][T11606] ? fput+0x2d/0x130 [ 231.816624][T11606] __x64_sys_io_uring_enter+0x74/0x80 [ 231.822183][T11606] do_syscall_64+0x3d/0x90 [ 231.827052][T11606] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 231.833282][T11606] RIP: 0033:0x4665e9 [ 231.837311][T11606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 231.857507][T11606] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 231.866045][T11606] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 231.874607][T11606] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 08:30:19 executing program 1 (fault-call:9 fault-nth:91): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:19 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x2800, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 231.882683][T11606] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 231.890930][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 231.899504][T11606] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:19 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x6ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 231.979800][T11642] FAULT_INJECTION: forcing a failure. [ 231.979800][T11642] name failslab, interval 1, probability 0, space 0, times 0 [ 231.993566][T11642] CPU: 1 PID: 11642 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 232.002720][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.013025][T11642] Call Trace: [ 232.016324][T11642] dump_stack_lvl+0xb7/0x103 [ 232.021012][T11642] dump_stack+0x11/0x1a [ 232.025186][T11642] should_fail+0x23c/0x250 [ 232.029909][T11642] ? dst_alloc+0x108/0x300 [ 232.034545][T11642] __should_failslab+0x81/0x90 [ 232.039797][T11642] should_failslab+0x5/0x20 [ 232.044292][T11642] kmem_cache_alloc+0x46/0x2e0 [ 232.049147][T11642] ? fib4_rule_suppress+0x147/0x270 [ 232.054653][T11642] dst_alloc+0x108/0x300 [ 232.059067][T11642] __mkroute_output+0x452/0xc40 [ 232.063960][T11642] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 232.070538][T11642] ip_route_output_key_hash+0xa8/0xe0 [ 232.076057][T11642] __ip4_datagram_connect+0x3e0/0x710 [ 232.082254][T11642] ? __inet_bind+0x560/0x560 [ 232.087006][T11642] ip4_datagram_connect+0x2a/0x40 [ 232.092438][T11642] inet_dgram_connect+0x107/0x190 [ 232.097594][T11642] __sys_connect_file+0xd3/0xe0 [ 232.102627][T11642] io_issue_sqe+0xf52/0x6870 [ 232.107304][T11642] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.113609][T11642] ? __list_del_entry_valid+0x54/0xc0 [ 232.119143][T11642] ? rmqueue_pcplist+0x145/0x1d0 [ 232.124131][T11642] ? mntput_no_expire+0x64/0x730 [ 232.129099][T11642] ? _raw_spin_lock_irqsave+0x25/0x80 [ 232.134963][T11642] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.141003][T11642] ? percpu_counter_add_batch+0xc0/0xd0 [ 232.146993][T11642] ? io_submit_flush_completions+0x31e/0x3f0 [ 232.153357][T11642] __io_queue_sqe+0xe7/0x360 [ 232.158358][T11642] io_submit_sqe+0x1695/0x3400 [ 232.163303][T11642] ? kmem_cache_alloc_bulk+0x289/0x340 [ 232.168862][T11642] io_submit_sqes+0x822/0xe50 [ 232.173547][T11642] __se_sys_io_uring_enter+0x1c7/0xa10 [ 232.179179][T11642] ? __fget_light+0x21b/0x260 [ 232.184038][T11642] ? fput+0x2d/0x130 [ 232.187922][T11642] __x64_sys_io_uring_enter+0x74/0x80 [ 232.193472][T11642] do_syscall_64+0x3d/0x90 [ 232.197934][T11642] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.204064][T11642] RIP: 0033:0x4665e9 [ 232.208052][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 232.227937][T11642] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 232.236383][T11642] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 232.244540][T11642] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 232.252523][T11642] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.260825][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.268789][T11642] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:20 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x3) 08:30:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:20 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xba04, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:20 executing program 1 (fault-call:9 fault-nth:92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:20 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xc00e, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 232.507849][T11654] FAULT_INJECTION: forcing a failure. [ 232.507849][T11654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.520940][T11654] CPU: 1 PID: 11654 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 232.529806][T11654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.540301][T11654] Call Trace: [ 232.543590][T11654] dump_stack_lvl+0xb7/0x103 [ 232.548302][T11654] dump_stack+0x11/0x1a [ 232.552472][T11654] should_fail+0x23c/0x250 [ 232.556912][T11654] should_fail_usercopy+0x16/0x20 [ 232.561933][T11654] _copy_from_user+0x1c/0xd0 [ 232.566526][T11654] move_addr_to_kernel+0x7e/0x110 [ 232.571555][T11654] io_issue_sqe+0x2489/0x6870 [ 232.576596][T11654] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.582684][T11654] ? __list_del_entry_valid+0x54/0xc0 [ 232.588061][T11654] ? rmqueue_pcplist+0x145/0x1d0 [ 232.593014][T11654] ? mntput_no_expire+0x64/0x730 [ 232.597944][T11654] ? _raw_spin_lock_irqsave+0x25/0x80 [ 232.603299][T11654] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.609094][T11654] ? percpu_counter_add_batch+0xc0/0xd0 [ 232.614648][T11654] ? io_submit_flush_completions+0x31e/0x3f0 [ 232.620779][T11654] __io_queue_sqe+0xe7/0x360 [ 232.625387][T11654] io_submit_sqe+0x1695/0x3400 [ 232.630583][T11654] ? kmem_cache_alloc_bulk+0x289/0x340 [ 232.636448][T11654] io_submit_sqes+0x822/0xe50 [ 232.641201][T11654] __se_sys_io_uring_enter+0x1c7/0xa10 [ 232.646825][T11654] ? __fget_light+0x21b/0x260 [ 232.651493][T11654] ? fput+0x2d/0x130 08:30:20 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f0000000080)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:20 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x34000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 232.655369][T11654] __x64_sys_io_uring_enter+0x74/0x80 [ 232.660963][T11654] do_syscall_64+0x3d/0x90 [ 232.665487][T11654] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 232.671425][T11654] RIP: 0033:0x4665e9 [ 232.675328][T11654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 232.698354][T11654] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 08:30:20 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:20 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x400300, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 232.706950][T11654] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 232.715206][T11654] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 232.723352][T11654] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 232.731325][T11654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.740861][T11654] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:20 executing program 1 (fault-call:9 fault-nth:93): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) [ 232.828072][T11679] FAULT_INJECTION: forcing a failure. [ 232.828072][T11679] name failslab, interval 1, probability 0, space 0, times 0 [ 232.841164][T11679] CPU: 1 PID: 11679 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 232.850146][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.860444][T11679] Call Trace: [ 232.864055][T11679] dump_stack_lvl+0xb7/0x103 [ 232.868645][T11679] dump_stack+0x11/0x1a [ 232.872871][T11679] should_fail+0x23c/0x250 [ 232.877269][T11679] ? dst_alloc+0x108/0x300 [ 232.881966][T11679] __should_failslab+0x81/0x90 [ 232.886836][T11679] should_failslab+0x5/0x20 [ 232.891455][T11679] kmem_cache_alloc+0x46/0x2e0 [ 232.896635][T11679] ? fib4_rule_suppress+0x147/0x270 [ 232.902275][T11679] dst_alloc+0x108/0x300 [ 232.906513][T11679] __mkroute_output+0x452/0xc40 [ 232.911453][T11679] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 232.917417][T11679] ip_route_output_key_hash+0xa8/0xe0 [ 232.923039][T11679] __ip4_datagram_connect+0x3e0/0x710 [ 232.928664][T11679] ? __inet_bind+0x560/0x560 [ 232.933359][T11679] ip4_datagram_connect+0x2a/0x40 [ 232.938492][T11679] inet_dgram_connect+0x107/0x190 [ 232.943732][T11679] __sys_connect_file+0xd3/0xe0 [ 232.949550][T11679] io_issue_sqe+0xf52/0x6870 [ 232.954597][T11679] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.960795][T11679] ? __list_del_entry_valid+0x54/0xc0 [ 232.966685][T11679] ? rmqueue_pcplist+0x145/0x1d0 [ 232.971800][T11679] ? mntput_no_expire+0x64/0x730 [ 232.976931][T11679] ? _raw_spin_lock_irqsave+0x25/0x80 [ 232.982327][T11679] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 232.988476][T11679] ? percpu_counter_add_batch+0xc0/0xd0 [ 232.994706][T11679] ? io_submit_flush_completions+0x31e/0x3f0 [ 233.001413][T11679] __io_queue_sqe+0xe7/0x360 [ 233.006124][T11679] io_submit_sqe+0x1695/0x3400 [ 233.011147][T11679] ? kmem_cache_alloc_bulk+0x289/0x340 [ 233.016763][T11679] io_submit_sqes+0x822/0xe50 [ 233.021826][T11679] __se_sys_io_uring_enter+0x1c7/0xa10 [ 233.027273][T11679] ? __fget_light+0x21b/0x260 [ 233.031960][T11679] ? fput+0x2d/0x130 [ 233.035936][T11679] __x64_sys_io_uring_enter+0x74/0x80 [ 233.041431][T11679] do_syscall_64+0x3d/0x90 [ 233.046185][T11679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.052107][T11679] RIP: 0033:0x4665e9 [ 233.056368][T11679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 08:30:21 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) accept$unix(r3, &(0x7f0000000000)=@abs, &(0x7f0000000240)=0x6e) syz_read_part_table(0x248e01a0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af54031400070000000000000f0000000000000000000500000000004200"/60, 0x3c, 0x1c0}]) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 233.077697][T11679] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 233.086408][T11679] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 233.094780][T11679] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 233.102988][T11679] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.112026][T11679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.120159][T11679] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x7959b6c106e68046, @tid=r3}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x4) 08:30:21 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x1000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:21 executing program 1 (fault-call:9 fault-nth:94): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:21 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x415f, &(0x7f00000000c0)={0x0, 0x7c9, 0x1, 0x0, 0x3b2}) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001640)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000400)={{}, 0x0, 0x8, @inherit={0x88, &(0x7f0000001440)=ANY=[@ANYRES16=r3, @ANYRES16, @ANYRES64]}, @devid}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000000200)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f00000014c0)=""/152, 0x98}, {&(0x7f0000001580)=""/167, 0xa7}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f0000001c40)=""/212, 0xd4}], 0x4, &(0x7f0000001d40)=""/32, 0x20}, 0x3}, {{&(0x7f0000001d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/163, 0xa3}, {&(0x7f0000001ec0)=""/83, 0x53}, {&(0x7f0000001f40)=""/226, 0xe2}, {&(0x7f0000002080)=""/161, 0xa1}, {&(0x7f0000002140)=""/101, 0x65}], 0x5, &(0x7f0000002240)}, 0x5}], 0x2, 0x8302c1f38ca358e5, &(0x7f0000002300)={0x0, 0x989680}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000040)='system_u:object_r:printer_device_t:s0\x00', 0x26) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"1cb4a5d316fd6197a6d9491db11b033b", r3, 0x0, {0x400, 0x4}, {0x80000000}, 0x0, [0x81, 0x5, 0xe80, 0x7, 0x9, 0x400, 0x0, 0x7c, 0x9e2, 0x200, 0x9, 0x3ff, 0x5, 0x2, 0x1, 0x10001]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f00000004c0)={{}, r3, 0x14, @unused=[0x9, 0x4, 0x7ff, 0x4], @subvolid=0x4}) 08:30:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:21 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x2000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:21 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 233.401253][T11694] FAULT_INJECTION: forcing a failure. [ 233.401253][T11694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.414598][T11694] CPU: 1 PID: 11694 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 233.423405][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 233.433839][T11694] Call Trace: [ 233.437171][T11694] dump_stack_lvl+0xb7/0x103 [ 233.441779][T11694] dump_stack+0x11/0x1a [ 233.445983][T11694] should_fail+0x23c/0x250 08:30:21 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 233.450405][T11694] should_fail_usercopy+0x16/0x20 [ 233.455448][T11694] _copy_from_user+0x1c/0xd0 [ 233.460037][T11694] move_addr_to_kernel+0x7e/0x110 [ 233.465062][T11694] io_issue_sqe+0x2489/0x6870 [ 233.469914][T11694] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 233.475716][T11694] ? __list_del_entry_valid+0x54/0xc0 [ 233.481265][T11694] ? rmqueue_pcplist+0x145/0x1d0 [ 233.483784][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11704 comm=syz-executor.4 08:30:21 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 233.486230][T11694] ? mntput_no_expire+0x64/0x730 [ 233.486253][T11694] ? _raw_spin_lock_irqsave+0x25/0x80 [ 233.500169][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11704 comm=syz-executor.4 [ 233.505119][T11694] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 233.505148][T11694] ? percpu_counter_add_batch+0xc0/0xd0 [ 233.535518][T11694] ? io_submit_flush_completions+0x31e/0x3f0 [ 233.541626][T11694] __io_queue_sqe+0xe7/0x360 [ 233.546292][T11694] io_submit_sqe+0x1695/0x3400 [ 233.551407][T11694] ? kmem_cache_alloc_bulk+0x289/0x340 [ 233.556904][T11694] io_submit_sqes+0x822/0xe50 [ 233.561626][T11694] __se_sys_io_uring_enter+0x1c7/0xa10 [ 233.567115][T11694] ? __fget_light+0x21b/0x260 [ 233.571915][T11694] ? fput+0x2d/0x130 [ 233.575882][T11694] __x64_sys_io_uring_enter+0x74/0x80 [ 233.581248][T11694] do_syscall_64+0x3d/0x90 [ 233.585647][T11694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 233.591706][T11694] RIP: 0033:0x4665e9 [ 233.595581][T11694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 233.615640][T11694] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 233.624052][T11694] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 233.632004][T11694] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 233.639975][T11694] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 233.648504][T11694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.656467][T11694] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:24 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:24 executing program 1 (fault-call:9 fault-nth:95): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) ioctl$CHAR_RAW_ROTATIONAL(r0, 0x127e, &(0x7f0000000080)) 08:30:24 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x5) 08:30:24 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x30, r0, 0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2004, @fd_index=0xa, 0x3f, 0x5, 0x4, 0x1a, 0x0, {0x1}}, 0x7) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x46da, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd_index=0x5, 0x8, 0x0, 0x0, 0x22, 0x0, {0x2}}, 0x7fffffff) io_uring_enter(r0, 0x2850, 0xe633, 0x0, &(0x7f0000000000)={[0x20]}, 0x8) 08:30:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:24 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 236.379440][T11727] FAULT_INJECTION: forcing a failure. [ 236.379440][T11727] name failslab, interval 1, probability 0, space 0, times 0 [ 236.392190][T11727] CPU: 1 PID: 11727 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 236.400956][T11727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.411051][T11727] Call Trace: [ 236.414335][T11727] dump_stack_lvl+0xb7/0x103 [ 236.419171][T11727] dump_stack+0x11/0x1a [ 236.423328][T11727] should_fail+0x23c/0x250 08:30:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:24 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, 0x0, 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 236.427968][T11727] ? dst_alloc+0x108/0x300 [ 236.432487][T11727] __should_failslab+0x81/0x90 [ 236.437256][T11727] should_failslab+0x5/0x20 [ 236.441849][T11727] kmem_cache_alloc+0x46/0x2e0 [ 236.446717][T11727] ? fib4_rule_suppress+0x147/0x270 [ 236.452099][T11727] dst_alloc+0x108/0x300 [ 236.456498][T11727] __mkroute_output+0x452/0xc40 [ 236.461434][T11727] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 236.467636][T11727] ip_route_output_key_hash+0xa8/0xe0 [ 236.473135][T11727] __ip4_datagram_connect+0x3e0/0x710 08:30:24 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x28000000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:24 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 236.478558][T11727] ? __inet_bind+0x560/0x560 [ 236.483232][T11727] ip4_datagram_connect+0x2a/0x40 [ 236.488315][T11727] inet_dgram_connect+0x107/0x190 [ 236.493431][T11727] __sys_connect_file+0xd3/0xe0 [ 236.498509][T11727] io_issue_sqe+0xf52/0x6870 [ 236.503099][T11727] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 236.509200][T11727] ? __list_del_entry_valid+0x54/0xc0 [ 236.514766][T11727] ? rmqueue_pcplist+0x145/0x1d0 [ 236.519704][T11727] ? mntput_no_expire+0x64/0x730 [ 236.524737][T11727] ? _raw_spin_lock_irqsave+0x25/0x80 08:30:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000566000/0x4000)=nil, 0x4000, 0x800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 236.530291][T11727] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 236.536389][T11727] ? percpu_counter_add_batch+0xc0/0xd0 [ 236.542020][T11727] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 236.547593][T11727] __io_queue_sqe+0xe7/0x360 [ 236.552448][T11727] io_submit_sqe+0x1695/0x3400 [ 236.557405][T11727] ? kmem_cache_alloc_bulk+0x289/0x340 [ 236.563090][T11727] io_submit_sqes+0x822/0xe50 [ 236.568068][T11727] __se_sys_io_uring_enter+0x1c7/0xa10 [ 236.573572][T11727] ? __fget_light+0x21b/0x260 [ 236.578548][T11727] ? fput+0x2d/0x130 [ 236.582441][T11727] __x64_sys_io_uring_enter+0x74/0x80 [ 236.587921][T11727] do_syscall_64+0x3d/0x90 [ 236.592585][T11727] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.598891][T11727] RIP: 0033:0x4665e9 [ 236.603030][T11727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.623276][T11727] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 236.632325][T11727] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 236.642610][T11727] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 236.653880][T11727] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.663347][T11727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.671595][T11727] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:24 executing program 1 (fault-call:9 fault-nth:96): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:24 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 236.692426][T11757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11757 comm=syz-executor.4 [ 236.705913][T11757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11757 comm=syz-executor.4 [ 236.714848][T11761] FAULT_INJECTION: forcing a failure. [ 236.714848][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.733573][T11761] CPU: 0 PID: 11761 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 236.743758][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 236.754627][T11761] Call Trace: [ 236.758099][T11761] dump_stack_lvl+0xb7/0x103 [ 236.762841][T11761] dump_stack+0x11/0x1a [ 236.767281][T11761] should_fail+0x23c/0x250 [ 236.772197][T11761] should_fail_usercopy+0x16/0x20 [ 236.778136][T11761] _copy_from_user+0x1c/0xd0 [ 236.783344][T11761] move_addr_to_kernel+0x7e/0x110 [ 236.788590][T11761] io_issue_sqe+0x2489/0x6870 [ 236.793432][T11761] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 236.799625][T11761] ? __list_del_entry_valid+0x54/0xc0 [ 236.805191][T11761] ? sysvec_apic_timer_interrupt+0x3e/0x80 [ 236.811454][T11761] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 236.817609][T11761] ? _raw_spin_lock_irqsave+0x25/0x80 [ 236.823434][T11761] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 236.829255][T11761] ? percpu_counter_add_batch+0xc0/0xd0 [ 236.834820][T11761] ? io_submit_flush_completions+0x31e/0x3f0 [ 236.841103][T11761] __io_queue_sqe+0xe7/0x360 [ 236.845708][T11761] io_submit_sqe+0x1695/0x3400 [ 236.850465][T11761] ? kmem_cache_alloc_bulk+0x289/0x340 [ 236.855945][T11761] io_submit_sqes+0x822/0xe50 [ 236.860635][T11761] __se_sys_io_uring_enter+0x1c7/0xa10 [ 236.866077][T11761] ? __fget_light+0x21b/0x260 [ 236.870966][T11761] ? fput+0x2d/0x130 [ 236.875069][T11761] __x64_sys_io_uring_enter+0x74/0x80 [ 236.880697][T11761] do_syscall_64+0x3d/0x90 [ 236.885318][T11761] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 236.891280][T11761] RIP: 0033:0x4665e9 [ 236.895262][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 236.917210][T11761] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 236.926469][T11761] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 236.934543][T11761] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 236.943325][T11761] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 