0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) fcntl$dupfd(r0, 0x406, r0) (async) sendto$inet6(r1, &(0x7f0000001140)="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", 0x1000, 0x1, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "53abc9fa8415936b", "219582b283b26971be791269d170fef8", "76eb5b55", "2319f4950333ee82"}, 0x28) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, 0xd621}, 0xfffffeed) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000000140)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) shutdown(r0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)="80d9557aa3a18af7d958ad1b9423783e7e53e96bcc403411da135d3f935a7b9c1c") 20:46:36 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)="80d9557aa3a18af7d958ad1b9423783e7e53e96bcc403411da135d3f935a7b9c1c") 20:46:36 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) (async) ioctl$LOOP_CLR_FD(r5, 0x4c01) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:46:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="4107e400d28eba568e3f47c7f4ffffff"], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000003140)=@newtfilter={0x168c, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4688a7a6b5f69f12, 0x8}, {0x8}, {0x0, 0xfff5}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x11c8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x11a0, 0x6, [@m_pedit={0xee8, 0x1b, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x4, 0x6, 0xe78, 0x8}, 0x80, 0x6, [{0x77, 0x7, 0x8, 0x8000, 0x40, 0xfff}, {0x3, 0x7, 0x3, 0x1ff, 0x1, 0x8}, {0x4, 0x4, 0x80000001, 0x2, 0x2, 0x2}, {0x2, 0x2, 0x28, 0xffffbc73, 0x8, 0x7ff}, {0x400, 0x2, 0x9, 0x1, 0xfff, 0x9}, {0x1, 0x541, 0x7fff, 0x7, 0x2, 0x15a}]}, [{0xfffffffd, 0x9, 0x1000, 0x5, 0x331, 0x3}, {0x2, 0x81c, 0x5, 0x7, 0xffffcc6a, 0x4ea}, {0xffffffff, 0x2d4f, 0x2, 0x19, 0x7, 0x80000001}, {0x1, 0x1, 0x20, 0x5, 0x5d, 0x650}, {0xecd6, 0x1, 0x5, 0x80000001, 0x44b3dad1, 0x1}, {0x101, 0x9, 0x5d, 0x100, 0x81, 0xff}, {0x9, 0x4, 0x4, 0x4, 0x2, 0xfffff800}, {0xb3b, 0xfffff801, 0x7fff, 0xa022, 0x4, 0x1}, {0x3, 0x0, 0x9, 0x7, 0x4, 0xb4}, {0x0, 0xffff, 0x5, 0x0, 0x3, 0x100}, {0x4, 0x5, 0x100, 0x401, 0xcbde, 0x2}, {0x4, 0x7, 0x101, 0x4, 0x6}, {0x9, 0x0, 0x3, 0xc093, 0x3, 0xfffffffe}, {0x8, 0x0, 0x1000, 0xfffffffe, 0x7f, 0x400}, {0x80000001, 0x1, 0x9, 0x5, 0x2, 0xe8d6}, {0x1, 0x4428, 0x1, 0x1f, 0x400, 0x4000000}, {0x9, 0xf4, 0x401, 0xc3, 0x80000001, 0x2}, {0x7fff, 0x8, 0x100, 0x1, 0x80000001}, {0x80000000, 0x8, 0x1, 0x8, 0x3, 0x6}, {0x100, 0x5, 0x18, 0x1000, 0x1a}, {0x3, 0x401, 0x1f, 0x4, 0x6, 0x80000001}, {0x0, 0x4, 0x80, 0x6, 0x4, 0x101}, {0x101, 0x200, 0x1, 0x100, 0x9}, {0x0, 0x3, 0x5, 0x2, 0x3, 0xc70}, {0x1, 0x8, 0xba, 0x6b, 0x1, 0x1}, {0x1, 0x1, 0x80, 0x3, 0x7fff, 0xffff}, {0x401, 0x7, 0x7, 0x5, 0x7fffffff, 0x3c3689eb}, {0x9, 0x68, 0x80, 0x6, 0x401, 0x10000}, {0x4, 0x7, 0x101, 0x5, 0x6, 0x8}, {0x6, 0xff, 0xffffffff, 0xb0, 0x5, 0x800}, {0x9, 0x0, 0x200, 0x4, 0x3, 0x101}, {0x3ff, 0x631411ad, 0x7, 0x3, 0x42, 0x6}, {0xffffff80, 0x8, 0x23, 0x3, 0x0, 0x6}, {0x4, 0xff, 0x401, 0x0, 0xa1c, 0xfffffffc}, {0x7, 0x3, 0x7f, 0x4, 0x7, 0x4}, {0x1, 0x84800000, 0x84, 0x5, 0x1, 0x2}, {0x8, 0x81, 0x8, 0x1f, 0x3, 0x3f}, {0x4, 0x80000000, 0x10000, 0x7, 0xf44, 0x9}, {0xffffffff, 0x26fc, 0x8, 0x5, 0x7, 0xffff}, {0x337, 0x9, 0x6, 0x7aa880f0, 0xff, 0x7}, {0x8, 0x9, 0xffffffce, 0x2, 0x3f, 0x6}, {0x6, 0xc4, 0x6, 0x6, 0x5, 0xf4}, {0xfffff800, 0x1, 0x9, 0x7ff, 0x95, 0x400}, {0x9, 0x0, 0x4, 0x8, 0x1ea, 0x8}, {0x1, 0x7, 0x87a, 0x2, 0x1, 0xc18}, {0x3, 0x88, 0xfff, 0x17600000, 0x5, 0xc9}, {0x6, 0x4, 0x4, 0x525, 0x7, 0xff800000}, {0x7, 0xcc, 0x94, 0x5, 0x0, 0x200}, {0x4, 0x5, 0x0, 