236.952431][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.961146][T11761] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x6) 08:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:25 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xa6ffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:25 executing program 1 (fault-call:9 fault-nth:97): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:25 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x1010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000b40)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd, 0x8001, &(0x7f0000000680)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/178, 0xb2}, {&(0x7f00000004c0)=""/248, 0xf8}, {&(0x7f00000005c0)=""/144, 0x90}, {&(0x7f0000000000)=""/28, 0x1c}], 0x5, 0x14, 0x0, {0x0, r4}}, 0xa388) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)={0x0, 0x20, 0xb}, 0x18) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000700)={0x0, 0x9, 0x401}) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) fallocate(r6, 0x20, 0xc5, 0xffffffffffff1a54) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r7, 0x0) preadv(r7, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r7, 0x3c4c, 0x7fce, 0x3, &(0x7f0000000100)={[0x2]}, 0x8) r8 = eventfd(0x7) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000b00)=r8, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 237.263389][T11777] FAULT_INJECTION: forcing a failure. [ 237.263389][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 237.277079][T11777] CPU: 1 PID: 11777 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 237.283288][T11778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11778 comm=syz-executor.4 [ 237.285968][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 237.285981][T11777] Call Trace: 08:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640), 0x0, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:25 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xba040000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:25 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xc00e0000, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x132, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 237.285988][T11777] dump_stack_lvl+0xb7/0x103 [ 237.286010][T11777] dump_stack+0x11/0x1a [ 237.299412][T11778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11778 comm=syz-executor.4 [ 237.309586][T11777] should_fail+0x23c/0x250 [ 237.309678][T11777] ? dst_alloc+0x108/0x300 [ 237.343588][T11777] __should_failslab+0x81/0x90 [ 237.348443][T11777] should_failslab+0x5/0x20 [ 237.352947][T11777] kmem_cache_alloc+0x46/0x2e0 [ 237.357799][T11777] ? fib4_rule_suppress+0x147/0x270 [ 237.363024][T11777] dst_alloc+0x108/0x300 [ 237.367720][T11777] __mkroute_output+0x452/0xc40 [ 237.372744][T11777] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 237.378661][T11777] ip_route_output_key_hash+0xa8/0xe0 [ 237.384044][T11777] __ip4_datagram_connect+0x3e0/0x710 [ 237.389839][T11777] ? __inet_bind+0x560/0x560 [ 237.394527][T11777] ip4_datagram_connect+0x2a/0x40 [ 237.399572][T11777] inet_dgram_connect+0x107/0x190 [ 237.404851][T11777] __sys_connect_file+0xd3/0xe0 08:30:25 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xeaffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x132, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = fsopen(&(0x7f00000001c0)='autofs\x00', 0x1) dup3(r5, r2, 0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_settime(r4, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) read$eventfd(r0, &(0x7f0000000080), 0x8) [ 237.409801][T11777] io_issue_sqe+0xf52/0x6870 [ 237.414476][T11777] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 237.420445][T11777] ? __list_del_entry_valid+0x54/0xc0 [ 237.425960][T11777] ? rmqueue_pcplist+0x145/0x1d0 [ 237.430907][T11777] ? mntput_no_expire+0x64/0x730 [ 237.435936][T11777] ? _raw_spin_lock_irqsave+0x25/0x80 [ 237.441321][T11777] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 237.447196][T11777] ? percpu_counter_add_batch+0xc0/0xd0 [ 237.452900][T11777] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 237.458461][T11777] __io_queue_sqe+0xe7/0x360 [ 237.463255][T11777] io_submit_sqe+0x1695/0x3400 [ 237.468026][T11777] ? kmem_cache_alloc_bulk+0x289/0x340 [ 237.473814][T11777] io_submit_sqes+0x822/0xe50 [ 237.478575][T11777] __se_sys_io_uring_enter+0x1c7/0xa10 [ 237.484117][T11777] ? __fget_light+0x21b/0x260 [ 237.489082][T11777] ? fput+0x2d/0x130 [ 237.493069][T11777] __x64_sys_io_uring_enter+0x74/0x80 [ 237.498622][T11777] do_syscall_64+0x3d/0x90 [ 237.503058][T11777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 237.509434][T11777] RIP: 0033:0x4665e9 [ 237.513323][T11777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 237.534635][T11777] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 237.543251][T11777] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 237.551613][T11777] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 237.560372][T11777] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 237.568446][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.576689][T11777] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:25 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x7) 08:30:25 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xefffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:25 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x132, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000069000/0x1000)=nil, 0x1000, 0x1800003, 0x100010, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl(r4, 0x3ff, &(0x7f0000000140)="c4bada0636cce176a575105acb4fbb1d53b7c19f091af11e034ff67f371f8ea51b2f7a49990153f583251b1c957f74b6b583c8f8c77d1dc3327d78317df8ea7bdf65665ed3f0834dab91bb193c03170f8906d8934df9b4eced8acfb302b322c04ec6c78af5327d8316007a44c11de9ad19a4ab06e86da0f8e5bd7a108bd2372f6a7ed4e612b2d18941bfa5e9cd135c18cacc2d1ede4981d26d65198171872d65410bd344d6636d8f9ce05f5135ebfe5e8173a1e84791fc1d93db23ceca292112df5e29a95a8c06565c61c86e09b40cf5d919ee") timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:26 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:26 executing program 1 (fault-call:9 fault-nth:98): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x80010, r2, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x7, 0x58000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) splice(r3, &(0x7f00000000c0)=0x7fffffff, r4, &(0x7f0000000140)=0x10000, 0x6, 0xc) r5 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) 08:30:26 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(r1, 0x0, &(0x7f00000018c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000000440)={&(0x7f0000001740)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000017c0)=""/69, 0x45}], 0x1, &(0x7f0000001840)=""/96, 0x60}, 0x0, 0x100, 0x0, {0x0, r6}}, 0x81) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001900)='/sys/module/snd', 0x0, 0xa0) fspick(r7, &(0x7f0000001940)='./file0\x00', 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f0000000100)=""/37, 0x25}, {&(0x7f00000014c0)=""/67, 0x43}, {&(0x7f0000001540)=""/137, 0x89}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000001600)=""/94, 0x5e}], 0x9) [ 238.133134][T11814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11814 comm=syz-executor.4 [ 238.148502][T11814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11814 comm=syz-executor.4 08:30:26 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfeffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 238.207132][T11825] FAULT_INJECTION: forcing a failure. [ 238.207132][T11825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.221186][T11825] CPU: 0 PID: 11825 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 238.230273][T11825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.240510][T11825] Call Trace: [ 238.244084][T11825] dump_stack_lvl+0xb7/0x103 [ 238.248942][T11825] dump_stack+0x11/0x1a [ 238.253103][T11825] should_fail+0x23c/0x250 08:30:26 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 238.257596][T11825] should_fail_usercopy+0x16/0x20 [ 238.262726][T11825] _copy_from_user+0x1c/0xd0 [ 238.267376][T11825] move_addr_to_kernel+0x7e/0x110 [ 238.272458][T11825] io_issue_sqe+0x2489/0x6870 [ 238.277330][T11825] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 238.283256][T11825] ? __list_del_entry_valid+0x54/0xc0 [ 238.288858][T11825] ? rmqueue_pcplist+0x145/0x1d0 [ 238.293830][T11825] ? mntput_no_expire+0x64/0x730 [ 238.298961][T11825] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 238.304796][T11825] ? _raw_spin_lock_irqsave+0x25/0x80 [ 238.311292][T11825] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 238.317094][T11825] ? percpu_counter_add_batch+0xc0/0xd0 [ 238.322994][T11825] ? io_submit_flush_completions+0x31e/0x3f0 [ 238.329053][T11825] __io_queue_sqe+0xe7/0x360 [ 238.333721][T11825] io_submit_sqe+0x1695/0x3400 [ 238.338941][T11825] ? kmem_cache_alloc_bulk+0x289/0x340 [ 238.344586][T11825] io_submit_sqes+0x822/0xe50 [ 238.349581][T11825] __se_sys_io_uring_enter+0x1c7/0xa10 [ 238.355044][T11825] ? __fget_light+0x21b/0x260 [ 238.359882][T11825] ? fput+0x2d/0x130 [ 238.363759][T11825] __x64_sys_io_uring_enter+0x74/0x80 [ 238.369113][T11825] do_syscall_64+0x3d/0x90 [ 238.373612][T11825] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 238.379494][T11825] RIP: 0033:0x4665e9 [ 238.383404][T11825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 238.403397][T11825] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 238.411817][T11825] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 238.419857][T11825] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 238.428763][T11825] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 238.436922][T11825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 238.445000][T11825] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x8) 08:30:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x1cb, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:26 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:26 executing program 1 (fault-call:9 fault-nth:99): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 238.925071][T11839] FAULT_INJECTION: forcing a failure. [ 238.925071][T11839] name failslab, interval 1, probability 0, space 0, times 0 [ 238.939159][T11839] CPU: 0 PID: 11839 Comm: syz-executor.1 Not tainted 5.14.0-rc2-syzkaller #0 [ 238.948097][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 238.958239][T11839] Call Trace: [ 238.961555][T11839] dump_stack_lvl+0xb7/0x103 [ 238.966819][T11839] dump_stack+0x11/0x1a 08:30:26 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:26 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffa6, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 238.971119][T11839] should_fail+0x23c/0x250 [ 238.975629][T11839] ? dst_alloc+0x108/0x300 [ 238.980143][T11839] __should_failslab+0x81/0x90 [ 238.985006][T11839] should_failslab+0x5/0x20 [ 238.990046][T11839] kmem_cache_alloc+0x46/0x2e0 [ 238.994917][T11839] ? fib4_rule_suppress+0x147/0x270 [ 239.000497][T11839] dst_alloc+0x108/0x300 [ 239.004756][T11839] __mkroute_output+0x452/0xc40 [ 239.009838][T11839] ip_route_output_key_hash_rcu+0x7a8/0x800 [ 239.015879][T11839] ip_route_output_key_hash+0xa8/0xe0 [ 239.021481][T11839] __ip4_datagram_connect+0x3e0/0x710 [ 239.023674][T11850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11850 comm=syz-executor.4 [ 239.026913][T11839] ? __inet_bind+0x560/0x560 [ 239.026937][T11839] ip4_datagram_connect+0x2a/0x40 [ 239.040188][T11850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11850 comm=syz-executor.4 [ 239.044799][T11839] inet_dgram_connect+0x107/0x190 [ 239.044825][T11839] __sys_connect_file+0xd3/0xe0 08:30:26 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00000ad000/0x1000)=nil, 0x1000, 0x8, 0x80010, r1, 0xd09c7000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 239.073102][T11839] io_issue_sqe+0xf52/0x6870 [ 239.078073][T11839] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 239.083970][T11839] ? __list_del_entry_valid+0x54/0xc0 [ 239.092517][T11839] ? rmqueue_pcplist+0x145/0x1d0 [ 239.097458][T11839] ? mntput_no_expire+0x64/0x730 [ 239.102494][T11839] ? _raw_spin_lock_irqsave+0x25/0x80 [ 239.108078][T11839] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 239.114122][T11839] ? percpu_counter_add_batch+0xc0/0xd0 [ 239.119869][T11839] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 239.125751][T11839] __io_queue_sqe+0xe7/0x360 [ 239.130517][T11839] io_submit_sqe+0x1695/0x3400 [ 239.135861][T11839] ? kmem_cache_alloc_bulk+0x289/0x340 [ 239.141514][T11839] io_submit_sqes+0x822/0xe50 [ 239.146596][T11839] __se_sys_io_uring_enter+0x1c7/0xa10 [ 239.152340][T11839] ? __fget_light+0x21b/0x260 [ 239.157527][T11839] ? fput+0x2d/0x130 [ 239.161548][T11839] __x64_sys_io_uring_enter+0x74/0x80 [ 239.166937][T11839] do_syscall_64+0x3d/0x90 [ 239.171807][T11839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 239.178543][T11839] RIP: 0033:0x4665e9 [ 239.182425][T11839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 239.202256][T11839] RSP: 002b:00007f4fc48ce188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 239.210772][T11839] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 239.218751][T11839] RDX: 0000000000000000 RSI: 000000000000092c RDI: 0000000000000004 [ 239.226723][T11839] RBP: 00007f4fc48ce1d0 R08: 0000000000000000 R09: 0000000000000000 [ 239.234690][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 239.242841][T11839] R13: 00007ffde2ae384f R14: 00007f4fc48ce300 R15: 0000000000022000 08:30:27 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffea, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x217, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) accept$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f000070f000/0x3000)=nil, 0x3000, 0x67}, 0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00007d3000/0x4000)=nil, 0x4000, 0x1000008, 0x50, r4, 0x3000) r5 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000380), 0x0) tkill(r5, 0x1000000000016) r7 = syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/time\x00') close(r7) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0xa708, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x1ff) 08:30:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:27 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x9) 08:30:27 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xffffffef, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:27 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(r1, 0x0, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000240)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r6}}, 0x8) mmap(&(0x7f00002c5000/0x2000)=nil, 0x2000, 0x0, 0x40010, r3, 0xffffe000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x10000, 0x40, 0x14}, 0x18) io_uring_enter(r8, 0x392a, 0x4158, 0x1, &(0x7f0000000200)={[0x6]}, 0x8) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x0, &(0x7f0000000080), 0x4) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:30:27 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:27 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0xfffffffe, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x2, 0x0, 0x0, 0x0) 08:30:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x23d, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 239.849307][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11892 comm=syz-executor.4 [ 239.863015][T11892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11892 comm=syz-executor.4 08:30:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:30 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="100000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x4, 0x0, 0x0, 0x0) 08:30:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:30 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xa) 08:30:30 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_setup(0x713d, &(0x7f0000000000)={0x0, 0xea4d, 0x0, 0x1, 0x195}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:30 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e0000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x250, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:30 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="4c0000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xf, 0x0, 0x0, 0x0) [ 242.377317][T11923] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.409269][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11928 comm=syz-executor.4 08:30:30 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000180)={[0x400]}, 0x8, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r0, &(0x7f0000000000)={0x2000}, r0, 0x1, 0x0, 0x1}, 0x0) 08:30:30 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5e0000002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x18, 0x0, 0x0, 0x0) 08:30:30 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x25a, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x5, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x386, r0, &(0x7f0000000140)="e823b61055269808c13a7d24ce337ed501662704fc942f3e67634da66ca76f4316168bdb365d69e90b8328ba7a8b98e20c8ec2ffa78e77ae9a2cf4eaa87fb4cc8ffedd39175fb78c2b96cc7c338007879b6f0d39798d5f0f131abfeb6bc9c7b4890c8ed7f8c5821485c7354d720e2775a3f70400be5ff72ecdc1cc1d3ed897daa9bf4d8c1e3d78d08190803c218b7a4a3425002d068dce1bca622403d08aa7cf732b599a675e73334dd3b5383a4c7bd9986694adb736309ea3d407545a234401b4264ac46d463bf60e771d7bc9779b4ce7800a389fb8a20f9fc58631bb21ba24fda6ed3b1dbc3facc300b1bfef96fe74dd", 0xf1, 0xb11, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000a80)="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", 0x1000, 0x2, 0x0, 0x3, r0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x8, r2, &(0x7f00000002c0)="cd55474e4bd109425f7ccd9666daabd28985218462849955ab7af5b36dade922cfccf86da6585cfb3d6366a71438502c99224fce4f70caddf92b261175259e9d4cbad6c14ea52e4a26a8a76fab08d60bb33c554407dbc24aba8af9ef381fe2250e9a0e48f90838cb5d29325e2ed7e8aea951033f0285bc85a551c62b5c87d36e71761e7b8053e239daca909b6c265f8aef2c78ffdec5e48a6301c13bec14322e55d77e03751b553956814bf2f2f6951554e39d7bd64771115b2752d002084acb515e", 0xc2, 0x2, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0xdf06, r4, &(0x7f0000000440)="7cfced94c603163f1635b78131a9572b673a698459f4cf71b739d314cd0e16c9abdbc277acfc9ecdd91b32a22bb6fcb45b572a96eb83db9941955fed6fde23bcbab9ceec", 0x44, 0x81, 0x0, 0x1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x3, r0, &(0x7f0000000540)="ee56e808842a3e12cc9422425b9ef041cdc1c4f7574c06722e8c69be26c3d12c6feee89471ac5bd6fb537d2ce24614779d882ade0c09e7e4bd05636b17bc9f9a33b3f5d90dbae7c5f3b7e6154cf43f4bc12ae07c07bb3bb32c7b06761f502b5731ffdcfc5fe4bed67993d61549abcbefffc8", 0x72, 0x10001, 0x0, 0x3, r5}]) r6 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) dup2(r2, r6) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 242.422723][T11928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11928 comm=syz-executor.4 08:30:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xb) 08:30:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000100007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x25a, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xe0, 0x0, 0x0, 0x0) 08:30:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/24, 0x18}], 0x1, 0xd9e, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x100010, r2, 0x1dbe000) preadv(r0, &(0x7f0000000280), 0x0, 0xd9f, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000200)={0x1, 0x20, '\x00', 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}) fchown(0xffffffffffffffff, 0xee01, 0x0) r3 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x680002, 0x90) mmap(&(0x7f0000074000/0x3000)=nil, 0x3000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x65, 0x7, 0xffff, 0x11, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x1, 0x7, 0x2}}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x480040, 0x0) tkill(r4, 0x1000000000016) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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", 0x25a, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000110007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/607, 0x25f, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x2000, 0x68) tkill(r3, 0x1000000000016) 08:30:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xf00, 0x0, 0x0, 0x0) 08:30:31 executing program 3: r0 = syz_io_uring_setup(0x2dbe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_setup(0x7052, &(0x7f0000000000)={0x0, 0xb322, 0x4, 0x0, 0x2d}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) io_setup(0x7fff, &(0x7f0000000200)=0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x6, r4, &(0x7f0000000240)="08d408f65f8b9923064306c22f9845bc0fc254772863d2f45e934fab4bc74ed0d7e340c7921a89b079fdef1f269025223d678740e0ebc4a3f84aa173eefaf831bbcfd5b659a84e80f718c611920fa63bad5e6a209c598c32d742a56670a8", 0x5e, 0x7ff, 0x0, 0x0, r5}]) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x1bc, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x13}}}}, [@NL80211_ATTR_FRAME_MATCH={0x48, 0x5b, "6ab8e3fcf460cb58f3717a2f290905d48c4d6089bd17f8bb9c94c26718b850c26d1713ea5d5bb33cbe829352b62d6c69df51b59f4740ca75e40b7bccd451fefac345c9ff"}, @NL80211_ATTR_FRAME_MATCH={0xd5, 0x5b, "e3739acb646d2893650a9e287516ea6aa8f3e0c07d29575063fad3ca82e1a0b74a6f88d3d6a1b075a2c3ce08cd0ce63d35d8475a140e7eaeff77135833d949d382da14da7c0cc969c721913c574fc8c5d8b6cb6517d72dd97b6c80519de8aa001e8a9f9d6b07dcba0e2a52b406aef7a05eb298bcc1a3dd281ff89e24f4fb14dff60bd3751e23db7b7d64488f5cd62628c2e783978b529c7db5ebc6167d6311645bd0050326dcc484dd26f3bb525b0242e41bc8247e3702afc252aecdaa4d6fdae86a60aae5b5f5989327240d2284425046"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0x73, 0x5b, "36a0b57c82ba842146591b8e3d095bf6a9745cbc685376553d97fe33831a18bdb16a313fd6a7785f0885fe1adaba8cba20bd31237ca642e49ad93cf4338c58ab0ab90cf11028ef50d510531ea4cf032f12096df309640df81a31263bdb1925416adeefa64c1ec1a4df4a07e532d447"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4c14}, 0x80) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x100010, r0, 0x97fe6000) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 243.273791][T11975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=11975 comm=syz-executor.4 [ 243.286997][T11975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=11975 comm=syz-executor.4 08:30:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000120007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:31 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xc) 08:30:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000130007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/607, 0x25f, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x1800, 0x0, 0x0, 0x0) 08:30:31 executing program 2: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:31 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000001c0)={0x38, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc}]}]}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="0000001000000000fb299078e0000001e0000001019404010044348921ac141421000001ffac14142c00000a890000000000000007ac1414bb00000008ac1e000100000004e0000002000004010707fc6401010201441ce3337f00000180000000ffffffff00000006ac1414aa00"/128]}) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80800) syz_io_uring_setup(0x48fe, &(0x7f0000000300)={0x0, 0xc9aa, 0x10, 0x3, 0x1c8, 0x0, r8}, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/607, 0x25f, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/609, 0x261, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:31 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000140007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x2000, 0x0, 0x0, 0x0) 08:30:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/609, 0x261, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:32 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000150007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 244.160056][T12022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=12022 comm=syz-executor.4 [ 244.173479][T12022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=12022 comm=syz-executor.4 08:30:32 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xd) 08:30:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/609, 0x261, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:32 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000000c0)) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/51, 0x33}, {&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/31, 0x1f}], 0x3, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) socket(0x1, 0x2, 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x38) 08:30:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xe000, 0x0, 0x0, 0x0) 08:30:32 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000160007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/610, 0x262, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:32 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000180007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x20000, 0x0, 0x0, 0x0) 08:30:32 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7296, &(0x7f0000000000)={0x0, 0x131b, 0x8, 0x0, 0x386}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r6 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) vmsplice(r7, &(0x7f0000000800)=[{&(0x7f00000002c0)="b9a24b0c679a2794dda5ddb1fa0beab741e41fc8a00c43eb925030279add1dade215f19b31e7e029d7d71d7586d3daa98dac7e6a927f2d62f1856c159decf73d4a99b0e2faed6ae53d43393a321ca41b950b3d7b5123a0f9386531fb495dd256f04d9a57cf31340e6541a952a408b9711b7d7c805be75cb20fec05b4ce9938503632d0409214ed415be9447568e08b12b4a0bd25d199d67cc1d82304454a48672a8c22f76aa2ef87301dff44c3ffcc540a84a82dc6d2ad455509bef2ff7b32e46e8f3a9dbed555058a7ce04c687e25b785eefe107704319d62b0f7c4da22c90b21282a2696", 0xe5}, {&(0x7f00000003c0)="0c272f2e7c9479310e36284278a5a981d6ce16e7a3149f607591565ce0ce0a64c5d05d92625dde5206fcc7e1a22a278b895061280896c5af5bddaeba9a", 0x3d}, {&(0x7f00000004c0)="d2bb8489d5d44c9811c4101c03397a4efb62891a2bfd1a6d1e0225749fd964e96849ff6650c750755a8939c4e9e97df2b17c30f9ac324189fa88d223dd38667cf063b0509b83d3e7bf7ddf1ea5", 0x4d}, {&(0x7f0000000540)="cdbbfaad1198ff9f28e54a0de72bb355ae85d58e53ce419b9b0e8f7b39d7d9254d6115d2adfb261091a004c5c17e5a83a88747f78b2a4756833f28cdf1be8be244ef4f7028baf1b992e2c4ac165123652e5321c9a10ba43f53ea2b2a7cecf3c22746b248621e03d00c5bc08fd0ab805644910ca8333f0bf8afb27ff33f518a2e6ed4134d2b7a038cb891c2cb5c65e1f8429f76fe7049db47edea13066518623fdf1bfb6d3c166b44ea835ad0657dd5ca9be879080a717dd0825e86df8c4fafbab8bde4c8f215f5f80a52aaeb3626b0cc48a9690ff05c", 0xd6}, {&(0x7f0000000440)="8d91b6ecb3b041c2ed", 0x9}, {&(0x7f0000000640)="03ad0a18a696a05f107d5b988e2e2a0496ea836d1a50722f2123f8cd218b4b2db830b5fcb119100586c9b0aeea318180eb428d4ca64fdc8c158da5da1a9b727b4b0c8b354bf08a68a3bc1669869c47ef5216bb1bce1b56e8617892e9da8290545d80", 0x62}, {&(0x7f00000006c0)="97f7ff25ccf123ed41f378e12c0c370f622094730333513407ef63da5cda", 0x1e}, {&(0x7f0000000700)="be3f6a2e4fab6bbc1a28ee30b770ca809229a627422e679652f27ca73685d1aae9952fd9bb4c6d19d74d", 0x2a}, {&(0x7f0000000740)="1061bf899d09ab370201917679", 0xd}, {&(0x7f0000000780)="d62788d1dbbb1eedbcbf6864ec61cef032e994d2d5961a377a92ad542bd47d9ef8ac841debeb8cbbe1e7ec615d6b47032f33942291dfa7879b5e900c2490bc1e8360ea7185f71875111f", 0x4a}], 0xa, 0x1) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r3, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x4, 0xc, 0x0, {0x0, r8, r0}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:32 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x40000, 0x0, 0x0, 0x0) 08:30:32 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/610, 0x262, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:32 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000190007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 245.039525][T12051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=12051 comm=syz-executor.4 [ 245.052899][T12051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=12051 comm=syz-executor.4 08:30:33 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xe) 08:30:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/610, 0x262, 0x40007bd, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x18) r3 = accept4(r2, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f0000000140)=0x80, 0x80000) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)={0x103c, 0x7, 0x8, 0x401, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x6}, [@typed={0xc, 0x4c, 0x0, 0x0, @u64=0x1}, @nested={0x101b, 0x63, 0x0, 0x1, [@generic="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", @generic="f3cc1961031a04934092addbf5362f", @typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x103c}, 0x1, 0x0, 0x0, 0x44}, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000240)) 08:30:33 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfeffff, 0x0, 0x0, 0x0) 08:30:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0x263, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:33 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:33 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0x263, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:33 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x1000000, 0x0, 0x0, 0x0) 08:30:33 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x511400, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000080)='*].\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 245.909884][T12089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.920974][T12092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=12092 comm=syz-executor.4 [ 245.934960][T12092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=12092 comm=syz-executor.4 08:30:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xf) 08:30:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0x263, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:34 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x2000000, 0x0, 0x0, 0x0) 08:30:34 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x1000000, 0x4010010, r0, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x100000d, 0x20010, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_WRITE={0x17, 0xddd9df4907709374, 0x2007, @fd=r0, 0x8f21, &(0x7f0000000000)="3c98d8fb99adde9b518c778154f1811c4a4b48c8b2b926c35bbea475f7e9019f6395188f7bb0c186c58fc2fec257748f4211832ad0c9755f217c3ad2", 0x3c, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:34 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xf000000, 0x0, 0x0, 0x0) 08:30:34 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000210007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 246.731910][T12114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:30:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x18000000, 0x0, 0x0, 0x0) 08:30:34 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:34 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000440)=0x9) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000080)='-)(#\'[\x00', 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0xa2, 0x2, &(0x7f0000000340)=[{&(0x7f0000000180)="69c5f56899f1e8e544a6552509f8173b2873547868d744c41ce971cfb6fbaf469a187cfcf58112fb7c058c8fee7abe84cfc6123c231353f83506b1f3b46573cf75cadb7884230015ed71fc3ead0529760b88c13ad0c30375a7c2bc2cd4f5810800f223a40b8bdec36dbf24528a0b909206176894f99eff003cfd6b78563556276551b86f4bf582919632a2b9193df4c997ab679cdb72050256902b67f3f23892fc4cea97724f9d1ca9f5f342e5bb", 0xae, 0x72e}, {&(0x7f0000000240)="d2d19b2f888c8f17f5b3daca08bf133499331cd4b221f3dc9f810b3188260a06048ed159c0b22e59d4a68ab754244630c327803ab9a82ea92df75e87bf2e3766e5a84d92a39ef70eb9f9399872ac43970b2fa352aa61b8c8df0074b59624c22760fdd4082dd9894b7b12ab02df3acf8842d7862444f37debf5c7970cf78a6ffc083e99f6f5a07e846a8403c22b2af1ce4f66527e59390b5393269e2ec3437301748efe3b7649d84c4ba9de21ef6591e366bc4ef77863da96e01d22205b9f9579765f29ac2fe9e9eb2865b90109110a492de9c578222773155dd18cb842", 0xdd, 0x2}], 0x30410, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@nocompress}, {@check_relaxed}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp863'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '$$!/)`&'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) openat(r4, &(0x7f0000000400)='./file0\x00', 0x248c0, 0x20) r5 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000500)) [ 246.795876][T12127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18432 sclass=netlink_route_socket pid=12127 comm=syz-executor.4 [ 246.809808][T12127] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=50688 sclass=netlink_route_socket pid=12127 comm=syz-executor.4 [ 246.930924][T12143] loop2: detected capacity change from 0 to 7 [ 246.981126][T12143] loop2: detected capacity change from 0 to 7 08:30:35 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x10) 08:30:35 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x300, 0x0, 0x0, 0x0, 0x0) 08:30:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x20000000, 0x0, 0x0, 0x0) 08:30:35 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000240007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:35 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x2c2a00, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:35 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x8dffffff, 0x0, 0x0, 0x0) 08:30:35 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:35 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000260007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xe0000000, 0x0, 0x0, 0x0) 08:30:35 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000280007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:35 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xf5ffffff, 0x0, 0x0, 0x0) 08:30:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfdffffff, 0x0, 0x0, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000290007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x11) 08:30:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:36 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0x1e9, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x101) syz_io_uring_setup(0x52d9, &(0x7f0000008500)={0x0, 0xca8b, 0x10, 0x0, 0x85}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000008580), &(0x7f00000085c0)) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) recvmmsg(r3, &(0x7f0000008300)=[{{&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1, &(0x7f0000000280)=""/222, 0xde}, 0x10001}, {{&(0x7f0000000380)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000600)=""/145, 0x91}, {&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f00000007c0)=""/81, 0x51}, {&(0x7f0000000840)=""/77, 0x4d}, {&(0x7f00000008c0)=""/121, 0x79}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/244, 0xf4}, {&(0x7f0000000440)=""/32, 0x20}], 0xa, &(0x7f0000000bc0)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000001bc0)=@xdp, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001c40)=""/53, 0x35}, {&(0x7f0000001c80)=""/105, 0x69}, {&(0x7f0000001d00)=""/84, 0x54}, {&(0x7f0000001d80)=""/177, 0xb1}, {&(0x7f0000001e40)=""/53, 0x35}, {&(0x7f0000001e80)=""/226, 0xe2}], 0x6}, 0x8}, {{&(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002000)=""/47, 0x2f}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000002100)=""/22, 0x16}, {&(0x7f0000002140)=""/149, 0x95}], 0x4, &(0x7f0000002240)=""/108, 0x6c}, 0x570}, {{&(0x7f00000022c0)=@rc, 0x80, &(0x7f0000002740)=[{&(0x7f0000002340)=""/39, 0x27}, {&(0x7f0000002380)=""/254, 0xfe}, {&(0x7f0000002480)=""/15, 0xf}, {&(0x7f00000024c0)=""/199, 0xc7}, {&(0x7f0000003a40)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/152, 0x98}, {&(0x7f0000002680)=""/161, 0xa1}], 0x7, &(0x7f00000027c0)=""/7, 0x7}, 0x7}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002800)=""/53, 0x35}, {&(0x7f0000002840)=""/54, 0x36}, {&(0x7f0000002880)=""/8, 0x8}], 0x3, &(0x7f0000004a40)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002900)=@ax25={{0x3, @default}, [@bcast, @rose, @remote, @rose, @rose, @netrom]}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005a40)=""/198, 0xc6}, {&(0x7f0000002980)=""/70, 0x46}, {&(0x7f0000005b40)=""/170, 0xaa}], 0x3, &(0x7f0000005c40)=""/191, 0xbf}, 0x86}, {{&(0x7f0000005d00)=@nfc_llcp, 0x80, &(0x7f00000081c0)=[{&(0x7f0000005d80)=""/38, 0x26}, {&(0x7f0000005dc0)=""/67, 0x43}, {&(0x7f0000005e40)=""/202, 0xca}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/71, 0x47}, {&(0x7f0000006fc0)=""/187, 0xbb}, {&(0x7f0000007080)=""/99, 0x63}, {&(0x7f0000007100)=""/53, 0x35}, {&(0x7f0000007140)=""/79, 0x4f}, {&(0x7f00000071c0)=""/4096, 0x1000}], 0xa, &(0x7f0000008280)=""/121, 0x79}, 0xffff}], 0x8, 0x40000021, 0x0) io_uring_enter(r0, 0x3397, 0xabf1, 0x0, &(0x7f0000008600)={[0x63]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:36 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfeffffff, 0x0, 0x0, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240200002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfffffe00, 0x0, 0x0, 0x0) 08:30:36 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240300002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:36 executing program 3: r0 = syz_io_uring_setup(0x294f, &(0x7f0000000080)={0x0, 0xb76e, 0x0, 0x0, 0x394, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:37 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x12) 08:30:37 executing program 2: shmget$private(0x0, 0x4000, 0x80, &(0x7f000038f000/0x4000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r3) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x4}, [{0x2, 0x2}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7}, {0x2, 0x6}, {0x2, 0x4, r1}, {0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x0, r3}], {0x4, 0x3}, [{0x8, 0x1, r4}, {0x8, 0x4, 0xee00}], {0x10, 0x1}, {0x20, 0x7}}, 0x6c, 0x1) r5 = eventfd(0x0) writev(r5, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="aba732e9970a72a4", 0x8}], 0x1) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1000000000016) 08:30:37 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240400002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:37 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 08:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xffffff8d, 0x0, 0x0, 0x0) 08:30:37 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240500002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfffffff5, 0x0, 0x0, 0x0) 08:30:37 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240700002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:37 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240900002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfffffffd, 0x0, 0x0, 0x0) 08:30:37 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="242800002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:37 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0xfffffffe, 0x0, 0x0, 0x0) 08:30:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x25) 08:30:38 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r4, 0x1) 08:30:38 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240003002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x2, 0x0, 0x0) 08:30:38 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 08:30:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:38 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24ba04002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x4, 0x0, 0x0) 08:30:38 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240005002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:38 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240007002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:38 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf, 0x0, 0x0) 08:30:38 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240009002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:38 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x30) 08:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x18, 0x0, 0x0) 08:30:39 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24c00e002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r2, 0x0) 08:30:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) pipe(&(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000a80)={{r1}, 0x0, 0x8, @unused=[0x8, 0x8, 0x22295bc8], @devid}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="d5c477dbccabb171f4499b8aaf17ac13acc67ed95792d53a0fa97e7cb3e5a640e012381836b0c76f54e881eb58b36d6a2fb0ce2955191c8842c28045288493b7d222bb197ad689bb84de", 0x4a}, {&(0x7f0000000280)="1d424fcad08d02ac6aadbeb6c1fb4c03909eda27dd368b00954eac685a37696328687e6db35643ba475e3e6ec1f199feea95490ca39c183aca8c35b527faeb526877f28b68491cdbb24d7042d2803d8774e5226f48f0de0717ae9229c8020d0c328fe24db57a7092c8b0a4b7b6a636eaf58dcf6449a9ff78807b689482d507fb9b80009e8f888e54", 0x88}, {&(0x7f0000000340)="2c6e12d75361ab872ad6286486091e40eabc55c45c92f3993241bbbec379275c65a277822ea66f96dd8a3aaec1853dd9cea4e95ec4559501ede005aa34b5991b8114e1d03ed3bf00c2424b3d2ed673ca3cb2759e36d98b4f24d02c1d834f9a05253361f814cf025f971cc0156a63be50a13a01f3ac37faf62f712f4ea9ba23f2778e122ea70093f93b8fd43fe742830798a89f457e72f43e8c431a0a5a66291f9e", 0xa1}, {&(0x7f0000000500)="1ab07deb34454ad2baa16217a9e33ce1b9c82473064ac335fb1a864bb49e5c8288dbc2e33a551966a50efacc1a8e52a97f710c168a20856eef2c9ee6d2371e1a3bae25311403e399871f6ed7f88c005a9750da2682f6041d18a24f197a65e80f63f3e8d5ca48ec1261d09c0f476e5926f3370f0d6a1c1de6cc2df3970fe8f8188485153d5a625d03f054bcf7a9a2019092198bbc060bfe8fab49f667a5d794e5096c5eef6812776772770f6da0b6c85752595dc571b8dabe4447c98fe1080a63d91d2ca2728d943e2ca17f0046297067652b46d3b3e97c471e728002c76085d5932181cfbba74cfcf95b2b17", 0xec}], 0x4, &(0x7f0000001a80)=[{0x90, 0x6, 0x80000000, "92b01724522b25b2d550c55b51bb22d67d071f68169f881aac9c036f9febd72aa4da292865654d80f696c1633e0c84d60b29493fe4a0cb2a8db4c758c6d152ccb18e15da55391e4b34f4c0ab85033dd907410aa18243a42c93e46a479ee1e65ddc99e926ff442d9ae6c91f0f3fe7a4d8044174513b78dae6743d1464c8"}, {0x38, 0x105, 0x1, "fe7bbf1d5f12f6054a136763f3d5d3efcca1f973ae50d8eb851fe9ef06af0a761026b18b"}, {0x1010, 0x3a, 0x2, "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"}, {0xc0, 0xaa, 0x9, "58f883b031682356f4d5c2e97daf9381fbd314e9db5efe3d82641d6d959b524c97bb0e9ead55737e28439decd5a2ed78272d40e3ba52d31e954e2d3d06a75c68ca7b65144011d9fdb60d6e1d578ea948f1de25da6c05c4930e7d46999812d4e9469b791b62722b58ac8a07401a9134456bb5394953a5d4a7892292ee3492f246d00ca4c842b027c4bfc507f9f6b9dc0b77a91ffc59b7538780537bf08ab026a84dfa6a5744e5c706e7"}], 