0x10001, 0x5}, {0x7, 0x2, 0x80000000, 0x3, 0x0, 0x7}, {0x6, 0x7ff, 0x1, 0x2, 0x8, 0xffff0001}, {0x101, 0xad6, 0x0, 0xffffffe0, 0x20, 0xab}, {0xa5ff, 0x2, 0x3, 0x3, 0x2000, 0x9619}, {0x3f, 0x9, 0x1, 0x0, 0x8, 0x1}, {0x2, 0x10000, 0x3, 0x8000, 0x5, 0x1}, {0x5e, 0x9, 0x2, 0x9ffa, 0xdc, 0x7}, {0x1, 0x0, 0x1f8, 0x7, 0x7, 0x4d8}, {0x4000000, 0x7, 0xebbb, 0x80, 0x81a, 0x25ab}, {0x3, 0x5, 0x2, 0x4, 0x8, 0x7}, {0x5, 0x6, 0x7, 0x1, 0x1, 0x2f9}, {0x2, 0x7, 0x6, 0x7, 0x1, 0x3}, {0x4, 0xfff, 0x101, 0x5, 0x10000}, {0xfde, 0x1, 0x0, 0x7f, 0x3}, {0xff, 0x590f, 0x6, 0x1, 0x0, 0xff}, {0x10001, 0x5, 0x8, 0x5, 0x512, 0x1000}, {0x1, 0xfffffffe, 0xffffffe1, 0x8, 0x80000000, 0x7553}, {0x7f, 0x0, 0x8, 0x1, 0x3, 0x12ca}, {0x4, 0x8001, 0x80, 0x2636, 0x8000, 0x902}, {0x8, 0x1, 0x800, 0xfffffffc, 0x200, 0x40}, {0x5, 0xd3, 0x8, 0xfff, 0x4, 0x4}, {0xa0, 0x4, 0x2, 0x7, 0x6, 0x5}, {0x55, 0x7, 0x1000, 0x1ff, 0x7, 0xfffffff9}, {0x1, 0xfff, 0x7, 0x800, 0xfffffffd, 0x80000000}, {0x5, 0x1, 0x101, 0x7, 0x7}, {0x7, 0x200, 0xab, 0x8, 0x5, 0x1}, {0x7, 0x80000000, 0x200, 0x9ab6e109, 0x8000, 0x4}, {0x1, 0x1, 0x1, 0x5, 0x9, 0x6}, {0x4, 0xffff4c3d, 0x6, 0x1000, 0x2b1, 0xd6}, {0x5, 0x11, 0x8, 0x1ff, 0x3f, 0x80000000}, {0x91e, 0x1ff, 0x58f6, 0xc425, 0x7, 0x9}, {0x1000, 0x101, 0x4, 0xb, 0x80000000, 0xcc}, {0x9, 0x0, 0xb858, 0x9, 0x3, 0x1000}, {0x4, 0x5, 0x8001, 0x1ff, 0x0, 0xfa5f}, {0x8, 0x9c0, 0xfff, 0x4, 0x40, 0x9}, {0x8, 0x7, 0x401, 0x5, 0xfff, 0x1}, {0x6, 0x4, 0x6, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x1, 0x1f000000, 0x40ed4647, 0x3}, {0x5, 0x9f7, 0x7, 0x8, 0x80, 0x46f}, {0x4, 0x6, 0x100, 0x3, 0x5, 0xa2b5}, {0x40, 0xc8b7, 0x1f, 0x0, 0x7f, 0x3ff}, {0x7fffffff, 0x0, 0x5, 0x5, 0x3, 0x2}, {0xfff, 0x3, 0x100, 0xb2b, 0xfee1}, {0x9d, 0x1c000, 0xa33, 0x0, 0x0, 0x1ff}, {0x3, 0xd01, 0x2, 0xfffff000, 0x77, 0x2}, {0x81, 0x0, 0x5, 0x3, 0x6, 0x400}, {0x7, 0x4, 0xffffffff, 0x8, 0x8, 0x6}, {0x2, 0xffff, 0x1, 0x29, 0x80000001, 0x3}, {0x26, 0x93412a9, 0x387a, 0x10000, 0x6, 0x2}, {0x7, 0x2, 0x800, 0x2, 0x5e55, 0x3}, {0x8b, 0x5, 0x800, 0x0, 0x0, 0x3ff}, {0x9, 0x92ea, 0x5, 0x1, 0x400}, {0x3, 0x0, 0x3f, 0xfffffff8, 0x2, 0x7}, {0x9, 0x6, 0x1f, 0x6, 0x80000000, 0x40}, {0x3, 0x3, 0xcf50, 0x20, 0x7ff, 0x6}, {0x1, 0xfff, 0x4, 0xb3, 0x2870, 0x10001}, {0xfff, 0x8000, 0x10001, 0x9, 0x7, 0xda9}, {0x9, 0x3ff, 0xfffffff9, 0xffffffff, 0x10001, 0x6}, {0x6, 0xffff, 0x1, 0xa99, 0x5, 0x10000}, {0x4, 0x80, 0x52333868, 0x7fff, 0x1ff}, {0x10001, 0xa93, 0xe941, 0x3be, 0x4, 0x1}, {0xe30, 0x1, 0x1, 0x8, 0x4, 0x4}, {0x18bc, 0xa9, 0x3, 0x0, 0x1, 0x40}, {0x838, 0x80000001, 0x9, 0xfffffffa, 0x20, 0xda}, {0x4, 0x3, 0xf3fa, 0x9, 0x0, 0x3}, {0x7fffffff, 0xffffffff, 0x8000, 0x80000001, 0xd41, 0x2}, {0x3c62c446, 0xffffffff, 0x9, 0xfd75, 0x4c00c44c, 0x1}, {0x3, 0x0, 0x7, 0x5, 0x7, 0x80000000}, {0x7f, 0x180000, 0x800, 0xfff, 0x7ff, 0x6}, {0xb8, 0x409, 0xfffffffe, 0x1, 0x2, 0x97d}, {0x7a, 0x0, 0x59fcb4ce, 0x9, 0x7, 0x400}, {0x9, 0x2, 0x8, 0x3, 0x2, 0x3f}, {0x2, 0x9, 0x401, 0x200, 0x10001, 0x80}, {0x3, 0xd0, 0x5, 0xfffffff9, 0x6, 0x84f}, {0x6, 0x7, 0x20, 0x91, 0x1, 0x80000001}, {0x1, 0x101, 0x401, 0x9, 0x1000, 0x21fc0ad4}, {0x5, 0x145, 0x9, 0x1, 0x4, 0x1}, {0xfffffff9, 0x6, 0x3f, 0x80000001, 0x3, 0x9}, {0x80, 0x4, 0x1, 0x3, 0x9, 0xfab7}], [{0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x57000b4889a3b156}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x5}, {0x2}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x982e2fdb3948f2fd, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}]}}]}, {0xc, 0x6, "5186f123d8ebc6f9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x198, 