0x1198}, 0x4) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000480), 0x0) tkill(r4, 0x1000000000016) 08:30:39 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_setup(0x41e9, &(0x7f00000002c0)={0x0, 0x951b, 0x1, 0x3, 0x1bc, 0x0, r5}) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x17, 0x800) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x0, @fd=r6, 0x5, 0x400, 0x100, 0x12, 0x0, {0x1}}, 0x9) 08:30:39 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240028002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xe0, 0x0, 0x0) 08:30:39 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2404ba002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf00, 0x0, 0x0) 08:30:39 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240ec0002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x1800, 0x0, 0x0) 08:30:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x48) 08:30:39 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000005e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x2000, 0x0, 0x0) 08:30:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:30:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mmap(&(0x7f00002cc000/0x4000)=nil, 0x4000, 0x2000001, 0x30, r1, 0xf1e29000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xe000, 0x0, 0x0) 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000770007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:42 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r0, 0x10000000) r6 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r8}}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:42 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x4c) 08:30:42 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240002002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x20000, 0x0, 0x0) 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240003002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x40000, 0x0, 0x0) [ 254.242758][T12377] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=12377 comm=syz-executor.0 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240004002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:42 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfeffff, 0x0, 0x0) 08:30:42 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x26, 0x0, @tid=r3}, &(0x7f00000000c0)=0x0) timer_gettime(r4, &(0x7f0000000140)) tkill(r3, 0x1000000000016) 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240005002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:42 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240007002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240009002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x1000000, 0x0, 0x0) 08:30:43 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x3) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() r4 = gettid() timer_create(0x5, &(0x7f0000000780)={0x0, 0x12, 0x0, @tid=r4}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:43 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x60) 08:30:43 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240028002e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x2000000, 0x0, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000032e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0), &(0x7f0000000440)='./file0\x00', 0xc01, 0x800}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x10000000}, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x9) signalfd(r0, &(0x7f0000000000)={[0x2]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/194, 0xfffffdb3}], 0x1, 0x6a6b, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x4ba2, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x8, 0x100, 0x0, {0x0, r6}}, 0x6) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2400ba042e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf000000, 0x0, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000052e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:43 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x18000000, 0x0, 0x0) 08:30:43 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000072e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000092e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x20000000, 0x0, 0x0) 08:30:46 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000000)={0x0, 0x134b, 0x2, 0x0, 0x3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:46 executing program 5 (fault-call:10 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x68) 08:30:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) eventfd(0x0) writev(r0, &(0x7f0000000a40), 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="ab8632e9970a72982e59ff1ddc85f281d026c5be7da4a1d1940de04cf05afa6883002d2a5ee5d4b94fda365c7662ae8b87551f102c00", 0x36}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7, 0x0, &(0x7f0000000080)) r4 = fcntl$dupfd(r0, 0x0, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800003, 0x40010, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_submit(0x0, 0x5, &(0x7f0000001cc0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7748, r0, &(0x7f0000000140)="6f14f113c03c717ebbe6b6f615916d75004a26c790d682d4b62495acd8ab53f9d4880e1774bb2d03592f25ac71998b1c121267edb67b5dfed1f5c979806da001fba3d5af508668312cb2c533846c013660723798f1883d8c709810fa7d9060be44dbdec3a2df95e2d3ce46ee3637ec6e55883aa48ff62ae00672fb0911440dec6a16a6fd21e7e7183388a0027116c204a55c815ed8f404bc38429a2fe7ce63b40ef97ed7254f6ec44f5adfbd385c45bfc3765ae37e4dfb9245d1c6e242f3ee618dd12d798100b87b11d91d19e9d0ca2f2654083189073dfc2780dee49bf8d2d93abd261b2231540b4409ce8becc125b91f", 0xf1, 0x2d33, 0x0, 0x3, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x234, r5, &(0x7f0000000240)="3376bc4d2695177c89dc1e28f3d7a0e1e344848af215096122233acbcc9584c2c4ffc3473db2628cc8cf0e8d91d96f0ba1edbe9e35659e1a2ae76ca39af9d25c8ffb9b520ce0461a46f5bb13a1414cb42f1bac228a8d04c744595909e2194d7cf7789492141950d40ca692233809781ebea199c41cf32ab24e4c73", 0x7b, 0x4, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000340)="09087fd14e244d65caadbe0fb4628f4122c1538083f4db1768afd5ee5914091051fd7e9badd57beee4942c3c2688fe32030f6162a0dcd1b6507ad11e6e2b88eb5507a7f3b17f09d963", 0x49, 0x20, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x800, 0xffffffffffffffff, &(0x7f0000000500)="dbc545b62db7892f54431e40f51adc321681a72c87c22a51a8c446f5e1fbdf45145ec546f6fc08e9394fe385673d49511ad54d11841a8a8b1baa53dc680e4f95eb30b8dddab2d90b5683478ec880a6c11c4f5240eaffc400000000000000878d65ea2ae40ebfdf915aed1f586a2a1abb80a710f26d5829fb68641e2006f408e63f981a86aa44cad80051764f1104cfaf7fd0e2baaad6345dde67cda7228495cc297d9ba96ffc0af3e59096136a718500"/188, 0xbc, 0x0, 0x0, 0x1, r4}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000740)="12d941", 0x3, 0x3, 0x0, 0x1}]) tkill(r2, 0x1000000000016) [ 258.221593][T12476] FAULT_INJECTION: forcing a failure. [ 258.221593][T12476] name failslab, interval 1, probability 0, space 0, times 0 [ 258.235079][T12476] CPU: 0 PID: 12476 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 258.244547][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.255258][T12476] Call Trace: [ 258.258633][T12476] dump_stack_lvl+0xb7/0x103 [ 258.263238][T12476] dump_stack+0x11/0x1a [ 258.267558][T12476] should_fail+0x23c/0x250 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2400c00e2e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000282e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x40) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) tkill(r4, 0x11) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240004ba2e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 258.271996][T12476] __should_failslab+0x81/0x90 [ 258.276772][T12476] should_failslab+0x5/0x20 [ 258.281329][T12476] kmem_cache_alloc_node+0x58/0x2b0 [ 258.287740][T12476] ? __alloc_skb+0xed/0x420 [ 258.292440][T12476] ? rmqueue+0x4a/0xcc0 [ 258.296837][T12476] __alloc_skb+0xed/0x420 [ 258.301186][T12476] ? mntput_no_expire+0x64/0x730 [ 258.306442][T12476] sk_stream_alloc_skb+0x161/0x600 [ 258.311755][T12476] tcp_sendmsg_locked+0x8b6/0x24b0 [ 258.316968][T12476] ? __alloc_pages+0x194/0x320 08:30:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x8dffffff, 0x0, 0x0) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000ec02e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 258.321916][T12476] tcp_sendmsg+0x2c/0x40 [ 258.326302][T12476] inet_sendmsg+0x5f/0x80 [ 258.330650][T12476] __sys_sendto+0x2a8/0x370 [ 258.335172][T12476] ? __fget_light+0x21b/0x260 [ 258.339860][T12476] ? perf_trace_sys_enter+0x4d/0x2c0 [ 258.345412][T12476] ? fput+0x2d/0x130 [ 258.349370][T12476] __x64_sys_sendto+0x74/0x90 [ 258.354237][T12476] do_syscall_64+0x3d/0x90 [ 258.358753][T12476] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.364853][T12476] RIP: 0033:0x4665e9 08:30:46 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000000780)={0x0, 0x12, 0x1}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 258.369013][T12476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.389118][T12476] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.398133][T12476] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 258.406378][T12476] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 258.414883][T12476] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f 08:30:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xe0000000, 0x0, 0x0) [ 258.422951][T12476] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 258.431169][T12476] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:46 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) pipe2(&(0x7f00000019c0)={0xffffffffffffffff}, 0x4800) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001a00)=""/75, 0x4b}, {&(0x7f0000001a80)=""/79, 0x4f}, {&(0x7f0000001b00)=""/56, 0x38}, {&(0x7f0000001b40)=""/20, 0x14}, {&(0x7f0000001b80)=""/251, 0xfb}, {&(0x7f0000001c80)=""/124, 0x7c}, {&(0x7f0000001d00)=""/179, 0xb3}], 0x7) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r4, &(0x7f0000001900)=[{{&(0x7f0000000000)=@ieee802154, 0x80, &(0x7f0000001540)=[{&(0x7f0000000200)=""/137, 0x89}, {&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/81, 0x51}, {&(0x7f00000014c0)=""/68, 0x44}, {&(0x7f0000000100)=""/58, 0x3a}], 0x7, &(0x7f00000015c0)=""/236, 0xec}, 0x3ff}, {{&(0x7f00000016c0)=@ax25={{}, [@default, @remote, @null, @remote, @default, @default, @rose]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001740)=""/84, 0x54}, {&(0x7f00000017c0)=""/127, 0x7f}, {&(0x7f0000000180)=""/19, 0x13}], 0x3, &(0x7f0000001840)=""/185, 0xb9}, 0xfffff96e}], 0x2, 0x2, &(0x7f0000001980)={0x0, 0x3938700}) 08:30:46 executing program 5 (fault-call:10 fault-nth:1): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 258.664913][T12515] FAULT_INJECTION: forcing a failure. [ 258.664913][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 258.678113][T12515] CPU: 0 PID: 12515 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 258.687371][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.698947][T12515] Call Trace: [ 258.702239][T12515] dump_stack_lvl+0xb7/0x103 [ 258.707178][T12515] dump_stack+0x11/0x1a [ 258.711335][T12515] should_fail+0x23c/0x250 [ 258.716120][T12515] __should_failslab+0x81/0x90 [ 258.720913][T12515] should_failslab+0x5/0x20 [ 258.725675][T12515] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 258.731496][T12515] ? __kmalloc_node_track_caller+0x30/0x40 [ 258.737517][T12515] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 258.742967][T12515] __kmalloc_node_track_caller+0x30/0x40 [ 258.749373][T12515] ? sk_stream_alloc_skb+0x161/0x600 [ 258.755436][T12515] __alloc_skb+0x187/0x420 [ 258.760028][T12515] sk_stream_alloc_skb+0x161/0x600 [ 258.765307][T12515] tcp_sendmsg_locked+0x8b6/0x24b0 [ 258.770668][T12515] ? __alloc_pages+0x194/0x320 [ 258.775533][T12515] tcp_sendmsg+0x2c/0x40 [ 258.779814][T12515] inet_sendmsg+0x5f/0x80 [ 258.784221][T12515] __sys_sendto+0x2a8/0x370 [ 258.788807][T12515] ? __fget_light+0x21b/0x260 [ 258.793744][T12515] ? perf_trace_sys_enter+0x4d/0x2c0 [ 258.799104][T12515] ? fput+0x2d/0x130 [ 258.802992][T12515] __x64_sys_sendto+0x74/0x90 [ 258.807722][T12515] do_syscall_64+0x3d/0x90 [ 258.812407][T12515] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 258.818444][T12515] RIP: 0033:0x4665e9 [ 258.822407][T12515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 258.843891][T12515] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.852696][T12515] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 258.860671][T12515] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 258.868805][T12515] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 258.876763][T12515] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 258.884717][T12515] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:46 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x6c) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000110007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf5ffffff, 0x0, 0x0) 08:30:46 executing program 5 (fault-call:10 fault-nth:2): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:46 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfdffffff, 0x0, 0x0) 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000120007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 259.070534][T12524] FAULT_INJECTION: forcing a failure. [ 259.070534][T12524] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.084033][T12524] CPU: 0 PID: 12524 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 259.093239][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.103497][T12524] Call Trace: [ 259.106781][T12524] dump_stack_lvl+0xb7/0x103 [ 259.112096][T12524] dump_stack+0x11/0x1a 08:30:46 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000130007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:47 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfeffffff, 0x0, 0x0) [ 259.116546][T12524] should_fail+0x23c/0x250 [ 259.121067][T12524] __alloc_pages+0x102/0x320 [ 259.125664][T12524] alloc_pages+0x2e8/0x340 [ 259.130086][T12524] skb_page_frag_refill+0x9a/0x1b0 [ 259.136601][T12524] sk_page_frag_refill+0x31/0x120 [ 259.143691][T12524] tcp_sendmsg_locked+0xcc5/0x24b0 [ 259.149435][T12524] tcp_sendmsg+0x2c/0x40 [ 259.154329][T12524] inet_sendmsg+0x5f/0x80 [ 259.158806][T12524] __sys_sendto+0x2a8/0x370 [ 259.163395][T12524] ? __fget_light+0x21b/0x260 [ 259.168077][T12524] ? perf_trace_sys_enter+0x4d/0x2c0 [ 259.173470][T12524] ? fput+0x2d/0x130 [ 259.177553][T12524] __x64_sys_sendto+0x74/0x90 [ 259.182546][T12524] do_syscall_64+0x3d/0x90 [ 259.187148][T12524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 259.193643][T12524] RIP: 0033:0x4665e9 [ 259.197552][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 259.219182][T12524] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 259.227898][T12524] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 259.236678][T12524] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 259.245158][T12524] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 259.253691][T12524] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 259.261762][T12524] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfffffe00, 0x0, 0x0) 08:30:49 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000140007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:49 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x78) io_uring_enter(r3, 0x4162, 0xeedc, 0x2, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="018300000000865f0000001c35910c0000000cbc767a6a9c33fb2bbf1ad2aa30020080080001001717e6109dc5deb5847fea09a425f0f97435e9e421fbe1e4a1f9df8a52d7c653434e3535dd617a5fd39b37daa21e217dd8bcde6ff5ca1218bc15e3", @ANYRES32=r8, @ANYBLOB="1800038b14000b801200018000000100000000000c0001803530a2e39c0b5f7a3d00ad262d3e0000001900"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, 0x0, 0x800, 0x401, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0xf8, r8, 0x1, 0x22}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:49 executing program 5 (fault-call:10 fault-nth:3): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:49 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x74) 08:30:49 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x208883, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x40) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) timer_create(0x7, &(0x7f0000000780)={0x0, 0x2, 0x1, @tid=r4}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) r5 = openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x109400, 0x21, 0x12}, 0x18) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x7, 0x0, &(0x7f0000000080)) io_submit(0x0, 0x4, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000140)="dd4aad5cd8cdf7e90393e438ea2cd3b535307472d0766e0e33e5449d7c434c40b6df1373e683e15b52b388df2ee2bd3091ed4749ead8491574e3db7b3a299e871a5c0fc796bdccf6ffd3f0472f39c1fdd1fd3e7a912caa2e94ed2ec362e9ee713a5390429dc719dbf25b31e0a965d620aeae08718da1468d5c40d85e7a116979a9979ee5e4c2a3e5d8a1f10439dcf5b0574c15b916dc8326adfb0325bdfb5a2acf321cc6813551a3c031dada5c47374958a2195f96d0da1a6878c308d6bc4205b8998b056d05173c69ae474b2790ac647174e56abfed7fb8a1", 0xd9, 0x7, 0x0, 0x3, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000a80)="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", 0x1000, 0x4, 0x0, 0x1, r0}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0xfffe, r5, &(0x7f0000000300)="fa6f9146bcd7", 0x6, 0x3, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000380)="5104152b3d7fe556e04b3b2b1d28777260e7c82403d44ece108ee4621e6e3e352e7edfe4f792add6ee7a85d6889d3daa24460a4cde137a8e5be1334ce025051ab0de2333de029cbe62a99f9a6391db8af0847291dfdf9f25f88cabe726382e506448dbaedcf4baf7b42936fdccaafd0607cd5ea60625aaaf4da406e6b04b96c6a6ea4e089e7d40053392b44846d60c8ea06cf4456f77ffbcb74aca7aae0ce3b3d4e203b45f565ec5c2aa852aa48414387ee2b34b3a960b0713f248e054391eb24da6417bc8b013f39b92efe37e40f6ce4acbc5f45c2a022506f996b734e5aa22672bf0950735368302469d9e23fed1b8ea43e954bd3bcd44b7", 0xf9, 0x4, 0x0, 0x1, r2}]) writev(r5, &(0x7f00000009c0)=[{&(0x7f0000000540)="d590c8caedbea9f34f3b01ae6616d82cf729de6f64c397827c2bbd26909f5d4307cb7ed56ab467d9dee530adb6f65b4003586c4208cd036d9857279bac49ab30ee79096c9bb44b5bc068fc84f8b0758508962483ba8586edf8c5b72d97", 0x5d}, {&(0x7f00000005c0)="d502f983560b0d0bf9a635d8ae8baaa54f8fadbe7fb406b3549c2dd169670d4db7066fc9cb948e4d5c860938c5d90f27fdfd7097ab20435729527aa8e2193d676c8d95f6979482a3843a4a3a194ce2ed73e1bb1342335939c8b5d26d0fc3a7f33c5c187b8aab350574668ee6feeb2feede18dd046ad6c0000f7e2666233cd800a8e337c0f6342e4d833f532b7a0c1fb51a08eec52d18d70d01551db5eaaa1d990f5d3b58f82ab0bbe47292d229b0ff6e60724e2b738c580d842bc6f132d9a7b70b974fd6fb0fabbdbbaa7c226f6b4d3a38c2c332fea0b1", 0xd7}, {&(0x7f00000007c0)="ec387a159c6165ad07b9e70eb3b4b82f1dcd86fa514aae2e7f3dfe50fc9231cdf69cf1edf6e4fc0852dccd840034f9dc788b0f9a4cb12e33c7bb2edb35b2900ddfb4ba62d6e53c5b96c0b1c8955aec724f7b78aae2d5fdcafa0b5bba780c8e525454048acd6c52ff23769141d8783cd375e1d3d2ae449da311983c3432a5a256f3347d03a19f29402672a1da8f137383a372a9b485ed7c590fa29363de7621810bf36a316143a67fedf96f27462efaa6973066f28b31ffbcf6dcf35f7260170912d81d59023d8670b8c38f19545c909cc8e4c2a7c28edad9bca5ce", 0xdb}, {&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000002a80)="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", 0x1000}, {&(0x7f00000008c0)="fbca55af80e67c4048817123a8eec01ca53916051fcc3bf8f300586afa52e89741c6e0048ce56c3e088ba9b9241a6d03c81e0678bf32bd9da9dd8755c7a5ba678309afb0dd8ff70c17bc35662e6aac8132e4faad2086b5ed0e0d06f6465b3ccce997e0121de6672577fbea14976cfa8ee25e88ce5f29bed255ea362e52539c2581ecc87c5c98811fdf2a72fc060c927543a409585f54531cb4a673edd68d2a3c229582a92b5c6fe6961dfd89d16f83c2a9e505be5bc7e0dbdcbb00c01f2b948f5c3c", 0xc2}, {&(0x7f00000006c0)="d2319e748a581452f681d8f02f4d36a9f25be41a778cc9dbc4493ee09c0e304923deea287be89b93b24aed20e363eeea2d75174e68c6617a391274e963e4854ee579d1ef3b034a72f9c434b2cb8243110678444f244a7f3e4b45c6f3bac2820d96215d5faf69effd77f84435f7d0014ed069711d31c1a58433dd444d2e67bf0f923cc312e4714785e6f7ddc184df04b40cb11ebb506c5aae", 0x98}], 0x7) 08:30:49 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000150007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xffffff8d, 0x0, 0x0) 08:30:49 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000160007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 261.463262][T12557] FAULT_INJECTION: forcing a failure. [ 261.463262][T12557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.476999][T12557] CPU: 0 PID: 12557 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 261.485945][T12557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.496009][T12557] Call Trace: [ 261.499371][T12557] dump_stack_lvl+0xb7/0x103 [ 261.503981][T12557] dump_stack+0x11/0x1a [ 261.508143][T12557] should_fail+0x23c/0x250 08:30:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfffffff5, 0x0, 0x0) 08:30:49 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000180007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 261.512585][T12557] should_fail_usercopy+0x16/0x20 [ 261.517628][T12557] _copy_from_iter+0x131/0x970 [ 261.522412][T12557] ? check_stack_object+0x61/0x70 [ 261.527444][T12557] ? __virt_addr_valid+0x15a/0x1a0 [ 261.532728][T12557] ? __check_object_size+0x253/0x310 [ 261.538035][T12557] skb_do_copy_data_nocache+0xca/0x240 [ 261.543585][T12557] ? __sk_mem_schedule+0x7b/0xb0 [ 261.548526][T12557] tcp_sendmsg_locked+0x1182/0x24b0 [ 261.553843][T12557] tcp_sendmsg+0x2c/0x40 [ 261.558227][T12557] inet_sendmsg+0x5f/0x80 08:30:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfffffffd, 0x0, 0x0) 08:30:49 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000190007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 261.562627][T12557] __sys_sendto+0x2a8/0x370 [ 261.567136][T12557] ? __fget_light+0x21b/0x260 [ 261.571813][T12557] ? perf_trace_sys_enter+0x4d/0x2c0 [ 261.577307][T12557] ? fput+0x2d/0x130 [ 261.581223][T12557] __x64_sys_sendto+0x74/0x90 [ 261.586194][T12557] do_syscall_64+0x3d/0x90 [ 261.590626][T12557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 261.596525][T12557] RIP: 0033:0x4665e9 08:30:49 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfffffffe, 0x0, 0x0) [ 261.600499][T12557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 261.620632][T12557] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.629051][T12557] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 261.637032][T12557] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 261.645096][T12557] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 261.653370][T12557] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 261.661353][T12557] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x2000000000000, 0x0, 0x0) 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:50 executing program 5 (fault-call:10 fault-nth:4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:50 executing program 2: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(r0, &(0x7f0000000140)='./file0\x00', 0x8102, 0x120) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x7, 0x0, &(0x7f0000000080)) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @multicast1}, {0x6, @remote}, 0x18, {0x2, 0x4e22, @local}, 'veth1_to_bond\x00'}) accept$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xe6a1, r3, &(0x7f0000000280)="03088a9e275a8e189f344d", 0xb, 0x7ff, 0x0, 0x0, r1}]) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x2b}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) 08:30:50 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040), 0x1) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xffffffff, 0x0, &(0x7f0000000200)="db3b37d32d6ad0c2b009d477bcec35b295f3105bff8572f7403d12c3c06f4304eff077d7d8b6055e0cfdaf6b6b3f6c789f936ab7c549442440d91efec1624bd14c8e64fec95cc4a3318f0be482dbe4dfdc61dd33a6da0e913e97dd68fe04a2df0cb3ebb8e710fefa18d65b68049e24f0393feeb02a20b6f6e93248558dc66adb704dc5be74134bc7ed31be16f304b4b112d3b83b3703cd7c4f752948421860f3378ef9789fb59632b42ecfc37b7704444eb53e74a1399a9ad0285497ab9508b5fdb7d199c40f412466463ffd808018261f6bf062a48d24626a802c", 0x5, 0x0, 0x0, {0x2}}, 0x7f) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:50 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x7a) 08:30:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x4000000000000, 0x0, 0x0) 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 262.391748][T12602] FAULT_INJECTION: forcing a failure. [ 262.391748][T12602] name failslab, interval 1, probability 0, space 0, times 0 [ 262.404916][T12602] CPU: 0 PID: 12602 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 262.413933][T12602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.424115][T12602] Call Trace: [ 262.427406][T12602] dump_stack_lvl+0xb7/0x103 [ 262.432277][T12602] dump_stack+0x11/0x1a 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 262.433838][T12607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.436564][T12602] should_fail+0x23c/0x250 [ 262.450309][T12602] __should_failslab+0x81/0x90 [ 262.455213][T12602] should_failslab+0x5/0x20 [ 262.459723][T12602] kmem_cache_alloc_node+0x58/0x2b0 [ 262.465993][T12602] ? __alloc_skb+0xed/0x420 [ 262.470627][T12602] __alloc_skb+0xed/0x420 [ 262.475357][T12602] ? __check_object_size+0x253/0x310 [ 262.480722][T12602] sk_stream_alloc_skb+0x161/0x600 [ 262.486049][T12602] ? __sk_mem_schedule+0x7b/0xb0 [ 262.491060][T12602] tcp_sendmsg_locked+0x8b6/0x24b0 [ 262.496248][T12602] tcp_sendmsg+0x2c/0x40 [ 262.500498][T12602] inet_sendmsg+0x5f/0x80 [ 262.504812][T12602] __sys_sendto+0x2a8/0x370 [ 262.509299][T12602] ? __fget_light+0x21b/0x260 [ 262.514056][T12602] ? perf_trace_sys_enter+0x4d/0x2c0 [ 262.519324][T12602] ? fput+0x2d/0x130 [ 262.523272][T12602] __x64_sys_sendto+0x74/0x90 [ 262.528250][T12602] do_syscall_64+0x3d/0x90 [ 262.532736][T12602] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.538795][T12602] RIP: 0033:0x4665e9 [ 262.542777][T12602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.562457][T12602] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.570848][T12602] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 262.578799][T12602] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x34cc2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 262.586877][T12602] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 262.595025][T12602] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 262.603159][T12602] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:50 executing program 5 (fault-call:10 fault-nth:5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000200007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfeffff00000000, 0x0, 0x0) [ 262.672679][T12624] FAULT_INJECTION: forcing a failure. [ 262.672679][T12624] name failslab, interval 1, probability 0, space 0, times 0 [ 262.678971][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.685323][T12624] CPU: 1 PID: 12624 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 262.703640][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.714143][T12624] Call Trace: [ 262.717434][T12624] dump_stack_lvl+0xb7/0x103 08:30:50 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000210007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 262.722136][T12624] dump_stack+0x11/0x1a [ 262.726323][T12624] should_fail+0x23c/0x250 [ 262.730743][T12624] __should_failslab+0x81/0x90 [ 262.735581][T12624] should_failslab+0x5/0x20 [ 262.740220][T12624] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 262.746350][T12624] ? __kmalloc_node_track_caller+0x30/0x40 [ 262.752289][T12624] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 262.757847][T12624] __kmalloc_node_track_caller+0x30/0x40 [ 262.763527][T12624] ? sk_stream_alloc_skb+0x161/0x600 [ 262.768931][T12624] __alloc_skb+0x187/0x420 08:30:50 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x100000000000000, 0x0, 0x0) [ 262.773389][T12624] sk_stream_alloc_skb+0x161/0x600 [ 262.778628][T12624] ? __sk_mem_schedule+0x7b/0xb0 [ 262.783610][T12624] tcp_sendmsg_locked+0x8b6/0x24b0 [ 262.788736][T12624] tcp_sendmsg+0x2c/0x40 [ 262.792980][T12624] inet_sendmsg+0x5f/0x80 [ 262.797326][T12624] __sys_sendto+0x2a8/0x370 [ 262.801835][T12624] ? __fget_light+0x21b/0x260 [ 262.806510][T12624] ? perf_trace_sys_enter+0x4d/0x2c0 [ 262.811929][T12624] ? fput+0x2d/0x130 [ 262.815840][T12624] __x64_sys_sendto+0x74/0x90 [ 262.820603][T12624] do_syscall_64+0x3d/0x90 [ 262.825102][T12624] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 262.831021][T12624] RIP: 0033:0x4665e9 [ 262.835640][T12624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 262.855646][T12624] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.864159][T12624] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 262.872305][T12624] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 262.880271][T12624] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 262.888430][T12624] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 262.896668][T12624] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x200000000000000, 0x0, 0x0) 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:51 executing program 5 (fault-call:10 fault-nth:6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x247) [ 263.308849][T12648] FAULT_INJECTION: forcing a failure. [ 263.308849][T12648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.322110][T12648] CPU: 0 PID: 12648 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 263.331127][T12648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.341195][T12648] Call Trace: [ 263.344479][T12648] dump_stack_lvl+0xb7/0x103 [ 263.349588][T12648] dump_stack+0x11/0x1a [ 263.354162][T12648] should_fail+0x23c/0x250 [ 263.358667][T12648] should_fail_usercopy+0x16/0x20 [ 263.363761][T12648] _copy_from_iter+0x131/0x970 [ 263.368523][T12648] ? check_stack_object+0x61/0x70 [ 263.373582][T12648] ? __virt_addr_valid+0x15a/0x1a0 [ 263.378800][T12648] ? __check_object_size+0x253/0x310 [ 263.384158][T12648] skb_do_copy_data_nocache+0xca/0x240 [ 263.389961][T12648] tcp_sendmsg_locked+0x1182/0x24b0 [ 263.395551][T12648] tcp_sendmsg+0x2c/0x40 [ 263.399841][T12648] inet_sendmsg+0x5f/0x80 [ 263.404184][T12648] __sys_sendto+0x2a8/0x370 [ 263.409270][T12648] ? __fget_light+0x21b/0x260 [ 263.413925][T12648] ? perf_trace_sys_enter+0x4d/0x2c0 [ 263.419464][T12648] ? fput+0x2d/0x130 [ 263.423342][T12648] __x64_sys_sendto+0x74/0x90 [ 263.428186][T12648] do_syscall_64+0x3d/0x90 [ 263.432624][T12648] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.438620][T12648] RIP: 0033:0x4665e9 [ 263.442498][T12648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.462432][T12648] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.471345][T12648] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 263.479404][T12648] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 263.487972][T12648] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 263.496167][T12648] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000240007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 263.504120][T12648] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf00000000000000, 0x0, 0x0) 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000260007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:51 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x1800000000000000, 0x0, 0x0) 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000280007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:51 executing program 5 (fault-call:10 fault-nth:7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1, 0x101, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f00000000c0)={{r5, r6+10000000}, {0x77359400}}, &(0x7f0000000140)) 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000290007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 263.712235][T12678] FAULT_INJECTION: forcing a failure. [ 263.712235][T12678] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.725792][T12678] CPU: 1 PID: 12678 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 263.734830][T12678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.744915][T12678] Call Trace: [ 263.748225][T12678] dump_stack_lvl+0xb7/0x103 [ 263.752990][T12678] dump_stack+0x11/0x1a [ 263.757244][T12678] should_fail+0x23c/0x250 [ 263.761675][T12678] __alloc_pages+0x102/0x320 [ 263.766279][T12678] alloc_pages+0x2e8/0x340 [ 263.770765][T12678] skb_page_frag_refill+0x9a/0x1b0 [ 263.775944][T12678] sk_page_frag_refill+0x31/0x120 [ 263.781119][T12678] tcp_sendmsg_locked+0xcc5/0x24b0 [ 263.786313][T12678] tcp_sendmsg+0x2c/0x40 [ 263.790824][T12678] inet_sendmsg+0x5f/0x80 [ 263.795967][T12678] __sys_sendto+0x2a8/0x370 [ 263.800486][T12678] ? __fget_light+0x21b/0x260 [ 263.805226][T12678] ? perf_trace_sys_enter+0x4d/0x2c0 08:30:51 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 263.810536][T12678] ? fput+0x2d/0x130 [ 263.814484][T12678] __x64_sys_sendto+0x74/0x90 [ 263.819453][T12678] do_syscall_64+0x3d/0x90 [ 263.823967][T12678] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 263.830145][T12678] RIP: 0033:0x4665e9 [ 263.834060][T12678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.854031][T12678] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 263.862549][T12678] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 263.870616][T12678] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 263.878683][T12678] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 263.886844][T12678] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 263.895403][T12678] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x300) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x2000000000000000, 0x0, 0x0) 08:30:52 executing program 5 (fault-call:10 fault-nth:8): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 264.175157][T12695] FAULT_INJECTION: forcing a failure. [ 264.175157][T12695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.188690][T12695] CPU: 1 PID: 12695 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 264.197649][T12695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.207715][T12695] Call Trace: [ 264.211045][T12695] dump_stack_lvl+0xb7/0x103 [ 264.215906][T12695] dump_stack+0x11/0x1a [ 264.220245][T12695] should_fail+0x23c/0x250 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000022e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 264.224789][T12695] should_fail_usercopy+0x16/0x20 [ 264.229918][T12695] _copy_from_iter+0x131/0x970 [ 264.235359][T12695] ? check_stack_object+0x61/0x70 [ 264.240402][T12695] ? __virt_addr_valid+0x15a/0x1a0 [ 264.245872][T12695] ? __check_object_size+0x253/0x310 [ 264.251322][T12695] skb_do_copy_data_nocache+0xca/0x240 [ 264.257037][T12695] ? __sk_mem_schedule+0x7b/0xb0 [ 264.262197][T12695] tcp_sendmsg_locked+0x1182/0x24b0 [ 264.267668][T12695] tcp_sendmsg+0x2c/0x40 08:30:52 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x0, 0xfffffffe}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_enter(r3, 0x43af, 0xe205, 0x1, &(0x7f0000000100)={[0x100]}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2023c3, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xd81d, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) r5 = dup3(r0, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010400000000000000000100000008000300", @ANYRES32], 0x24}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xe68, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0xd}}}}, [@NL80211_ATTR_FRAME={0x270, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @from_mac=@broadcast, {0x2, 0x40}}, @ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x800, 0x1, @device_a, {}, @void, @val={0x2d, 0x1a, {0x1, 0x0, 0x7, 0x0, {0x107, 0x20, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x400, 0x5, 0xfd}}, [{0xdd, 0xbe, "b67e96a91bdc2cecda49f8f53800dde207dfc0292c89513311501d0b865b66770a5a45e4c5fc792ca1de9b56bd9f7445c011816052bc07bcd0f33996f63919005d7188a8febaaf53f09f1a0f7e7428775524c8a08fda293f3629e318fd32f4bd24cb924976db3d46a65e4f22536919cbc462cc6823ae689a5a023195e3e573686c068927f51a3c94d59b902b0b51a258dd6a3a411fe2661a3e2304910ca22d0d8d1bb9f89fde5975e64876ea102f5b46c4579645a6c59342345882276804"}, {0xdd, 0x8c, "4a4644a3da77adf64a44e6d70189b310b524e7f5570fd06e0fa1dd73d04516bd18a63b75c54f36317ffc85e260026197c81ef8635513e8c229834c9af47561c8906bacee0b0892d59d2e3ea68f6100eb9912792a47d6c8099863dbc64c236cf6b3a97cf6ed5f01ad6f395bde9f803a95ca5ac3eb76f8a14447add971ff54dd2abf1c1df5520b1e9b8e3a91f9"}, {0xdd, 0xc9, "d9cc5c6592843b09461baa3f855384ec5eaacce9b2e4cdbb3281df2bcbbebc3e152b9eefb2d03f718e05d323152aa8a01c2eee56bb52b250c2ce399bab719cb5aaa8a5c377460dd925ca3fbc84745b82152b4ca1cbd1fc112e3b23260fe0fdbb5875fc9645dbc0470adda2d55960e9b813d9a4e22f39296d368594bbff94f1637c96a4b8a6fea2fb7ebf5b1e9badece68927c53b7cb6060ff80d9949a6a90553d495a56cc954ec5978fd6d413f2862904085670dfbf5a4eac822c6467896739e061014904cccbf7df1"}, {0xdd, 0xd, "6dcb598e4177553f9a5e8a6ba9"}]}}, @NL80211_ATTR_FRAME={0x193, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{}, {0x5c3d}, @device_b, @broadcast, @random="8e482308f96f", {0x7, 0x5}}, @ver_80211n={0x0, 0xff, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xa00, 0x2b, @random=0x8, @val={0x1, 0x2, [{0x3e, 0x1}, {0x30}]}, @void, [{0xdd, 0xb4, "a55900f53f732cad1adf42c89097d3846f671a77a173fc5e6a06bd9ad2e29378970eeb666f3e06c950c469e41de2d14433fc9fa5ebd4b7936f8d8d454a23cad2a2eee77d719b6f26e7d6cb0ed28e37d8434a4a2f4b3111cce84d54b86ac47ab5c836952481f67e6a43655e4a97a92ff97b4a2005704b3378ff13fb1b8e05de53e896ada1e48485abd73834e5291a83051fcf6664dfb7b689d6f9f41213020103371a3b9e6deff3a5c29deaa1be178779aeb719d7"}, {0xdd, 0x54, "2b3f759bc9e6d105c54e45ac6b05076ccb91f31efcdae3cc4128fd03ce9117679a28cebc84931ee1a9117e8d5e2c47d24ac68297e428b830e019237f5f11b4994a5b73c77dc148b044b4193d1ee01541b34e26da"}, {0xdd, 0x5b, "f4b06c797d1520e81349dc0835fd1a43e89552a802c6e83d28a60710c934e1e0bbb842d6ca6fdacbc11cf49d6534b61af4007f5722ae86e98f0f086c24d2200a6ad4af44c441de5a5382008cb9fb47fcfb6e5ed70649c33c958e62"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3d4, 0x33, @mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x5}, @device_b, @broadcast, @random="c94715c5313e", {0x1, 0x81}}, 0x2000, 0x3, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x6b, "8330bc40571ff5ea4b3cebe53e5271083a9eed0dc92e8f1917860713c726971ed9185bf1e84524515df5e34cd7b5f3c1b8cea6085c1c51e66f5dbb3cfad9a399ce831f2a06bfc1464065692e6c3a81d927bc94417fc45017dcda0d5e8ac69d409243dac90a3f9f9051c5e7"}, {0xdd, 0xa8, "c128c62c91b6d8d78a59364ed858b4475b7bdd34f81c94fb1cc67d68fabf79e029c74c2e11d3787bb1240b17fbc8df96554271102daf3a03b40a086d6242544a931b806bd5794ea7bcc09aff952028d8dd4a855606608ac46fd8372dccfaedbebed3e1ec23a6ba7f9b65080f969beacae83a4d024537d34888386efd9cfd4c19be12a64897721661100c1f3e0aeea4f5055888482a48aa1a9ee830c19a7b62742e2f43fe7add45c7"}, {0xdd, 0x87, "4a4fe701cd584f5b22349baeaeb315c5eebf3bf9f0411b23f9e7c256c8fddada34eed85eeab7f5c4f0e8e1a6ca0b448c32fba5ddb9f12a127c3a38023623907280db05f8520c869f760141ac84ccbce26ece2c5a64aa6982bb41de979b57062b7994a3efdd66a3d2d7ab1f14041e5ca4fcd1703ddcff8b5bf758787ba6b0b511d8dbc23d3a29da"}, {0xdd, 0x86, "4ef25991f3d7593dd63922474af3de89aac55aebc754e47697406f8e7cb1d214d73f36e4e566a10f5f5509b89903c72dd1d0659030f52bca322ea3d8b2d36143465541682b75117bba6e0bd4530efc460a79b2a3dbbb6f8a56f89415ba80051f9dbcda9da69b82cb10e95b02c550fe6c7f797c887bf0c2c93b566312e7564a130ea5f43c0b31"}, {0xdd, 0x39, "ad7147b7a6ab780c8877f6c9daf72d056bd4bf46674ce0fea0501b5398741f781a3cbd37e97775828a0f908979a84ad82add02755bcfbc9258"}, {0xdd, 0x9a, "cd5e6519576a5a46258d83cb6f3c9ee342ea829552f2828382dead2924bbecb5fc0ec56b59e39e1f7178df083b65eb8eba5f39cb4ae176cd0e7a215e373dedf11a7a0748fdbe145197a042c81342706dcee5b8c79cd663da8ecda794ea65ea3c8d3c4fc0df019754a84389ecafc98f1a343ffac4a6b08496cefce3c2cdec2c0e99efeb4312586b25e1e535bcc20765744371d95a51c44d46643c"}, {0xdd, 0xa5, "2dbdab491db1dfa08cb09526567e6d44799a38a630a2f3e9c7a5871b575ff744e955bfa8bdbcb7fa1436f4d47af0ce8d415a451ac80cda9995ac94b9ece34b5511b064c677f4791e29e7658efebef65fb15d3b91a362c36d1f95468013bf1f9c29f8c14b1324ac4d580c4573d5ad0259c42084b91c4667e6afb9b6685929317a235164d201257c86930da67d6aa003f22196c7e9eae7245511d9620f595a86d247aa77c0b5"}]}}, @NL80211_ATTR_FRAME={0x21, 0x33, @mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @device_b, @from_mac=@broadcast, {0x2, 0x8}}, @tdls_setup_req={0xc, 0x0, "", 0x7, @void, @val, @void, @void}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x57f, 0x33, @mgmt_frame=@reassoc_resp={@with_ht={{{}, {0xbdc}, @device_a, @device_a, @from_mac=@broadcast, {0x2, 0x3}}, @ver_80211n={0x0, 0xda1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x40, 0x28, @random=0x3, @val={0x1, 0x7, [{0x24, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x6c, 0x1}, {0x3, 0x1}, {0x60}]}, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x6, 0xffff, 0x15}}, [{0xdd, 0xd1, "424a64512bebc4413d5e316305afcac3c442f9cffb1cf767247c8c39233b6616e20c5c9e03dd5ce19350d0fa1917734a5aaf84ab9c556fbcb7eebdafe7938dca1669f2476987c1c9228648e4eae1739c0ecc82d2d7c636824ddf8095f4e584b1a5f127dd873443923fd47a36a981382ea4330bf61c88e3b33ad6b60244c5f8a8ef8bd4844e746ab04130f1d44033b44df73d81048abba4368a85306f79bfc90abee91ce0f36b35fe2860509c13c4f7003ea3e4d622f2e44da640cc4a8f465414dd8155719551dbea1a0283858885c3214c"}, {0xdd, 0xb6, "c35ad4b3a3507926ba38ab6873b154c7f2b14905d29ecdd120f659c9d699a4780e8d251d3744b7dc8700cd243c060935d03c3a81b8043ff68624acb8c36b7cdf757c50964363dab7f61256482d6546ebf192e4e0520ba0e24afc9e75703d922fe6ae551d969866553625a0bd930dd319056bb5e1b237ee58b82c485463f8593f2868db9d653399752b2bc7096cba0cb21442dceca42d1f1ddc994fb005088f19abae685a97ef0c1cdce461c65519927474bec5c928ed"}, {0xdd, 0x9e, "773c1fd223b2ead849b1393188446f6d4f74d93bdeb05dfd7fcc34f63f777e9e81213145eca6c009516c0fb4b8594d3e746d474967d341ab3d3dcfc0962c271d5650aa2b9ec76467022032819d7d69f47240542242a12ab3b0c6a804713e875a9ea015170f2b25c54aaa076385ebec4105dd9eb668d2419eb376a93287bfc63cc7635dac205a00cba08e2f2aa4f71725ee840d99291e264f61a8ac964af4"}, {0xdd, 0x4c, "8749a595a69af965c120eab60c01f593bf78fb4c222892b7d2752725c75adce78cf9c46f19eecfce0673b9c20e584e07958a9fc849842becaa18fc96979f24f6ee8c4b658a07ce0caa016930"}, {0xdd, 0x93, "42b032bd61a693f6078ffbab68ea2633502ebb75d9c42fc9e37b7db8e69ce7c8cc425389c56a1c729912d4c07a6d2e50e0ec83a5bdb1872334021a1476d56c642232c6236cca2ef54ce3ace42fef02cf76a3127a555defc98ff177a6779870ec15ff3f35ff2315d9d2b361637271be9ca8bf3792a4462be657e7512d34e1b74724a95fff33f01e91fa49d368b322feb139061b"}, {0xdd, 