0x17, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="d8f944e4e98e"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0xd3, 0x20000000, 0x3, 0xfffffffe}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x4, 0x6, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x8, 0xffff, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd5cd, 0x7fffffff, 0x0, 0x2, 0xe566}, 0x1}}]}, {0x73, 0x6, "55ea316f9962773d1ee6bd6a05ad10c5b067a21f25f382daf2a660168496d9c3256da90c463df581dc98bb830681a8fc74f08dad874e41095923111bbb979d6ce6af4d8286bd2f5824022a1d2bfe93f6e648830888929dd918bd63f38d849cc05e2fae4d1a1955e26bb2f0fd3a83c5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x9}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x1, 0x87, 0x10000}, {0x5d9, 0x80, 0x0, 0x40}, {0x1ff, 0x1f, 0x8, 0x7fffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x428, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x932, 0xfffffffa, 0x5551, 0xef, 0x0, 0x200, 0x6d1, 0xfffffffb, 0xf0000000, 0x3f, 0xffffff7f, 0x9, 0x20, 0xadc, 0x1, 0x760, 0x1ff, 0x0, 0x3, 0x0, 0x6, 0x4, 0x6, 0x81, 0xf9, 0x200, 0x9, 0x100, 0x0, 0xfff, 0x8, 0x80, 0x401, 0x529d, 0x3, 0xd3, 0x6, 0x10001, 0xbb, 0xccb, 0x6, 0x1, 0x10001, 0x6b1, 0x6, 0x101, 0xff, 0x9, 0x3, 0x200, 0x80000000, 0x9, 0x5, 0xfffffffc, 0x80, 0x519, 0x815, 0xffff6971, 0x0, 0xfffffff8, 0x31, 0x401, 0x9, 0xfffffff7, 0x7ff, 0xffffffff, 0x1, 0xe86, 0x0, 0x3, 0xd180000, 0x3, 0x3ff, 0x8, 0x100, 0x2, 0x8, 0x46a, 0x1, 0x3, 0x7, 0x1, 0xe21, 0x8, 0x6, 0x0, 0x401, 0x779d, 0x2, 0x81, 0x1000, 0x3, 0x6, 0x6, 0xf0, 0x8, 0x9, 0x2, 0x1, 0xe0000000, 0x7fff, 0x6, 0x7fffffff, 0xff, 0x2, 0x2, 0x80, 0x6, 0x3, 0x20, 0x7f, 0x3, 0x6, 0x4, 0x495, 0x3, 0x4, 0x8, 0xc7b9, 0x20, 0x1f, 0x7, 0x1f, 0x2, 0x1ff, 0x7, 0x1, 0x2, 0x1200, 0xf5d3, 0x7, 0x5, 0x4, 0x5, 0x8, 0x7, 0x3f, 0x4, 0xa1, 0xffffffff, 0x2, 0x5, 0x3, 0x1, 0x14da0998, 0x0, 0x4, 0x2, 0x7f, 0x7c, 0x4, 0x8, 0x8, 0x81, 0x1b6, 0x5, 0x7, 0x401, 0x8, 0x235, 0x9, 0x81, 0xa0d, 0x97d, 0x6, 0x6, 0x6, 0xcb6f, 0x3f, 0x8, 0x67, 0x40, 0x2, 0x1, 0x1, 0xfffffffd, 0xfff, 0x9, 0x1, 0x80000001, 0x5, 0x2, 0xffffff80, 0x3, 0x2, 0x200, 0x6, 0x0, 0x5, 0x9, 0x216e, 0x7f, 0x100, 0x81, 0x5, 0x100, 0x1ff, 0x20, 0x3, 0x7fffffff, 0x100, 0x1cc5, 0x7fff, 0xeb, 0x1, 0x5, 0x6a, 0x0, 0x3, 0x8, 0x3663, 0x81, 0x6, 0x2df, 0x68000000, 0x60, 0x2, 0x8001, 0x0, 0x5, 0x8001, 0x5, 0x6, 0x0, 0x8417, 0x101, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0xfffffffa, 0x0, 0x401, 0xfffffffb, 0xffffffff, 0x8, 0x6, 0x2, 0x80000001, 0x1f, 0xffffffff, 0x800, 0x6, 0x0, 0x2, 0x9, 0x5, 0x6efdedd4, 0x1, 0x1, 0x81, 0x6, 0x200, 0x8, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x55}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1c9300000000}]}]}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x4044044}, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x8, 0x80010, 0xffffffffffffffff, 0x49e7c000) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18114, @rand_addr, 0x400983a}, 0x1c) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x11, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x801a0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r4, 0x0, 0x8000002b) dup(r1) 20:46:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0xa76}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000006940)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1, &(0x7f0000000380)=""/130, 0x82}, 0x4fd6d1eb}, {{&(0x7f0000000440)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/87, 0x57}], 0x5, &(0x7f0000000580)}, 0x4}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/119, 0x77}], 0x1, &(0x7f0000000700)=""/139, 0x8b}, 0xb1f7}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/178, 0xb2}, {&(0x7f0000000880)=""/37, 0x25}, {&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/71, 0x47}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x8, &(0x7f0000000fc0)=""/137, 0x89}, 0x9}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005140)=""/218, 0xda}, {&(0x7f0000005240)=""/228, 0xe4}, {&(0x7f0000001080)=""/73, 0x49}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/98, 0x62}, {&(0x7f0000005480)=""/92, 0x5c}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/71, 0x47}], 0x8, &(0x7f00000065c0)=""/125, 0x7d}, 0x4}, {{&(0x7f0000006640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)=""/193, 0xc1}], 0x1}, 0x8001}], 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000006a00)="f57ccc3bda5a2217170bec11bbe7c7d92bb844b3b359124d12b7445798d3e5da5c7203fce5c8a1b6686ffe4f07a91c740ca18d79f3ed4e6e2a4cdbacdbf1fa7e6f9a997be68422129f2d4ff6cec3a09fc2f24d22f6079803adb3c54c22c249cb936936bb0be19111bd097299bcd2e475b4f23c2436f1e7d9cdade1f85b74a48d31a5368cfd6bcf45f0b780aad3ea558a5d702b75bd906d94b6fd519a43b7c5493e180951f2510b23c83d2f06f53f9c3caf4d2c107bb4a6334762c34f430458c50961ecdf27b6f3625b293c30fe918b27e6ff4a", 0xd3, 0x8000, &(0x7f0000000580)={0xa, 0x4e21, 0xb3ad, @loopback, 0x2}, 0x1c) 20:46:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="4107e400d28eba568e3f47c7f4ffffff"], 0x1c}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000003140)=@newtfilter={0x168c, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4688a7a6b5f69f12, 0x8}, {0x8}, {0x0, 0xfff5}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x11c8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x11a0, 0x6, [@m_pedit={0xee8, 0x1b, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x4, 0x6, 0xe78, 0x8}, 0x80, 0x6, [{0x77, 0x7, 0x8, 0x8000, 0x40, 0xfff}, {0x3, 0x7, 0x3, 0x1ff, 0x1, 0x8}, {0x4, 0x4, 0x80000001, 0x2, 0x2, 0x2}, {0x2, 0x2, 0x28, 0xffffbc73, 0x8, 0x7ff}, {0x400, 0x2, 0x9, 0x1, 0xfff, 0x9}, {0x1, 0x541, 0x7fff, 0x7, 0x2, 0x15a}]}, [{0xfffffffd, 0x9, 0x1000, 0x5, 0x331, 0x3}, {0x2, 0x81c, 0x5, 0x7, 0xffffcc6a, 0x4ea}, {0xffffffff, 0x2d4f, 0x2, 0x19, 0x7, 0x80000001}, {0x1, 0x1, 0x20, 0x5, 0x5d, 0x650}, {0xecd6, 0x1, 0x5, 0x80000001, 0x44b3dad1, 0x1}, {0x101, 0x9, 0x5d, 0x100, 0x81, 0xff}, {0x9, 0x4, 0x4, 0x4, 0x2, 0xfffff800}, {0xb3b, 0xfffff801, 0x7fff, 0xa022, 0x4, 0x1}, {0x3, 0x0, 0x9, 0x7, 0x4, 0xb4}, {0x0, 0xffff, 0x5, 0x0, 0x3, 0x100}, {0x4, 0x5, 0x100, 0x401, 0xcbde, 0x2}, {0x4, 0x7, 0x101, 0x4, 0x6}, {0x9, 0x0, 0x3, 0xc093, 0x3, 0xfffffffe}, {0x8, 0x0, 0x1000, 0xfffffffe, 0x7f, 0x400}, {0x80000001, 0x1, 0x9, 0x5, 0x2, 0xe8d6}, {0x1, 0x4428, 0x1, 0x1f, 0x400, 0x4000000}, {0x9, 0xf4, 0x401, 0xc3, 0x80000001, 0x2}, {0x7fff, 0x8, 0x100, 0x1, 0x80000001}, {0x80000000, 0x8, 0x1, 0x8, 0x3, 0x6}, {0x100, 0x5, 0x18, 0x1000, 0x1a}, {0x3, 0x401, 0x1f, 0x4, 0x6, 0x80000001}, {0x0, 0x4, 0x80, 0x6, 0x4, 0x101}, {0x101, 0x200, 0x1, 0x100, 0x9}, {0x0, 0x3, 0x5, 0x2, 0x3, 0xc70}, {0x1, 0x8, 0xba, 0x6b, 0x1, 0x1}, {0x1, 0x1, 0x80, 0x3, 0x7fff, 0xffff}, {0x401, 0x7, 0x7, 0x5, 0x7fffffff, 0x3c3689eb}, {0x9, 0x68, 0x80, 0x6, 0x401, 0x10000}, {0x4, 0x7, 0x101, 0x5, 0x6, 0x8}, {0x6, 0xff, 0xffffffff, 0xb0, 0x5, 0x800}, {0x9, 0x0, 0x200, 0x4, 0x3, 0x101}, {0x3ff, 0x631411ad, 0x7, 0x3, 0x42, 0x6}, {0xffffff80, 0x8, 0x23, 0x3, 0x0, 0x6}, {0x4, 0xff, 0x401, 0x0, 0xa1c, 0xfffffffc}, {0x7, 0x3, 0x7f, 0x4, 0x7, 0x4}, {0x1, 0x84800000, 0x84, 0x5, 0x1, 0x2}, {0x8, 0x81, 0x8, 0x1f, 0x3, 0x3f}, {0x4, 0x80000000, 0x10000, 0x7, 0xf44, 0x9}, {0xffffffff, 0x26fc, 0x8, 0x5, 0x7, 0xffff}, {0x337, 0x9, 0x6, 0x7aa880f0, 0xff, 0x7}, {0x8, 0x9, 0xffffffce, 0x2, 0x3f, 0x6}, {0x6, 0xc4, 0x6, 0x6, 