0x7b, "f53382001de9fed14e0d90db40de0192ef51a78aa831ae2a809ce810d152c6e4e18024154cfc0f71ae63a739fafafa5d994c436b93bfb7872df74f5d9512a0c531b6b7d409bade014f5aaa0cc9ffcea4e92a094fbe78f8b9957cfac059f61ca7be017b83ed7cd74e8db17b3f1bf292517c99b2edfd0c0913b13ff7"}, {0xdd, 0xe9, "4f918d414b25269412be204cd30ec2c848f3ca9a7ec42db4a63f55131121a64be20492854d3777075aef995918ea583eb26fc5ca0020a6473394b106b3d338cfb28575dc5da77b9bf14bcbe6303df82b0cc9d2ad8f581964a6acd7e72935d262e8eafb5f8a0ce5eaa7e1de0d1182fb16420144abb28cde90a5b27f396856ee4ba5f4f970fd0afe8bc10161721f80508215dceb327052c1b31525eea45d3b07dfa565faf272da0c46af171ef2dc3d3213f4f1979247cc19be3b97cb4d04bd500a251f22e4f64bce19aaa3c833d4ee14fee5e163e42d60079079a53e17be07b8ea59cf7089b9397a636f"}, {0xdd, 0xbc, "010859821442f720aa281a3870024b5e38c4e4b1992c4ae15bd3d7b3190a0845fe70b36c9278234513c14c4b5b6d9a08d8ccd231e237c398a1f27df0c3ff8d5ca99bc06e9567307f2f66340e9ef9149047a535bdc9b93ed174018ad7ae75edf4b6e6909a76457c7d6c5953e486177f1b15ebb2d2f03c93b5280d1100018d75a32a7cbf97cd055c94715ecc5f58d531bff99427b9c7c92578adcca054661117a16c2f795a16d4e94654a9ee2d7bc4d0d81531faa5e005a57a23e8f838"}]}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0xd}, {0x8, 0x4}, "63bc83fa44b11d2dc9b3823ca8540139f030af3dda15e5e54a4a0562c7b2cef3fee5b97c49201714616a298df0acc694d25b1f66f5c31b35f62529a91f66f39733bedf0f32788e4dee928e3a470257a293825331c42edb191d7b2b4dabc74514a2cca1d6cc62cce7606a75a9587c881c0291dd165469ac031ce20b5c2caa8fcf"}}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x7ff, @random="56e02b0387c8", @broadcast}}]}, 0xe68}, 0x1, 0x0, 0x0, 0x20000010}, 0x2054) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r6) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000032e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 264.272258][T12695] inet_sendmsg+0x5f/0x80 [ 264.276704][T12695] __sys_sendto+0x2a8/0x370 [ 264.281391][T12695] ? __fget_light+0x21b/0x260 [ 264.286524][T12695] ? perf_trace_sys_enter+0x4d/0x2c0 [ 264.291909][T12695] ? kcsan_setup_watchpoint+0x231/0x3e0 [ 264.297736][T12695] __x64_sys_sendto+0x74/0x90 [ 264.302528][T12695] do_syscall_64+0x3d/0x90 [ 264.307072][T12695] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 264.313073][T12695] RIP: 0033:0x4665e9 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000042e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 264.316979][T12695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 264.337194][T12695] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.345685][T12695] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 264.353750][T12695] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 264.362157][T12695] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 264.370484][T12695] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000001 [ 264.378660][T12695] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$incfs(r2, &(0x7f0000000080)='.pending_reads\x00', 0x20000, 0x100) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f00000000c0)) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:52 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="501ec9d18ca9fa31518b325a2937e1d018f09a5f4bf89393cfed46d17c6f3dc9d40f74cd59de53779dbbd988f102befd155a996ab8c40c03ab3f2b8a07d5ae8f070326f6bdfa46450c2fb961ac871eadec8d93ef87138c538463c0b8c94345ec5b383e292e6771d53ec1477d812861156a77e5f547f58446d505", 0x7a}, {&(0x7f0000000300)="05fd7d814c54a17819435a883b61b159b1d513b92a27058056bd980bd90043394d214fa801ad651243c2f658ae24065a72ce3c36510d0fcc381f71a4932c6cdf613d1eb8afc7afd0f478f7fc9f03ef50d1b65db90c1190982c53f9618eb543a54445c1c17817bb7aabc1ba08b645854bb8773a172db1829e9ecc0aa00680474e3b098a39b77dd4b5c65188b725950bfca94531f1b13b51916880c5d4e4f92c1f1b57730c5b486962d4aba5788446d299d07eb80d88377a2cc85ab6ef6370a63c6815432c230c7abe45bf189217175024e1b4ad4c79943a06bc2393fba35f523aaf27aaee5756f14e655ce63c484c", 0xee}, {&(0x7f00000004c0)="5b055a9af9ad7298fe2b96fcec3793846ff046283b3ff94b174aa34311051da614c5d87414a1c709b9f4848c376bc90e46b9c54d8ed343adbbca8dbfdfaafa1b124221e2f53ef4bc877eabb2bf940bdc0da7be132418c337e895dc3fe585ab09aa", 0x61}, {&(0x7f0000000540)="258432d1e8d8cb1b83d1f4d77cecea1e54d7753e4f481fca80105808c54da75dca7d6a8dad42156b95e90567fcb1f9d7c8a29fcdb4a551bab9f74a0ab273904ee3a83e834a0fded8ec24a882e79f206005b728eb5fd2ac6885d669d5ce29ad2444c5c1251cbc65647550a5be437b44d0ec5ab0d5492808cb83cd723c8d6f96603bcbb0b7ccb14f64787030265b04cb164a20e400ee741f2efe89891b7f409a88b7a2e9e1f82bd48219c8bdae", 0xac}, {&(0x7f0000000040)="ce68538bc6109ce66f84dd395282854ae092f403", 0x14}, {&(0x7f0000000600)="89cfcd19dacb361bc9ff6bd19b0d4ec6243eede4f2e8bc3246583c15e6cf00402d4e78a9ee3f076e7b5f0c23a66592c540f22f40bd6cf1771fa4096c0d477dbe9b2c14d48aa9862cb57d4e9e9e752c70142dccdd82c9ea35171224d52e33d75a221f0eb95e7a586e4f55c3dcc12c8405f13972ef5cd4a3330307e694dabf3f58397d27985888286b2257feb39db77b46afe1c73df55fe0a0ac31f19de47be4c16161ac2a1baf978fa1c4dfbe7183e02473abeac0091cf85ba9f5538bf97de0ea2e89", 0xc2}, {&(0x7f0000000100)="7bc7c6261435f092", 0x8}, {&(0x7f0000000700)="d6e470741a75584db50767dc8965c6c259185a1da5e18e8c9ce3f11a77958770b01a55b3993c6638b94b49941ce57d00ff5616c0464f95aea8575a513ac21ee1daa01ff2fa8e7983945e39728dbea14a69849027941a93aa8a9d4a8a7a43b63d887a9de90a4a446108750c7ebca59028c12d2ac3c42d5c389f5be302b724912102ac31", 0x83}], 0x8, &(0x7f0000000840)=[{0x60, 0x10b, 0x3f, "9896ebc883af82a5e56883eafd651a01ca09d470bc79504493b79948ab2fb7b0ce7dcc697b6147281faacbc3541b981f03d2a102f0511748dc30858590466132b2bb14724bcbbf010967dc33"}], 0x60}, 0x0, 0x40}, 0x2) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x6649, 0x9715, 0x1, &(0x7f00000008c0)={[0x8]}, 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) close(r3) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x8dffffff00000000, 0x0, 0x0) 08:30:52 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x500) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000052e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:52 executing program 5 (fault-call:10 fault-nth:9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xe000000000000000, 0x0, 0x0) 08:30:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40), 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x100000c, 0x12, r2, 0x60a63000) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sysvipc/msg\x00', 0x0, 0x0) io_submit(0x0, 0x5, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xd27, r2, &(0x7f0000000080)="334d8e215bbd4cfbc77e40e0645a7c3e744c4c2944b536628b10b7337fc04ddf0dd78b9aa03d40", 0x27, 0x6, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7, r4, &(0x7f0000000140)="a5638d57e120f77bad37dcd1bd0ff950dded4ba7c2e10764eb8f0e0f032513c4a85fcd23836b0d5b1caf4ac0635fe7d3a6acebaea8671100642841f1bf058a989a838ac89135c8b5703adc0b4e0cfc87edbd2e052d4203c83d6e68d533dbb6031a572af98ed54bdb86499d06d99365e6d7dd281ccca7", 0x76, 0x4, 0x0, 0x1, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x3f, r5, &(0x7f0000000200)="271f0e517a015daa30bd6f5d8b33", 0xe, 0x100, 0x0, 0x2, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x5, r2, &(0x7f0000000280)="d1d338e676f5a350b2ec589eb2c87e821bfc", 0x12, 0x0, 0x0, 0x1, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0xc100, r1, &(0x7f0000000a80)="322aa672ab7adeca4236bc52b58dd1c7de285c56113ca210935449f4513b06ca6d59c22cdf0853e83f2eb69bb99ec84846430ee4d917ce466fc6f7fdc207695ac3cee469abaf7067a2962741c15e7cffa4fb62baea758b3dfecbebd28818ad09b3d27d9ebf26e2251d5dfa0f3801aa0a2ad14ec0fad040a192d2f9a8f40cb7099b428f82d124de52f918bffbc9310b5203a05230a3975745aafba8c2bf8894475afc497a6ae0f6e4500f51285a223f07e80381ee049f3f3ad3d211dfce35dd1aca469a8e0ef44bd7b398255dd68aba725ba36656feb4ee60142eab2e84d98639ee312975348f7f469dfaed917676068e89da5f5feca307649200a310772f875595c004ae9a5478e2da6dbf0c51982946ef6d387ce7b86a7ce93b8cacf0878c89c340060f6502a962292275928b2d84206b50977972e021c5e25c98c1830b5b5893e0757ce838fe3a12b135a4aa0536fc2ecc99524ff188d0d74c25cfed2827253b764b3fc4cadaf7fd5c970eef05ccc8b6a09cfba90a4bfa05e303290836900838367325b743499fbb63a027563aa1e4780b133951e1a6a05c3e6089f3e2a85eb359ab7919ab3b5a0f8951cb2e4dad2a1eef772709349c1dc023d72bbb2a96ede28410c15f34a2ada3e06a93ccd92f46760f50e47a1d120144c2c0446b2805bcd006d324c65c40214a498587734db92645ddf187de150a5949bc3c6837f0b968ae6c2a1ee0c47e8cbec28142664ab73bbdab7e38076a417c576fecc0ffebaafa192854ae728b091d6841d93e756e0aa786ed1ade0e89d36310cb1941566b7ccc7b656dff0dda5c3cc94599cd1f60a387e7982ee2857ffd652168d02335ada16827d43f44cc2ebbcb06939eda5cbeef064e97cd5d7c66da6e4c4651e849f6cf392279cc7b03fdf38a28bb7ebcc8d07ed64b461b4d3d8589b966b360632ebf9565b35d74bee9c1484837838022e770e24d59161396efa4e93925fb5bd9e4db5660fc9c8e374eec59ba7abb320f2d6634c1bf31450a91a0d5347f9d895ea084e3ca8906912208596f0b1903bd8976767b085c233676bc1da1eb1df20c4410089413238f585c68d4fa5b699ae4968a77f8a16c305a2fbd20ff515fd0a2507843648181573a8d2c5341f4157ccdc34bba5e069e7f7e526360ec1e4b13705d18fca7f8d8af634f6d8dcf715efe5c8fb85dfa06a7dac45aa2143fef3c6c5611fda6b63848ec47c937fd62d8d3e07421bb5ef391d6605126fd37aaa407923f8e62e848b24655a6335f25c90490c1d8dc15cd163b89b9f23f5c25c2d5e7c17c01c8232911b7c1c303853bbf9c6a9c570b6864bcc4324cafc4af71911f955c526d4a0f951dc3a556d860c99ce796bc094bdfb0a40d019897374299e65f9e7de43a46bd6f6cf73356fc4eda40919820c4df9942695bd59c40e303aff9cb4a7a8cb06c1fd52e62089c5022f877b1756ebd3a92be32b3039bb6619004f1ba7e40c69fc12164db257df1ba635fcda231ca636f29a789db90d23bb5ab3e5586b6d5c138eb50762f0c71a445afa4813668d09be3abd222edd6ca36416477e7192d9a66938071c5a872d2f9a51e20a1fdb2beaebc5bb4e173e3c7254e33787aba48bfa1730d65590cb92a0fc3b2075412e6e0d0b4fd6c90cea06033b4bc3389dacfa9032f47929a92a0f7b8ff1ab8618b1b808f9b626bab10aae5a4498383a1e1043bbf8db809cde39872917cf26a3d98b33437af2b3915e4b49103d23e3b37e92de7a45341aee9c686ce139b3535240e1a1d3aac0bc494bbb313809381d893a744f883f29f2fa71cb8495a29a44cf8304fcb9c74204e6c2f45759e8bf50c319cacd047a116e91f2e4f92d2044deabf6c75b150f406f5e2240c6a87825a38944c3fba2803f30d7112e122f5440e1a4a6f8a745f37af6659d35243e86062518f9f287415aceb3fe5457c2e269e155fd250b41131f10a781232d8cc01b6c51d7201ce540e2600c03663cb1e5552a2756d8f361582ec2e6b6bf78c387d72249e25a026563ee8b0a565697d03afa0428ca4e7d92c39bb8c4198426c65515b1459a89ef871918c4218a3f3fdf1afdb47e55c74c1795d7aecac9aa344ea998fb39d0f442af3c3999873ec5b395bc462f7083fc8ab06c3ba2158e9737f780d6fc0f80b0bd0971f03d034d64b7c771706cf4174fe449c04eb575cf3da69680e0a9a366c8e8da238e783b66b30d59b4dfe5592f3c858b61c2752baf620c6e6c9149e34495de95aeb96b27662da576267d65d9bc92c6c039ac2455c6846af2205f9f408e695e91624cb578495bbdbee940b58da02040de6aea76a1df2e9e13390b7a3071a51917bb1f3126f5338afc986641692c0a3cb31c338cd8a9cc73607d30090f7fb2465f84e6e3da49a7869317d2c17a6d48d71c239e9bad3923b33b44414182aa6d1823fc0b92c52ea0b14650a707bb5575a5da62eed41248b87bb2240e354c1a0a43463ed6ae046b954ce53ae4b9608aff524fba8c00528418cbc6c10819580e20f72ae360b4cbbea8a6a387728282283268c5f33816e7b45803120c09a897022793a0329bcf525408c4cfae40074d8ce1fc2c4516420989b20c1d86e8c398c7b21affd095dd53b817cefda82ff4ac243647a2407f75a463116edd7f6e8aef1430e25eff639f1ed792190094ba945ec393660868b4519c3b3da31797a89188a76afd55588c4908a4b417bb338dea162739002e16fb7e8f5935fa3374ce19dabdfff5ef435b6453e9d7ee92b4ce11bdb668598c430fdd49778edbc5291df7da645fd02866e2429a0190f695a525a74eb7b5ae2b331cb313f84c2d8151cd08eedb625af6bcd2fae778757a51074e258c151d7bab7501bd54c3e468c4bc5d2e9bca8d64b63e459656a91bf8f6c0d530e3a68bb3bab6ac24de5fe57f0bc938b81d1c07c981eec769a126f4372e1fc0780e6e5e4f2977e166990c98476e589989d831cf913865de9d80cf4d47b863b66947955262773b72ab6bfae00f4fc4a42f755ce13fc9927d72c3192ad8d05ddc62923ef87aa29db4e95e4c7e28a9e13e6e0b27bc6d8996d0efc84f489767e78cf1b0b52cf65f17cda7f86ab112845c8d712ebbf5deaee77212d4bcfebc20a0da97d67d74b03f9b67b13ae854ca0ee2540ea0271509cbc8f8782695253db505eeaba7fab52e3b02dd8411c8afa43fa12f6618e3c0cd593a6443a8577338c5e7a33634e91825772a49ab94a3ebd5e781105da53e5b6cf08258dc070c5a7770977dd78be4a1998854d9f2df8a6c473d480267db40beafbfc64971537f112bdfb2c0f41d82c1d22c70c2d9a259a2b65b2c450c8208a1a47df015f5c22e497d7243020a04d7941f5bb4763111a99b0418b07d1e77789c7d55d7f04e6a04a19396c2472657b7c5b732f1b955372b2c3ce4da067374c9d298bd4e6d073d57014dc6e9e88beafd13e8b2afd8ea797a4b561e40bb25c972d02cc6f4f511600029aecaa44129955503a81f1e5d2675f61bdc2b9f2bc9bc075fd3bfa32a8688cd01555eb986b2d2338d1d72702a84a364483cd55d97674302f81a76b75be638d5e06ae7cd8b458d51e3eee444b8f39cee51a6bd94017de424ef0768c29ead956c827e9aa5a2ce141d97d7bff06f925385d81fa09e9f583bebb4c9f06a977404607101fc62ef411f90eee9e2dc796d699fac928dacbbafcf8fddb89eff6baa5217d403bda951c121af745d197fbd7ab9b6970e29df71adc4923c4a5da15adcea3d9291c4fdf150b4f32c4733f20cceae4f83ad5ccf8a64426f7147a60a5b5a8c3b524a5ca54204d1c3090c109ea50603c59e7f966063c0cdaa9e4c4e814d59b9c6c203c9c4b9f2cb1bd547584990511c501f79736ed3c6768684cd4a8c91204fa0ceec3a07f1cdf8b4720271648c88c306e5ab469d2791da8ea116b4436fe2d3ebfba024625f581c70094732446f4440e9f864c7653ea9f1832082d666679db09b9a7247883bd7fb68e52e92c083c995fa268160fea442f5291753a0a868963778b39d158f3a3752f119ffccddfeb93cb414b0a31bc90834e06e4824571011b4ecd8728a20d2f098e7a544e2e8aaf04e3dfdbb94cdf6f70f7d0c74df725bb477142e0795a7a70d82662bc4af27942a574684cfd9d755cca163a2ec1d7d73504dbf6b53501db397e704319dc868d3fdb42ee1bd6691b1d41d8367770c268477244d3310b2a86a789851c9ea00b4b26ef344daeac436d3216b57992b2f48980a65bde3a64bca952b7e4c4dc7cef3e1d84b6bddb3c6307b6687cb4d2f40ee6bb9efd454ac953f19028efe6753c68d3de95d2f4219f0df8818cafc9cd03c2765cf547a88b319088ed3ff052b4fa1239ced83dc77c6117341e7ef5b4c94c1cd471c86975f854af7a18686724699d3db3d1c0a7fb598fabce68d4a4b0b90a728b4278f1d1efc7e2e51565a18df429cdd5abd00069386068baec72577ff0e177186406cc0bc9851379c0b049754bc654f14af3a5f23de9634ffe2e947302c3f369ba88ad8487132c928756d905d85b886eaecffea41f8f01bcd8317c4ccd09d340326158832af56b862d37391d080f6b9914e2dbb5b6ce034562f0ad4ac178b5b819c9c95d6afd8b597882497aecd2d3c173649e96b3065c62ed78aef83e3c21a4e7e13ada62a6908355d3980c76dcdf5e47f8f8e43eb1d08ffd6bd1d4ab5e503e6e7b02f330bdeaad243349033f529dc88721f63f3fc11fccf055a83c275cc4253dc8e52b8a1ce03314a9c615dbe095e561a137c42961262898c152798faed43be0108062fd9fb4a15030d43823dd5167d05017781d651acc852d98aaba5b8f47b0b58aa88eb1e4263aa200a9681de9b4b2c4a83522d87058a81342bfb0564dde54c27fdec495dc06c52d3f3370d0a2dffd85c9f88fb8cfbc15d65cbd871ecd8a89fc9d85cdc29c30c667abd09afb9483451640333c76d4dbf62508006bff3526e18525bc2f1148731e89536a94b3f2f75e8e31165b0873e8248fbc773bc3a909c54f5b54ccb5e295e05ebcc8d5c5ca617f29cf55b0ccc1adc52d0a107c384527d18ccb29f06937771982877074b7aa762ea2c8b09f742b1dc4daacdcb634db1d6fe3ff30a3fb6a7284d41a85b8169be2aaf386c167ed24979b915e990ae9c750835fe7828d7c53b65087a7c8b5f881b2d1b304a1010b98362dfff9a23ce653ad5c18f8a2aaaeed070c75804ca4cd945d20ed7c0609a5e602a52f56caf685f25a7c1b39a189d15389c01037ab5dee091e9efcbed86e706345da69ddf83ee25ce557ee56b8bf719ee522b66351e755f3785a8a66d6e6357c88a21de69cb21214f989112209b950f0958b409b54c7bff0801a867862a5926146a2b2fc562d871dad800b13b929879afa3efd9595d3c33257d8c3f47ae3cd72bac75cab8ad1a805fdc3d8adf94a1c52efe5ff4b1220e8d25a0aad4182f8f3ae9a68c7cd48e92a6fc440f80032ad2bcea49f0e5498ae8af54f810e7ab337ff5d57eb32cd59c1dabb82c3e4cde967f871796a349ed475e9470e487c4425335d0c5122225b53260537ef2dd3a6355eecb9bd69770339f4d9aedace52573863c97bde5db4b2a8a969f2d12505190723e9d9faac6b4432ab8b6a53fcb4df6202aff9eb4a1389c759312aea2e1e5ebc772211b475afa200d58f492c366f66741eda3e2413bb611eac769ca42ee532f487ca5cb72ba3c74fb99cc6c6bd324744e22aa899a9ce004baa149d454399653cf882982673e1e56c27d0661a324904a272f844b0d09bbb1cb3a04dbb547649c13c", 0x1000, 0x1f, 0x0, 0x6, r6}]) tkill(r3, 0x1000000000016) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000072e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000092e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:52 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000282e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 265.038511][T12741] FAULT_INJECTION: forcing a failure. [ 265.038511][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 265.051350][T12741] CPU: 1 PID: 12741 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 265.060335][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.070570][T12741] Call Trace: [ 265.074660][T12741] dump_stack_lvl+0xb7/0x103 [ 265.079363][T12741] dump_stack+0x11/0x1a [ 265.083703][T12741] should_fail+0x23c/0x250 08:30:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xf5ffffff00000000, 0x0, 0x0) [ 265.088220][T12741] __should_failslab+0x81/0x90 [ 265.093095][T12741] should_failslab+0x5/0x20 [ 265.097608][T12741] kmem_cache_alloc_node+0x58/0x2b0 [ 265.103115][T12741] ? __alloc_skb+0xed/0x420 [ 265.107720][T12741] __alloc_skb+0xed/0x420 [ 265.112147][T12741] ? __check_object_size+0x253/0x310 [ 265.117554][T12741] sk_stream_alloc_skb+0x161/0x600 [ 265.122773][T12741] ? __sk_mem_schedule+0x7b/0xb0 [ 265.128503][T12741] tcp_sendmsg_locked+0x8b6/0x24b0 [ 265.133921][T12741] tcp_sendmsg+0x2c/0x40 [ 265.138166][T12741] inet_sendmsg+0x5f/0x80 [ 265.142612][T12741] __sys_sendto+0x2a8/0x370 [ 265.147246][T12741] ? __fget_light+0x21b/0x260 [ 265.152000][T12741] ? perf_trace_sys_enter+0x4d/0x2c0 [ 265.157372][T12741] ? fput+0x2d/0x130 [ 265.161983][T12741] __x64_sys_sendto+0x74/0x90 [ 265.167032][T12741] do_syscall_64+0x3d/0x90 [ 265.171756][T12741] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.177829][T12741] RIP: 0033:0x4665e9 [ 265.181818][T12741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.201782][T12741] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.210454][T12741] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 265.218878][T12741] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 265.226953][T12741] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f 08:30:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfdffffff00000000, 0x0, 0x0) [ 265.234903][T12741] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 [ 265.243217][T12741] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:53 executing program 5 (fault-call:10 fault-nth:10): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:53 executing program 3: r0 = syz_io_uring_setup(0x2dc5, &(0x7f0000000080)={0x0, 0x4000000, 0x0, 0x1, 0x800000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x2a010, 0xffffffffffffffff, 0x4205f000) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00ba22"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000000) [ 265.490244][T12765] FAULT_INJECTION: forcing a failure. [ 265.490244][T12765] name failslab, interval 1, probability 0, space 0, times 0 [ 265.503470][T12765] CPU: 0 PID: 12765 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 265.512668][T12765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.523040][T12765] Call Trace: [ 265.526326][T12765] dump_stack_lvl+0xb7/0x103 [ 265.530905][T12765] dump_stack+0x11/0x1a [ 265.535274][T12765] should_fail+0x23c/0x250 [ 265.539786][T12765] __should_failslab+0x81/0x90 [ 265.544620][T12765] should_failslab+0x5/0x20 [ 265.549128][T12765] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 265.555028][T12765] ? __kmalloc_node_track_caller+0x30/0x40 [ 265.560959][T12765] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 265.566413][T12765] __kmalloc_node_track_caller+0x30/0x40 [ 265.572035][T12765] ? sk_stream_alloc_skb+0x161/0x600 [ 265.577302][T12765] __alloc_skb+0x187/0x420 [ 265.581799][T12765] sk_stream_alloc_skb+0x161/0x600 [ 265.586997][T12765] ? __sk_mem_schedule+0x7b/0xb0 [ 265.592014][T12765] tcp_sendmsg_locked+0x8b6/0x24b0 [ 265.597295][T12765] tcp_sendmsg+0x2c/0x40 [ 265.601609][T12765] inet_sendmsg+0x5f/0x80 [ 265.606099][T12765] __sys_sendto+0x2a8/0x370 [ 265.610688][T12765] ? __fget_light+0x21b/0x260 [ 265.615545][T12765] ? perf_trace_sys_enter+0x4d/0x2c0 [ 265.621003][T12765] ? fput+0x2d/0x130 [ 265.625062][T12765] __x64_sys_sendto+0x74/0x90 [ 265.629723][T12765] do_syscall_64+0x3d/0x90 [ 265.634444][T12765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 265.640500][T12765] RIP: 0033:0x4665e9 [ 265.644556][T12765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 265.665028][T12765] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.673939][T12765] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 265.681980][T12765] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 265.690190][T12765] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 265.698415][T12765] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 [ 265.707137][T12765] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:53 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000005e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:53 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xfeffffff00000000, 0x0, 0x0) 08:30:53 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x600) 08:30:53 executing program 5 (fault-call:10 fault-nth:11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 265.880207][T12773] FAULT_INJECTION: forcing a failure. [ 265.880207][T12773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.893526][T12773] CPU: 1 PID: 12773 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 265.902386][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.912534][T12773] Call Trace: [ 265.915815][T12773] dump_stack_lvl+0xb7/0x103 [ 265.920514][T12773] dump_stack+0x11/0x1a [ 265.924865][T12773] should_fail+0x23c/0x250 [ 265.929334][T12773] should_fail_usercopy+0x16/0x20 [ 265.934640][T12773] _copy_from_iter+0x131/0x970 [ 265.939410][T12773] ? check_stack_object+0x61/0x70 [ 265.944764][T12773] ? __virt_addr_valid+0x15a/0x1a0 [ 265.949973][T12773] ? __check_object_size+0x253/0x310 [ 265.955263][T12773] skb_do_copy_data_nocache+0xca/0x240 [ 265.960759][T12773] tcp_sendmsg_locked+0x1182/0x24b0 [ 265.966080][T12773] tcp_sendmsg+0x2c/0x40 [ 265.970328][T12773] inet_sendmsg+0x5f/0x80 [ 265.974690][T12773] __sys_sendto+0x2a8/0x370 [ 265.979520][T12773] ? __fget_light+0x21b/0x260 [ 265.984187][T12773] ? perf_trace_sys_enter+0x4d/0x2c0 [ 265.991091][T12773] ? fput+0x2d/0x130 [ 265.995091][T12773] __x64_sys_sendto+0x74/0x90 [ 265.999936][T12773] do_syscall_64+0x3d/0x90 [ 266.004496][T12773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 266.010488][T12773] RIP: 0033:0x4665e9 [ 266.014365][T12773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 266.034305][T12773] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 266.043066][T12773] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 266.051274][T12773] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 266.059322][T12773] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 266.067767][T12773] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 [ 266.076110][T12773] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:55 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) r1 = dup(r0) setsockopt(r1, 0x3fc, 0x1000, &(0x7f0000000180)="1e8c3c3bac923a7eb529a636a774441a0dbb11189b14a5348f6ad525d4a992d00ad17c6692f68346a98a097d971554ba6dcff71ebece83fa33ce3bffb277396bbe444c9dc4abc681f44780748b0a044e1b72dceeb3e3366ddf56664a73f2db3ec0dbe4fb9d32bf60c70f593fb36f51dee6293ca5442e1210220ce14a99930806eb40d4bc91aaec3b996ecd01e6826ebdd4abf643e2f6d3d01535b369a9e07a5d3ab4", 0xa2) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = eventfd(0x0) writev(r2, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:30:55 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000770007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0xffffffff00000000, 0x0, 0x0) 08:30:55 executing program 5 (fault-call:10 fault-nth:12): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:55 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x5}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:55 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x700) [ 268.058760][T12795] FAULT_INJECTION: forcing a failure. [ 268.058760][T12795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 268.072292][T12795] CPU: 1 PID: 12795 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 268.081271][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.090208][T12797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=12797 comm=syz-executor.0 [ 268.091613][T12795] Call Trace: 08:30:55 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x2) 08:30:55 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000100007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:55 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000000)={0x0, 0xbee5, 0x0, 0x0, 0x12b, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8001, 0x20, 0x4}, 0x18) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 268.091622][T12795] dump_stack_lvl+0xb7/0x103 [ 268.113652][T12795] dump_stack+0x11/0x1a [ 268.117806][T12795] should_fail+0x23c/0x250 [ 268.122230][T12795] __alloc_pages+0x102/0x320 [ 268.126830][T12795] alloc_pages+0x2e8/0x340 [ 268.131256][T12795] skb_page_frag_refill+0x9a/0x1b0 [ 268.136367][T12795] sk_page_frag_refill+0x31/0x120 [ 268.141563][T12795] tcp_sendmsg_locked+0xcc5/0x24b0 [ 268.147064][T12795] tcp_sendmsg+0x2c/0x40 [ 268.151334][T12795] inet_sendmsg+0x5f/0x80 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000110007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000183000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0xfb294000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r3, 0x0) r4 = fcntl$getown(r1, 0x9) syz_open_procfs(r4, &(0x7f0000000080)='net/igmp\x00') r5 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r6 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000000c0)=0x8, 0x8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r5, 0x1000000000016) [ 268.155745][T12795] __sys_sendto+0x2a8/0x370 [ 268.160371][T12795] ? __fget_light+0x21b/0x260 [ 268.165128][T12795] ? perf_trace_sys_enter+0x4d/0x2c0 [ 268.170614][T12795] ? fput+0x2d/0x130 [ 268.174545][T12795] __x64_sys_sendto+0x74/0x90 [ 268.179230][T12795] do_syscall_64+0x3d/0x90 [ 268.183644][T12795] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.189554][T12795] RIP: 0033:0x4665e9 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000120007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x4) [ 268.193730][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.214078][T12795] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 268.222660][T12795] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 268.230635][T12795] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 268.238628][T12795] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 268.246968][T12795] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 08:30:56 executing program 5 (fault-call:10 fault-nth:13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 268.255116][T12795] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf) 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000130007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8800, 0x78) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) flistxattr(r0, &(0x7f0000000140)=""/147, 0x93) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12, 0x4}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) [ 268.328510][T12829] FAULT_INJECTION: forcing a failure. [ 268.328510][T12829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.341964][T12829] CPU: 1 PID: 12829 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 268.351345][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.362197][T12829] Call Trace: [ 268.365493][T12829] dump_stack_lvl+0xb7/0x103 [ 268.370294][T12829] dump_stack+0x11/0x1a [ 268.374561][T12829] should_fail+0x23c/0x250 [ 268.379918][T12829] should_fail_usercopy+0x16/0x20 [ 268.385133][T12829] _copy_from_iter+0x131/0x970 [ 268.390187][T12829] ? check_stack_object+0x61/0x70 [ 268.395211][T12829] ? __virt_addr_valid+0x15a/0x1a0 [ 268.400316][T12829] ? __check_object_size+0x253/0x310 [ 268.405731][T12829] skb_do_copy_data_nocache+0xca/0x240 [ 268.411396][T12829] ? __sk_mem_schedule+0x7b/0xb0 [ 268.416462][T12829] tcp_sendmsg_locked+0x1182/0x24b0 [ 268.421651][T12829] tcp_sendmsg+0x2c/0x40 [ 268.425879][T12829] inet_sendmsg+0x5f/0x80 [ 268.430215][T12829] __sys_sendto+0x2a8/0x370 [ 268.434846][T12829] ? __fget_light+0x21b/0x260 [ 268.439878][T12829] ? perf_trace_sys_enter+0x4d/0x2c0 [ 268.445205][T12829] ? fput+0x2d/0x130 [ 268.449692][T12829] __x64_sys_sendto+0x74/0x90 [ 268.454959][T12829] do_syscall_64+0x3d/0x90 [ 268.460402][T12829] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 268.466292][T12829] RIP: 0033:0x4665e9 [ 268.470541][T12829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 268.490384][T12829] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 268.498955][T12829] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 268.507314][T12829] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 268.515791][T12829] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 268.523789][T12829] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 [ 268.532677][T12829] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:56 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x900) 08:30:56 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x57d5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x2200, 0x20, 0x2}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x1a6) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000140007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x18) 08:30:56 executing program 5 (fault-call:10 fault-nth:14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) [ 268.892934][T12844] FAULT_INJECTION: forcing a failure. [ 268.892934][T12844] name failslab, interval 1, probability 0, space 0, times 0 [ 268.906127][T12844] CPU: 1 PID: 12844 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 268.915148][T12844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.925711][T12844] Call Trace: [ 268.929228][T12844] dump_stack_lvl+0xb7/0x103 [ 268.933827][T12844] dump_stack+0x11/0x1a [ 268.938024][T12844] should_fail+0x23c/0x250 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000150007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xe0) [ 268.942521][T12844] __should_failslab+0x81/0x90 [ 268.947456][T12844] should_failslab+0x5/0x20 [ 268.951986][T12844] kmem_cache_alloc_node+0x58/0x2b0 [ 268.957300][T12844] ? __alloc_skb+0xed/0x420 [ 268.962534][T12844] ? _raw_spin_unlock_irqrestore+0x27/0x40 [ 268.968748][T12844] __alloc_skb+0xed/0x420 [ 268.973132][T12844] sk_stream_alloc_skb+0x161/0x600 [ 268.978276][T12844] tcp_sendmsg_locked+0x8b6/0x24b0 [ 268.983427][T12844] tcp_sendmsg+0x2c/0x40 [ 268.987959][T12844] inet_sendmsg+0x5f/0x80 [ 268.992415][T12844] __sys_sendto+0x2a8/0x370 [ 268.997018][T12844] ? __fget_light+0x21b/0x260 [ 269.001691][T12844] ? perf_trace_sys_enter+0x4d/0x2c0 [ 269.007073][T12844] ? fput+0x2d/0x130 [ 269.011049][T12844] __x64_sys_sendto+0x74/0x90 [ 269.015718][T12844] do_syscall_64+0x3d/0x90 [ 269.020324][T12844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.026477][T12844] RIP: 0033:0x4665e9 [ 269.030365][T12844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.050360][T12844] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.058867][T12844] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 269.067000][T12844] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 269.075210][T12844] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 269.083165][T12844] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 08:30:56 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf00) 08:30:56 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000160007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:56 executing program 5 (fault-call:10 fault-nth:15): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:57 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000180007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 269.091577][T12844] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 [ 269.153974][T12872] FAULT_INJECTION: forcing a failure. [ 269.153974][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 269.166989][T12872] CPU: 0 PID: 12872 Comm: syz-executor.5 Not tainted 5.14.0-rc2-syzkaller #0 [ 269.175892][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.186298][T12872] Call Trace: [ 269.190097][T12872] dump_stack_lvl+0xb7/0x103 [ 269.195013][T12872] dump_stack+0x11/0x1a [ 269.199252][T12872] should_fail+0x23c/0x250 [ 269.204123][T12872] __should_failslab+0x81/0x90 [ 269.208972][T12872] should_failslab+0x5/0x20 [ 269.213637][T12872] kmem_cache_alloc_node_trace+0x58/0x2e0 [ 269.219454][T12872] ? __kmalloc_node_track_caller+0x30/0x40 [ 269.225544][T12872] ? kmem_cache_alloc_node+0x1d4/0x2b0 [ 269.231141][T12872] __kmalloc_node_track_caller+0x30/0x40 [ 269.237300][T12872] ? sk_stream_alloc_skb+0x161/0x600 [ 269.242656][T12872] __alloc_skb+0x187/0x420 [ 269.247338][T12872] sk_stream_alloc_skb+0x161/0x600 [ 269.252502][T12872] tcp_sendmsg_locked+0x8b6/0x24b0 [ 269.258202][T12872] tcp_sendmsg+0x2c/0x40 [ 269.262452][T12872] inet_sendmsg+0x5f/0x80 [ 269.266774][T12872] __sys_sendto+0x2a8/0x370 [ 269.271435][T12872] ? __fget_light+0x21b/0x260 [ 269.276096][T12872] ? perf_trace_sys_enter+0x4d/0x2c0 [ 269.281402][T12872] ? fput+0x2d/0x130 [ 269.285295][T12872] __x64_sys_sendto+0x74/0x90 [ 269.290046][T12872] do_syscall_64+0x3d/0x90 [ 269.294583][T12872] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 269.300523][T12872] RIP: 0033:0x4665e9 [ 269.304410][T12872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 269.324097][T12872] RSP: 002b:00007f6994588188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.332584][T12872] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 269.340547][T12872] RDX: ffffffffffffff67 RSI: 0000000020000640 RDI: 0000000000000003 [ 269.348516][T12872] RBP: 00007f69945881d0 R08: 0000000000000000 R09: ffffffffffffff4f [ 269.356473][T12872] R10: 00000000040007bd R11: 0000000000000246 R12: 0000000000000002 [ 269.364527][T12872] R13: 00007ffc52c28ccf R14: 00007f6994588300 R15: 0000000000022000 08:30:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x13, r0, 0x0) ioctl$RTC_WIE_OFF(r0, 0x7010) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000080)={0xb, 0x40, 0x2, 0xffff8000, 0x3, [0x0, 0x9, 0xaa, 0x2]}) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x111) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:59 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000190007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x1800) 08:30:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x9c8) 08:30:59 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x79dc, 0x251a, 0x1, &(0x7f0000000000)={[0x8000]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = syz_io_uring_setup(0x7995, &(0x7f0000000200)={0x0, 0xc816, 0x2, 0x3, 0x2e8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000100)) io_uring_enter(r3, 0x5687, 0xd9e3, 0x2, &(0x7f0000000180)={[0x13d]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:30:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:30:59 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x2000) 08:30:59 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xe000) 08:30:59 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x20000) [ 271.419059][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:30:59 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x47d43000) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:30:59 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000001e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:30:59 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x40000) [ 271.507315][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 08:31:00 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000210007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:00 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) 08:31:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfeffff) 08:31:00 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xa00) 08:31:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:00 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000220007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:00 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000240007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:00 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x1000000) 08:31:00 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000250007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 272.410255][T12951] ================================================================== [ 272.418580][T12951] BUG: KCSAN: data-race in __io_cqring_fill_event / io_uring_poll [ 272.426453][T12951] [ 272.428786][T12951] write to 0xffff888108169c00 of 4 bytes by task 12952 on cpu 0: [ 272.436562][T12951] __io_cqring_fill_event+0xfb/0x350 [ 272.442008][T12951] io_req_complete_post+0x55/0x5c0 [ 272.447207][T12951] io_issue_sqe+0x41b6/0x6870 [ 272.452217][T12951] __io_queue_sqe+0xe7/0x360 [ 272.457704][T12951] io_submit_sqe+0x1695/0x3400 [ 272.462461][T12951] io_submit_sqes+0x822/0xe50 [ 272.467393][T12951] __se_sys_io_uring_enter+0x1c7/0xa10 [ 272.472923][T12951] __x64_sys_io_uring_enter+0x74/0x80 [ 272.478278][T12951] do_syscall_64+0x3d/0x90 [ 272.482679][T12951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.488643][T12951] [ 272.490947][T12951] read to 0xffff888108169c00 of 4 bytes by task 12951 on cpu 1: [ 272.499093][T12951] io_uring_poll+0xc6/0x150 [ 272.503686][T12951] io_poll_task_func+0x113/0x690 [ 272.508707][T12951] tctx_task_work+0x1b8/0x420 [ 272.513429][T12951] task_work_run+0xae/0x130 [ 272.517924][T12951] io_cqring_wait+0x437/0x7d0 [ 272.522680][T12951] __se_sys_io_uring_enter+0x5ea/0xa10 [ 272.528133][T12951] __x64_sys_io_uring_enter+0x74/0x80 [ 272.533484][T12951] do_syscall_64+0x3d/0x90 [ 272.537880][T12951] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 272.544103][T12951] [ 272.546415][T12951] value changed: 0x00000144 -> 0x0000014a [ 272.552109][T12951] [ 272.554417][T12951] Reported by Kernel Concurrency Sanitizer on: [ 272.560586][T12951] CPU: 1 PID: 12951 Comm: syz-executor.3 Not tainted 5.14.0-rc2-syzkaller #0 [ 272.569343][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.579489][T12951] ================================================================== 08:31:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x7, 0x7ff}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x12}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_io_uring_setup(0x2cfc, &(0x7f0000000140)={0x0, 0x7ef6, 0x1, 0x2, 0x1cf}, &(0x7f0000450000/0x1000)=nil, &(0x7f000012d000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x3) tkill(r3, 0x1000000000016) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000260007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="ef46385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x2000000) 08:31:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xb00) 08:31:02 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x80010, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r5}}, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf000000) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000280007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000290007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x18000000) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002a0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002c0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:02 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x280000c, 0x10, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) close(r3) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) 08:31:02 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x20000000) 08:31:02 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e04f385738d0b6e2f17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:02 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002d0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xc00) 08:31:03 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r3}}, 0x7fffffff) syz_io_uring_setup(0x5e67, &(0x7f0000000200)={0x0, 0x7a25, 0x1, 0x3, 0x21e, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x4, 0x2, &(0x7f0000000180)="d54746d8704658a33290", 0xfffffffd, 0x0, 0x1, {0x1}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x8dffffff) 08:31:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x480900, 0x110) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRES32, @ANYRES16, @ANYRES32], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4040025) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000140)={{}, {@val, @actul_num={@void, 0xe70, 0x70}}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080), 0x24, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"1cb4a5d316fd6197a6d9491db11b033b", 0x0, 0x0, {0x400, 0x4}, {0x80000000}, 0x0, [0x81, 0x5, 0xe80, 0x7, 0x9, 0x400, 0x0, 0x7c, 0x9e2, 0x200, 0x9, 0x3ff, 0x5, 0x2, 0x1, 0x10001]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000001cc0)={{r4}, r6, 0x8, @inherit={0x98, &(0x7f0000001480)={0x0, 0xa, 0x68, 0x5e0, {0x5, 0x100000000, 0x5767debc, 0x145e7469, 0x7}, [0x3, 0x9, 0x6, 0x9, 0x3ff, 0x400, 0x7f, 0x5, 0x22d1, 0xffffffff80000000]}}, @devid}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000a80)={0x0, "4f807e8dcba1357071b01bf5cd8758d7"}) 08:31:03 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000005e0007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:03 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="24000000770007031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xe0000000) 08:31:03 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0207031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 275.493227][T13028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=119 sclass=netlink_route_socket pid=13028 comm=syz-executor.0 08:31:03 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf5ffffff) 08:31:03 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0307031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 275.534122][T13035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=558 sclass=netlink_route_socket pid=13035 comm=syz-executor.0 08:31:03 executing program 2: mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r0 = eventfd(0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) r2 = gettid() r3 = syz_open_dev$char_raw(&(0x7f0000000080), 0x1, 0xc000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000000c0)) timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) [ 275.572117][T13042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=814 sclass=netlink_route_socket pid=13042 comm=syz-executor.0 08:31:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xd00) 08:31:04 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0407031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfdffffff) 