0x5, 0xf4}, {0xfffff800, 0x1, 0x9, 0x7ff, 0x95, 0x400}, {0x9, 0x0, 0x4, 0x8, 0x1ea, 0x8}, {0x1, 0x7, 0x87a, 0x2, 0x1, 0xc18}, {0x3, 0x88, 0xfff, 0x17600000, 0x5, 0xc9}, {0x6, 0x4, 0x4, 0x525, 0x7, 0xff800000}, {0x7, 0xcc, 0x94, 0x5, 0x0, 0x200}, {0x4, 0x5, 0x0, 0x10001, 0x5}, {0x7, 0x2, 0x80000000, 0x3, 0x0, 0x7}, {0x6, 0x7ff, 0x1, 0x2, 0x8, 0xffff0001}, {0x101, 0xad6, 0x0, 0xffffffe0, 0x20, 0xab}, {0xa5ff, 0x2, 0x3, 0x3, 0x2000, 0x9619}, {0x3f, 0x9, 0x1, 0x0, 0x8, 0x1}, {0x2, 0x10000, 0x3, 0x8000, 0x5, 0x1}, {0x5e, 0x9, 0x2, 0x9ffa, 0xdc, 0x7}, {0x1, 0x0, 0x1f8, 0x7, 0x7, 0x4d8}, {0x4000000, 0x7, 0xebbb, 0x80, 0x81a, 0x25ab}, {0x3, 0x5, 0x2, 0x4, 0x8, 0x7}, {0x5, 0x6, 0x7, 0x1, 0x1, 0x2f9}, {0x2, 0x7, 0x6, 0x7, 0x1, 0x3}, {0x4, 0xfff, 0x101, 0x5, 0x10000}, {0xfde, 0x1, 0x0, 0x7f, 0x3}, {0xff, 0x590f, 0x6, 0x1, 0x0, 0xff}, {0x10001, 0x5, 0x8, 0x5, 0x512, 0x1000}, {0x1, 0xfffffffe, 0xffffffe1, 0x8, 0x80000000, 0x7553}, {0x7f, 0x0, 0x8, 0x1, 0x3, 0x12ca}, {0x4, 0x8001, 0x80, 0x2636, 0x8000, 0x902}, {0x8, 0x1, 0x800, 0xfffffffc, 0x200, 0x40}, {0x5, 0xd3, 0x8, 0xfff, 0x4, 0x4}, {0xa0, 0x4, 0x2, 0x7, 0x6, 0x5}, {0x55, 0x7, 0x1000, 0x1ff, 0x7, 0xfffffff9}, {0x1, 0xfff, 0x7, 0x800, 0xfffffffd, 0x80000000}, {0x5, 0x1, 0x101, 0x7, 0x7}, {0x7, 0x200, 0xab, 0x8, 0x5, 0x1}, {0x7, 0x80000000, 0x200, 0x9ab6e109, 0x8000, 0x4}, {0x1, 0x1, 0x1, 0x5, 0x9, 0x6}, {0x4, 0xffff4c3d, 0x6, 0x1000, 0x2b1, 0xd6}, {0x5, 0x11, 0x8, 0x1ff, 0x3f, 0x80000000}, {0x91e, 0x1ff, 0x58f6, 0xc425, 0x7, 0x9}, {0x1000, 0x101, 0x4, 0xb, 0x80000000, 0xcc}, {0x9, 0x0, 0xb858, 0x9, 0x3, 0x1000}, {0x4, 0x5, 0x8001, 0x1ff, 0x0, 0xfa5f}, {0x8, 0x9c0, 0xfff, 0x4, 0x40, 0x9}, {0x8, 0x7, 0x401, 0x5, 0xfff, 0x1}, {0x6, 0x4, 0x6, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x1, 0x1f000000, 0x40ed4647, 0x3}, {0x5, 0x9f7, 0x7, 0x8, 0x80, 0x46f}, {0x4, 0x6, 0x100, 0x3, 0x5, 0xa2b5}, {0x40, 0xc8b7, 0x1f, 0x0, 0x7f, 0x3ff}, {0x7fffffff, 0x0, 0x5, 0x5, 0x3, 0x2}, {0xfff, 0x3, 0x100, 0xb2b, 0xfee1}, {0x9d, 0x1c000, 0xa33, 0x0, 0x0, 0x1ff}, {0x3, 0xd01, 0x2, 0xfffff000, 0x77, 0x2}, {0x81, 0x0, 0x5, 0x3, 0x6, 0x400}, {0x7, 0x4, 0xffffffff, 0x8, 0x8, 0x6}, {0x2, 0xffff, 0x1, 0x29, 0x80000001, 0x3}, {0x26, 0x93412a9, 0x387a, 0x10000, 0x6, 0x2}, {0x7, 0x2, 0x800, 0x2, 0x5e55, 0x3}, {0x8b, 0x5, 0x800, 0x0, 0x0, 0x3ff}, {0x9, 0x92ea, 0x5, 0x1, 0x400}, {0x3, 0x0, 0x3f, 0xfffffff8, 0x2, 0x7}, {0x9, 0x6, 0x1f, 0x6, 0x80000000, 0x40}, {0x3, 0x3, 0xcf50, 0x20, 0x7ff, 0x6}, {0x1, 0xfff, 0x4, 0xb3, 0x2870, 0x10001}, {0xfff, 0x8000, 0x10001, 0x9, 0x7, 0xda9}, {0x9, 0x3ff, 0xfffffff9, 0xffffffff, 0x10001, 0x6}, {0x6, 0xffff, 0x1, 0xa99, 0x5, 0x10000}, {0x4, 0x80, 0x52333868, 0x7fff, 0x1ff}, {0x10001, 0xa93, 0xe941, 0x3be, 0x4, 0x1}, {0xe30, 0x1, 0x1, 0x8, 0x4, 0x4}, {0x18bc, 0xa9, 0x3, 0x0, 0x1, 0x40}, {0x838, 0x80000001, 0x9, 0xfffffffa, 0x20, 0xda}, {0x4, 0x3, 0xf3fa, 0x9, 0x0, 0x3}, {0x7fffffff, 0xffffffff, 0x8000, 0x80000001, 0xd41, 0x2}, {0x3c62c446, 0xffffffff, 0x9, 0xfd75, 0x4c00c44c, 0x1}, {0x3, 0x0, 0x7, 0x5, 0x7, 0x80000000}, {0x7f, 0x180000, 0x800, 0xfff, 0x7ff, 0x6}, {0xb8, 0x409, 0xfffffffe, 0x1, 0x2, 0x97d}, {0x7a, 0x0, 0x59fcb4ce, 0x9, 0x7, 0x400}, {0x9, 0x2, 0x8, 0x3, 0x2, 0x3f}, {0x2, 0x9, 0x401, 0x200, 0x10001, 0x80}, {0x3, 0xd0, 0x5, 0xfffffff9, 0x6, 0x84f}, {0x6, 0x7, 0x20, 0x91, 0x1, 0x80000001}, {0x1, 0x101, 0x401, 0x9, 0x1000, 0x21fc0ad4}, {0x5, 0x145, 0x9, 0x1, 0x4, 0x1}, {0xfffffff9, 0x6, 0x3f, 0x80000001, 0x3, 0x9}, {0x80, 0x4, 0x1, 0x3, 0x9, 0xfab7}], [{0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x57000b4889a3b156}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x5}, {0x2}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x982e2fdb3948f2fd, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}]}}]}, {0xc, 0x6, "5186f123d8ebc6f9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x198, 0x17, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="d8f944e4e98e"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0xd3, 0x20000000, 0x3, 0xfffffffe}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x100, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x4, 0x6, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x8, 0xffff, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd5cd, 0x7fffffff, 0x0, 0x2, 0xe566}, 0x1}}]}, {0x73, 0x6, "55ea316f9962773d1ee6bd6a05ad10c5b067a21f25f382daf2a660168496d9c3256da90c463df581dc98bb830681a8fc74f08dad874e41095923111bbb979d6ce6af4d8286bd2f5824022a1d2bfe93f6e648830888929dd918bd63f38d849cc05e2fae4d1a1955e26bb2f0fd3a83c5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x9}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x1, 0x87, 0x10000}, {0x5d9, 0x80, 0x0, 0x40}, {0x1ff, 0x1f, 0x8, 0x7fffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x428, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x932, 0xfffffffa, 0x5551, 0xef, 0x0, 0x200, 0x6d1, 0xfffffffb, 0xf0000000, 0x3f, 0xffffff7f, 0x9, 0x20, 0xadc, 0x1, 0x760, 0x1ff, 0x0, 0x3, 0x0, 0x6, 0x4, 0x6, 0x81, 0xf9, 0x200, 0x9, 0x100, 0x0, 0xfff, 0x8, 0x80, 0x401, 0x529d, 0x3, 0xd3, 0x6, 0x10001, 0xbb, 0xccb, 0x6, 0x1, 0x10001, 0x6b1, 0x6, 0x101, 0xff, 0x9, 0x3, 0x200, 0x80000000, 0x9, 0x5, 0xfffffffc, 0x80, 0x519, 0x815, 0xffff6971, 0x0, 0xfffffff8, 0x31, 0x401, 0x9, 0xfffffff7, 0x7ff, 0xffffffff, 0x1, 0xe86, 0x0, 0x3, 0xd180000, 0x3, 0x3ff, 0x8, 0x100, 0x2, 0x8, 0x46a, 0x1, 0x3, 0x7, 0x1, 0xe21, 0x8, 0x6, 0x0, 0x401, 0x779d, 0x2, 0x81, 0x1000, 0x3, 0x6, 0x6, 0xf0, 0x8, 0x9, 0x2, 0x1, 0xe0000000, 0x7fff, 0x6, 0x7fffffff, 0xff, 0x2, 0x2, 0x80, 0x6, 0x3, 0x20, 0x7f, 0x3, 0x6, 0x4, 0x495, 0x3, 0x4, 0x8, 0xc7b9, 0x20, 0x1f, 0x7, 0x1f, 0x2, 0x1ff, 0x7, 0x1, 0x2, 0x1200, 0xf5d3, 0x7, 0x5, 0x4, 0x5, 0x8, 0x7, 0x3f, 0x4, 0xa1, 0xffffffff, 0x2, 0x5, 0x3, 0x1, 0x14da0998, 0x0, 0x4, 0x2, 0x7f, 0x7c, 0x4, 0x8, 0x8, 0x81, 0x1b6, 0x5, 0x7, 0x401, 0x8, 0x235, 0x9, 0x81, 0xa0d, 0x97d, 0x6, 0x6, 0x6, 0xcb6f, 0x3f, 0x8, 0x67, 0x40, 0x2, 0x1, 0x1, 0xfffffffd, 0xfff, 0x9, 0x1, 0x80000001, 0x5, 0x2, 0xffffff80, 0x3, 0x2, 0x200, 0x6, 0x0, 0x5, 0x9, 0x216e, 0x7f, 0x100, 0x81, 0x5, 0x100, 0x1ff, 0x20, 0x3, 0x7fffffff, 0x100, 0x1cc5, 0x7fff, 0xeb, 0x1, 0x5, 0x6a, 0x0, 0x3, 0x8, 0x3663, 0x81, 0x6, 0x2df, 0x68000000, 0x60, 0x2, 0x8001, 0x0, 0x5, 0x8001, 0x5, 0x6, 0x0, 0x8417, 0x101, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0xfffffffa, 0x0, 0x401, 0xfffffffb, 0xffffffff, 0x8, 0x6, 0x2, 0x80000001, 0x1f, 0xffffffff, 0x800, 0x6, 0x0, 0x2, 0x9, 0x5, 0x6efdedd4, 0x1, 0x1, 0x81, 0x6, 0x200, 0x8, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x55}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1c9300000000}]}]}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x4044044}, 0x84) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x8, 0x80010, 0xffffffffffffffff, 0x49e7c000) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18114, @rand_addr, 0x400983a}, 0x1c) (async, rerun: 32) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:36 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)="80d9557aa3a18af7d958ad1b9423783e7e53e96bcc403411da135d3f935a7b9c1c") 20:46:36 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x11, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x801a0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r4, 0x0, 