08:31:04 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x101c42, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x180000f, 0x12, r0, 0x0) preadv(r0, &(0x7f00000002c0), 0x0, 0xd9f, 0x0) r1 = eventfd(0x0) writev(r1, &(0x7f0000000a40)=[{&(0x7f00000004c0)="df015be2a1043cce", 0x8}], 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="aba732e9970a72a4", 0x8}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000780)={0x0, 0x12}, &(0x7f00009b1ffc)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r5) r6 = getegid() setgroups(0x1, &(0x7f0000000040)=[r6]) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) chown(&(0x7f0000000080)='./file0\x00', r7, r6) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) 08:31:04 executing program 3: pidfd_send_signal(0xffffffffffffffff, 0x2, &(0x7f0000000380)={0x3a, 0x7f, 0x7}, 0x0) r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x718d}}, 0x0) syz_io_uring_setup(0x3851, &(0x7f0000000000)={0x0, 0xec97, 0x8, 0x3, 0x2ea}, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000200)={0x0, 0x989680}, 0x1, 0x0, 0x1}, 0xffff) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x7, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$char_raw(&(0x7f0000000640), 0x0, 0x802) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0), 0xfffffffffffffffc) dup2(r4, r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x5) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r6, 0x1) io_uring_enter(r0, 0x3d48, 0x0, 0x0, 0x0, 0x0) 08:31:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:04 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0507031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:04 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd_index=0x8, 0x3ba9, 0x0, 0x0, 0x4, 0x1}, 0xfffffffd) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfeffffff) [ 276.381392][T13066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1070 sclass=netlink_route_socket pid=13066 comm=syz-executor.0 08:31:04 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) 08:31:04 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0707031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfffffe00) [ 276.431851][T13077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1326 sclass=netlink_route_socket pid=13077 comm=syz-executor.0 [ 276.486602][T13088] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1838 sclass=netlink_route_socket pid=13088 comm=syz-executor.0 08:31:04 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xe00) 08:31:04 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0907031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xffffff8d) 08:31:04 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfffffff5) 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e2807031dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 277.126708][T13102] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2350 sclass=netlink_route_socket pid=13102 comm=syz-executor.0 08:31:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfffffffd) [ 277.165368][T13107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10286 sclass=netlink_route_socket pid=13107 comm=syz-executor.0 08:31:05 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2b11, 0x459, 0x3, &(0x7f0000000000)={[0x8]}, 0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x7, 0x80, 0x2, 0x6}]}) r4 = dup3(r0, r3, 0x80000) r5 = openat$cgroup(r4, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x800000, 0x8010, r5, 0x49c43000) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007021dfffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:05 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) 08:31:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfffffffe) 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007032efffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) [ 277.508145][T13131] ================================================================== [ 277.516355][T13131] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll [ 277.523529][T13131] [ 277.525841][T13131] write to 0xffff888130fcd870 of 4 bytes by task 13132 on cpu 0: [ 277.533639][T13131] io_submit_sqes+0x7b4/0xe50 [ 277.538309][T13131] __se_sys_io_uring_enter+0x1c7/0xa10 [ 277.543861][T13131] __x64_sys_io_uring_enter+0x74/0x80 [ 277.549230][T13131] do_syscall_64+0x3d/0x90 [ 277.553835][T13131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.559801][T13131] [ 277.562248][T13131] read to 0xffff888130fcd870 of 4 bytes by task 13131 on cpu 1: [ 277.570721][T13131] io_uring_poll+0x8e/0x150 [ 277.575333][T13131] io_poll_task_func+0x113/0x690 [ 277.580258][T13131] tctx_task_work+0x1b8/0x420 [ 277.585030][T13131] task_work_run+0xae/0x130 [ 277.589510][T13131] io_cqring_wait+0x437/0x7d0 [ 277.594186][T13131] __se_sys_io_uring_enter+0x5ea/0xa10 [ 277.599629][T13131] __x64_sys_io_uring_enter+0x74/0x80 [ 277.605018][T13131] do_syscall_64+0x3d/0x90 [ 277.609428][T13131] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 277.615710][T13131] [ 277.618019][T13131] value changed: 0x00003918 -> 0x0000392a [ 277.623717][T13131] [ 277.626024][T13131] Reported by Kernel Concurrency Sanitizer on: [ 277.632159][T13131] CPU: 1 PID: 13131 Comm: syz-executor.2 Not tainted 5.14.0-rc2-syzkaller #0 [ 277.641394][T13131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.652091][T13131] ================================================================== 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007035efffd946fa2830020200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x2000000000000) 08:31:05 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xf00) 08:31:05 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283000d200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:05 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x4000000000000) 08:31:05 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830220200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:06 executing program 3: ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006500)=[{{&(0x7f00000026c0)=@generic, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/113, 0x71}, {&(0x7f0000002840)=""/214, 0xd6}, {&(0x7f0000004a40)=""/224, 0xe0}, {&(0x7f0000002940)=""/85, 0x55}, {&(0x7f0000004b40)=""/70, 0x46}], 0x6, &(0x7f0000004c40)=""/70, 0x46}, 0x5}, {{0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000004cc0)=""/229, 0xe5}, {&(0x7f0000004dc0)=""/203, 0xcb}, {&(0x7f00000065c0)=""/19, 0x13}, {&(0x7f0000004ec0)=""/51, 0x33}, {&(0x7f0000004f00)=""/213, 0xd5}, {&(0x7f0000005000)=""/72, 0x48}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/255, 0xff}, {&(0x7f0000006180)=""/16, 0x10}], 0x9, &(0x7f0000006280)=""/14, 0xe}, 0x7}, {{&(0x7f00000062c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006440)=[{&(0x7f0000006340)=""/227, 0xe3}], 0x1, &(0x7f0000006480)=""/88, 0x58}, 0x8000}], 0x3, 0x40000100, 0x0) io_uring_enter(r0, 0x3368, 0x2e2f, 0x2, &(0x7f0000000040)={[0xfffffffffffffb34]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/242, 0xf2}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002640)='memory.current\x00', 0x0, 0x0) io_uring_enter(r3, 0x7827, 0x23ce, 0x1, &(0x7f0000002680)={[0x4]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000380)=""/96, 0x60}, {&(0x7f00000004c0)=""/86, 0x56}], 0x3, &(0x7f0000000440)=""/48, 0x30}, 0x86}, {{&(0x7f0000000540)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/131, 0x83}], 0x2, &(0x7f0000000780)=""/233, 0xe9}, 0x800}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000880)=""/128, 0x80}, {&(0x7f0000000900)=""/27, 0x1b}, {&(0x7f0000000940)=""/153, 0x99}, {&(0x7f0000000a00)=""/48, 0x30}, {&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f0000000a80)=""/203, 0xcb}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0x7, &(0x7f0000001c00)=""/234, 0xea}, 0x2}, {{&(0x7f0000001d00)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/115, 0x73}], 0x2, &(0x7f0000003a40)=""/4096, 0x1000}, 0x694e}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/218, 0xda}, {&(0x7f0000001f40)=""/2, 0x2}, {&(0x7f0000001f80)=""/188, 0xbc}, {&(0x7f0000002080)=""/163, 0xa3}], 0x4, &(0x7f0000002180)=""/24, 0x18}, 0xd8}, {{&(0x7f00000021c0)=@x25, 0x80, &(0x7f0000002400)=[{&(0x7f0000002240)=""/232, 0xe8}, {&(0x7f0000002340)=""/50, 0x32}, {&(0x7f0000002380)=""/116, 0x74}], 0x3, &(0x7f0000002440)=""/46, 0x2e}, 0xffff}], 0x6, 0x40000000, &(0x7f0000002600)={0x77359400}) 08:31:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfeffff00000000) 08:31:06 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830320200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:06 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg2\x00'}) 08:31:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6eff17050c3002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:06 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830420200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x100000000000000) [ 278.466271][T13175] ================================================================== [ 278.474491][T13175] BUG: KCSAN: data-race in __io_cqring_fill_event / io_uring_poll [ 278.482279][T13175] [ 278.484587][T13175] write to 0xffff888130455400 of 4 bytes by task 13178 on cpu 0: [ 278.492326][T13175] __io_cqring_fill_event+0xfb/0x350 [ 278.497602][T13175] io_req_complete_post+0x55/0x5c0 [ 278.503026][T13175] io_issue_sqe+0x41b6/0x6870 [ 278.507690][T13175] __io_queue_sqe+0xe7/0x360 [ 278.512406][T13175] io_submit_sqe+0x1695/0x3400 [ 278.517161][T13175] io_submit_sqes+0x822/0xe50 [ 278.521821][T13175] __se_sys_io_uring_enter+0x1c7/0xa10 [ 278.527432][T13175] __x64_sys_io_uring_enter+0x74/0x80 [ 278.532883][T13175] do_syscall_64+0x3d/0x90 [ 278.537288][T13175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 278.543483][T13175] [ 278.545794][T13175] read to 0xffff888130455400 of 4 bytes by task 13175 on cpu 1: [ 278.553402][T13175] io_uring_poll+0xc6/0x150 [ 278.558001][T13175] io_poll_task_func+0x113/0x690 [ 278.562938][T13175] tctx_task_work+0x1b8/0x420 [ 278.567612][T13175] task_work_run+0xae/0x130 [ 278.572306][T13175] io_cqring_wait+0x208/0x7d0 [ 278.576975][T13175] __se_sys_io_uring_enter+0x5ea/0xa10 [ 278.582532][T13175] __x64_sys_io_uring_enter+0x74/0x80 [ 278.587887][T13175] do_syscall_64+0x3d/0x90 [ 278.592311][T13175] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 278.598233][T13175] [ 278.600648][T13175] value changed: 0x000014e8 -> 0x000014f4 [ 278.606545][T13175] [ 278.608981][T13175] Reported by Kernel Concurrency Sanitizer on: [ 278.615201][T13175] CPU: 1 PID: 13175 Comm: syz-executor.2 Not tainted 5.14.0-rc2-syzkaller #0 [ 278.623957][T13175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.634112][T13175] ================================================================== 08:31:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0xfcc) 08:31:06 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830520200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:06 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x200000000000000) 08:31:06 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:06 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830720200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf00000000000000) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830920200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x0) 08:31:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2832820200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x1800000000000000) 08:31:07 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x1100) 08:31:07 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_setup(0x763c, &(0x7f0000000000)={0x0, 0x3064, 0x0, 0x3, 0x2e1, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283002e200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x2000000000000000) 08:31:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283005e200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x8dffffff00000000) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283000d200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='timers\x00') 08:31:07 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xe000000000000000) 08:31:07 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283002e200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:07 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="e046385738d0b6e2f17050cf002a9fe3e2f4bbc226e39bf35204d275a8fadde37aab3905bbacaf04d57fb246d660ea69d755b5fa4e9dcdda9919e7cfdd2fd6f2ffd8ca8b450d8b0646e2d9363d42c096c630e57a2bfd2c36cec695821437e9d3554f3eb5c048236b4b4adb7e302a1588fa2daa0101000000000000f38fe3b4bded81207efe8fd987bd3b2cc76b79deb96df13c5456630d4cfb858f6dbcdd4f199a5164ba2fde0014d7f98d9251bbc07bca2b6710308dddc540dfb44b0f9a5f27d73e1c33d091ce5c7f8e57291112231b051a2af634f381203b6b98cb0c0a1291bd094e861061a5a7cd4777d447690e4ce2c07c13e8be18014070681395d0b0c385e39ce7d422637255c6d13229f280b57064ba62d52e7bfe695f75de4854fdef56f93ca9d237175aa0197b0e6850bd4158666d28006da6a35362b29ed6895507ab4064c7fcece12dfb9411b1274080915c0d3a124ae1b77be2d7c8c9c86c4d7a7589d7fc9c922ac84b411d0c219816f586b6fc7d2452ff4c5eb64f913598968cfae6f30fb0dc0ee08865739ed8aef27a1d973860531ae8a8c5dd6263e690a5be08e6732a2d526a6455ab9a9fcd36140462021416cc8d43c5b09215d8e4c221ea58fc6974edb8e258c738811f523b25c3d94c91b7d080b5466cbe699b2123cac02430e01d4b57c0dc794268f9b172694745678fcc68c569d01e821113d76b090ac0740cd35f82bfc027bfd500904bc62e260dc9d60d1545396141cff61bf720d5aff18c58278cc2778eae68f3ead53a4adae3b68c5344c3a982939d84661a042622fc9414ee873a78548299340d8fdef879802c636400"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:08 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x1200) 08:31:08 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:08 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa283005e200a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 08:31:08 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:08 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa28300200d0a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfdffffff00000000) 08:31:08 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa28300202e0a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:08 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xfeffffff00000000) 08:31:08 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa28300205e0a0000000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:08 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 08:31:08 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x2f1c, 0xcb8b, 0x1, &(0x7f0000000240)={[0xd22]}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x10) pivot_root(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='./file0\x00') syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) syz_io_uring_setup(0x3fb0, &(0x7f0000000000)={0x0, 0x40be, 0x10, 0x3, 0x2db, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f00000016c0)=""/13, 0xd}, {&(0x7f0000001700)=""/227, 0xe3}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/42, 0x2a}], 0x5, 0x9, 0x5) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x1}, 0x401) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) [ 281.198802][T13293] ================================================================== [ 281.207121][T13293] BUG: KCSAN: data-race in io_submit_sqes / io_uring_poll [ 281.214754][T13293] [ 281.217175][T13293] write to 0xffff888130bd9070 of 4 bytes by task 13296 on cpu 0: [ 281.225137][T13293] io_submit_sqes+0x7b4/0xe50 [ 281.229802][T13293] __se_sys_io_uring_enter+0x1c7/0xa10 [ 281.235328][T13293] __x64_sys_io_uring_enter+0x74/0x80 [ 281.240782][T13293] do_syscall_64+0x3d/0x90 [ 281.245186][T13293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.251081][T13293] [ 281.253385][T13293] read to 0xffff888130bd9070 of 4 bytes by task 13293 on cpu 1: [ 281.261107][T13293] io_uring_poll+0x8e/0x150 [ 281.265682][T13293] io_poll_task_func+0x113/0x690 [ 281.270773][T13293] tctx_task_work+0x1b8/0x420 [ 281.275479][T13293] task_work_run+0xae/0x130 [ 281.280174][T13293] io_cqring_wait+0x208/0x7d0 [ 281.284934][T13293] __se_sys_io_uring_enter+0x5ea/0xa10 [ 281.290514][T13293] __x64_sys_io_uring_enter+0x74/0x80 [ 281.295975][T13293] do_syscall_64+0x3d/0x90 [ 281.300479][T13293] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 281.306379][T13293] [ 281.308688][T13293] value changed: 0x00003a94 -> 0x00003ab3 [ 281.314478][T13293] [ 281.316787][T13293] Reported by Kernel Concurrency Sanitizer on: [ 281.323037][T13293] CPU: 1 PID: 13293 Comm: syz-executor.2 Not tainted 5.14.0-rc2-syzkaller #0 [ 281.332192][T13293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.342578][T13293] ================================================================== 08:31:09 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x2000) 08:31:09 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:09 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0200000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0xffffffff00000000) 08:31:09 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x7011}}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:09 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0300000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:09 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x984, &(0x7f0000000040)={0x0, 0x6d75, 0x8}, &(0x7f00001cf000/0x3000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:31:09 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0400000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:09 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="9a333ec13b9d9bf454a315a23e0f9d2b0fb0048a52bde9da8213e9072828e354856c001e20e2b661b2bc956c8943712020e69aa533623b57859bdef64770aa9c4b3fa8a407a1be490b15ae7e1d70128c4596447820c1d1527d629acf0f21a40655cdf926019eb454d3a1730444abafdb8613e578776fa87ae551", 0x7a}], 0x1) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000200)) 08:31:09 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0500000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:09 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0700000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:09 executing program 2: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x4000, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) r3 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/99, 0x63}], 0x2, 0x4, 0x69) io_uring_enter(r0, 0x38f9, 0x9b60, 0x3, &(0x7f0000000000)={[0x2]}, 0x8) io_uring_enter(r0, 0x302, 0x0, 0x3, 0x0, 0x0) 08:31:10 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="310000001e0001"], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = socket(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x2500) 08:31:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000380)={0xfffffffffffffffa, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "17ef405992b7e3"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000001380)={{r2, 0x7f, 0x6, 0x2, 0x7, 0x100, 0x3, 0x3f, 0x101, 0x25c, 0x8, 0x0, 0x400, 0xe71, 0x3}}) r3 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r7 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r7}, 0xffffff2d) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r3, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:31:10 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0900000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:10 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x82a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss, @window, @mss={0x2, 0x919f}, @timestamp, @window], 0x2000019f) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x88) sendto$inet(r0, &(0x7f0000000640)="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"/611, 0xffffffffffffff67, 0x40007bd, 0x0, 0xffffffffffffff4f) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 08:31:10 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a2800000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x2, 0x1) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x96, 0x4000, 0x1}, 0x7) 08:31:10 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0003000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:10 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200aba04000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0) 08:31:10 executing program 3: r0 = syz_io_uring_setup(0x2dc1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(r0, 0x271d, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000002040)=[{0x0}], 0x1, 0x0, 0x50}}], 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE, 0x0) io_uring_enter(r0, 0x302, 0x0, 0x0, 0x0, 0x0) 08:31:10 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800007, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = syz_io_uring_setup(0x184, &(0x7f0000000040), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet6(0xa, 0x802, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r5}, 0xffffff2d) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0) io_uring_enter(r1, 0x92c, 0x0, 0x0, 0x0, 0x0) 08:31:10 executing program 0: r0 = socket$inet(0x10, 0x2000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="240000002e0007031dfffd946fa2830020200a0005000000000000e50c1be3a20400ff7e280000005e00ffffba16a0aa1c0009b3ebea966cf0554edc7de8ddeb133c2b3ce9fad90f15a36a15", 0x4c}], 0x1}, 0x0)