0x8000002b) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x11, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) openat(r3, &(0x7f0000000000)='./file0\x00', 0x801a0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) dup(r1) (async) 20:46:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000001c0)=""/172, 0xba}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f0000003140)=""/4096, 0x1000}], 0xe, &(0x7f0000000880)=""/90, 0x66}}, {{0x0, 0xfffffef3, 0x0}}], 0x3, 0x0, 0x0) 20:46:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="4107e400d28eba568e3f47c7f4ffffff"], 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000003140)=@newtfilter={0x168c, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4688a7a6b5f69f12, 0x8}, {0x8}, {0x0, 0xfff5}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x11c8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x11a0, 0x6, [@m_pedit={0xee8, 0x1b, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x4, 0x6, 0xe78, 0x8}, 0x80, 0x6, [{0x77, 0x7, 0x8, 0x8000, 0x40, 0xfff}, {0x3, 0x7, 0x3, 0x1ff, 0x1, 0x8}, {0x4, 0x4, 0x80000001, 0x2, 0x2, 0x2}, {0x2, 0x2, 0x28, 0xffffbc73, 0x8, 0x7ff}, {0x400, 0x2, 0x9, 0x1, 0xfff, 0x9}, {0x1, 0x541, 0x7fff, 0x7, 0x2, 0x15a}]}, [{0xfffffffd, 0x9, 0x1000, 0x5, 0x331, 0x3}, {0x2, 0x81c, 0x5, 0x7, 0xffffcc6a, 0x4ea}, {0xffffffff, 0x2d4f, 0x2, 0x19, 0x7, 0x80000001}, {0x1, 0x1, 0x20, 0x5, 0x5d, 0x650}, {0xecd6, 0x1, 0x5, 0x80000001, 0x44b3dad1, 0x1}, {0x101, 0x9, 0x5d, 0x100, 0x81, 0xff}, {0x9, 0x4, 0x4, 0x4, 0x2, 0xfffff800}, {0xb3b, 0xfffff801, 0x7fff, 0xa022, 0x4, 0x1}, {0x3, 0x0, 0x9, 0x7, 0x4, 0xb4}, {0x0, 0xffff, 0x5, 0x0, 0x3, 0x100}, {0x4, 0x5, 0x100, 0x401, 0xcbde, 0x2}, {0x4, 0x7, 0x101, 0x4, 0x6}, {0x9, 0x0, 0x3, 0xc093, 0x3, 0xfffffffe}, {0x8, 0x0, 0x1000, 0xfffffffe, 0x7f, 0x400}, {0x80000001, 0x1, 0x9, 0x5, 0x2, 0xe8d6}, {0x1, 0x4428, 0x1, 0x1f, 0x400, 0x4000000}, {0x9, 0xf4, 0x401, 0xc3, 0x80000001, 0x2}, {0x7fff, 0x8, 0x100, 0x1, 0x80000001}, {0x80000000, 0x8, 0x1, 0x8, 0x3, 0x6}, {0x100, 0x5, 0x18, 0x1000, 0x1a}, {0x3, 0x401, 0x1f, 0x4, 0x6, 0x80000001}, {0x0, 0x4, 0x80, 0x6, 0x4, 0x101}, {0x101, 0x200, 0x1, 0x100, 0x9}, {0x0, 0x3, 0x5, 0x2, 0x3, 0xc70}, {0x1, 0x8, 0xba, 0x6b, 0x1, 0x1}, {0x1, 0x1, 0x80, 0x3, 0x7fff, 0xffff}, {0x401, 0x7, 0x7, 0x5, 0x7fffffff, 0x3c3689eb}, {0x9, 0x68, 0x80, 0x6, 0x401, 0x10000}, {0x4, 0x7, 0x101, 0x5, 0x6, 0x8}, {0x6, 0xff, 0xffffffff, 0xb0, 0x5, 0x800}, {0x9, 0x0, 0x200, 0x4, 0x3, 0x101}, {0x3ff, 0x631411ad, 0x7, 0x3, 0x42, 0x6}, {0xffffff80, 0x8, 0x23, 0x3, 0x0, 0x6}, {0x4, 0xff, 0x401, 0x0, 0xa1c, 0xfffffffc}, {0x7, 0x3, 0x7f, 0x4, 0x7, 0x4}, {0x1, 0x84800000, 0x84, 0x5, 0x1, 0x2}, {0x8, 0x81, 0x8, 0x1f, 0x3, 0x3f}, {0x4, 0x80000000, 0x10000, 0x7, 0xf44, 0x9}, {0xffffffff, 0x26fc, 0x8, 0x5, 0x7, 0xffff}, {0x337, 0x9, 0x6, 0x7aa880f0, 0xff, 0x7}, {0x8, 0x9, 0xffffffce, 0x2, 0x3f, 0x6}, {0x6, 0xc4, 0x6, 0x6, 0x5, 0xf4}, {0xfffff800, 0x1, 0x9, 0x7ff, 0x95, 0x400}, {0x9, 0x0, 0x4, 0x8, 0x1ea, 0x8}, {0x1, 0x7, 0x87a, 0x2, 0x1, 0xc18}, {0x3, 0x88, 0xfff, 0x17600000, 0x5, 0xc9}, {0x6, 0x4, 0x4, 0x525, 0x7, 0xff800000}, {0x7, 0xcc, 0x94, 0x5, 0x0, 0x200}, {0x4, 0x5, 0x0, 0x10001, 0x5}, {0x7, 0x2, 0x80000000, 0x3, 0x0, 0x7}, {0x6, 0x7ff, 0x1, 0x2, 0x8, 0xffff0001}, {0x101, 0xad6, 0x0, 0xffffffe0, 0x20, 0xab}, {0xa5ff, 0x2, 0x3, 0x3, 0x2000, 0x9619}, {0x3f, 0x9, 0x1, 0x0, 0x8, 0x1}, {0x2, 0x10000, 0x3, 0x8000, 0x5, 0x1}, {0x5e, 0x9, 0x2, 0x9ffa, 0xdc, 0x7}, {0x1, 0x0, 0x1f8, 0x7, 0x7, 0x4d8}, {0x4000000, 0x7, 0xebbb, 0x80, 0x81a, 0x25ab}, {0x3, 0x5, 0x2, 0x4, 0x8, 0x7}, {0x5, 0x6, 0x7, 0x1, 0x1, 0x2f9}, {0x2, 0x7, 0x6, 0x7, 0x1, 0x3}, {0x4, 0xfff, 0x101, 0x5, 0x10000}, {0xfde, 0x1, 0x0, 0x7f, 0x3}, {0xff, 0x590f, 0x6, 0x1, 0x0, 0xff}, {0x10001, 0x5, 0x8, 0x5, 0x512, 0x1000}, {0x1, 0xfffffffe, 0xffffffe1, 0x8, 0x80000000, 0x7553}, {0x7f, 0x0, 0x8, 0x1, 0x3, 0x12ca}, {0x4, 0x8001, 0x80, 0x2636, 0x8000, 0x902}, {0x8, 0x1, 0x800, 0xfffffffc, 0x200, 0x40}, {0x5, 0xd3, 0x8, 0xfff, 0x4, 0x4}, {0xa0, 0x4, 0x2, 0x7, 0x6, 0x5}, {0x55, 0x7, 0x1000, 0x1ff, 0x7, 0xfffffff9}, {0x1, 0xfff, 0x7, 0x800, 0xfffffffd, 0x80000000}, {0x5, 0x1, 0x101, 0x7, 0x7}, {0x7, 0x200, 0xab, 0x8, 0x5, 0x1}, {0x7, 0x80000000, 0x200, 0x9ab6e109, 0x8000, 0x4}, {0x1, 0x1, 0x1, 0x5, 0x9, 0x6}, {0x4, 0xffff4c3d, 0x6, 0x1000, 0x2b1, 0xd6}, {0x5, 0x11, 0x8, 0x1ff, 0x3f, 0x80000000}, {0x91e, 0x1ff, 0x58f6, 0xc425, 0x7, 0x9}, {0x1000, 0x101, 0x4, 0xb, 0x80000000, 0xcc}, {0x9, 0x0, 0xb858, 0x9, 0x3, 0x1000}, {0x4, 0x5, 0x8001, 0x1ff, 0x0, 0xfa5f}, {0x8, 0x9c0, 0xfff, 0x4, 0x40, 0x9}, {0x8, 0x7, 0x401, 0x5, 0xfff, 0x1}, {0x6, 0x4, 0x6, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x1, 0x1f000000, 0x40ed4647, 0x3}, {0x5, 0x9f7, 0x7, 0x8, 0x80, 0x46f}, {0x4, 0x6, 0x100, 0x3, 0x5, 0xa2b5}, {0x40, 0xc8b7, 0x1f, 0x0, 0x7f, 0x3ff}, {0x7fffffff, 0x0, 0x5, 0x5, 0x3, 0x2}, {0xfff, 0x3, 0x100, 0xb2b, 0xfee1}, {0x9d, 0x1c000, 0xa33, 0x0, 0x0, 0x1ff}, {0x3, 0xd01, 0x2, 0xfffff000, 0x77, 0x2}, {0x81, 0x0, 0x5, 0x3, 0x6, 0x400}, {0x7, 0x4, 0xffffffff, 0x8, 0x8, 0x6}, {0x2, 0xffff, 0x1, 0x29, 0x80000001, 0x3}, {0x26, 0x93412a9, 0x387a, 0x10000, 0x6, 0x2}, {0x7, 0x2, 0x800, 0x2, 0x5e55, 0x3}, {0x8b, 0x5, 0x800, 0x0, 0x0, 0x3ff}, {0x9, 0x92ea, 0x5, 0x1, 0x400}, {0x3, 0x0, 0x3f, 0xfffffff8, 0x2, 0x7}, {0x9, 0x6, 0x1f, 0x6, 0x80000000, 0x40}, {0x3, 0x3, 0xcf50, 0x20, 0x7ff, 0x6}, {0x1, 0xfff, 0x4, 0xb3, 0x2870, 0x10001}, {0xfff, 0x8000, 0x10001, 0x9, 0x7, 0xda9}, {0x9, 0x3ff, 0xfffffff9, 0xffffffff, 0x10001, 0x6}, {0x6, 0xffff, 0x1, 0xa99, 0x5, 0x10000}, {0x4, 0x80, 0x52333868, 0x7fff, 0x1ff}, {0x10001, 0xa93, 0xe941, 0x3be, 0x4, 0x1}, {0xe30, 0x1, 0x1, 0x8, 0x4, 0x4}, {0x18bc, 0xa9, 0x3, 0x0, 0x1, 0x40}, {0x838, 0x80000001, 0x9, 0xfffffffa, 0x20, 0xda}, {0x4, 0x3, 0xf3fa, 0x9, 0x0, 0x3}, {0x7fffffff, 0xffffffff, 0x8000, 0x80000001, 0xd41, 0x2}, {0x3c62c446, 0xffffffff, 0x9, 0xfd75, 0x4c00c44c, 0x1}, {0x3, 0x0, 0x7, 0x5, 0x7, 0x80000000}, {0x7f, 0x180000, 0x800, 0xfff, 0x7ff, 0x6}, {0xb8, 0x409, 0xfffffffe, 0x1, 0x2, 0x97d}, {0x7a, 0x0, 0x59fcb4ce, 0x9, 0x7, 0x400}, {0x9, 0x2, 0x8, 0x3, 0x2, 0x3f}, {0x2, 0x9, 0x401, 0x200, 0x10001, 0x80}, {0x3, 0xd0, 0x5, 0xfffffff9, 0x6, 0x84f}, {0x6, 0x7, 0x20, 0x91, 0x1, 0x80000001}, {0x1, 0x101, 0x401, 0x9, 0x1000, 0x21fc0ad4}, {0x5, 0x145, 0x9, 0x1, 0x4, 0x1}, {0xfffffff9, 0x6, 0x3f, 0x80000001, 0x3, 0x9}, {0x80, 0x4, 0x1, 0x3, 0x9, 0xfab7}], [{0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x57000b4889a3b156}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x5}, {0x2}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x982e2fdb3948f2fd, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}]}}]}, {0xc, 0x6, "5186f123d8ebc6f9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x198, 0x17, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="d8f944e4e98e"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0xd3, 0x20000000, 0x3, 0xfffffffe}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x100, 0x6, "f6c89fa9299f381979d74dd7bd98931c8a36192e8947057e75b83946a019cc151c88659cad76b6e3d578db9f8bb1a53ff8788a71962a88487a011ba3d71f6aad447ad2a7ccc816abb4c635ee56a3a204618b9f75734fb3a00c00fb801b55f950148dfdd94982baf322ce0d0e281648275d13246e67d28913d1482ae05f33b9a8da1b4c22f523b16ed2e85d8b3536d04757ff245bf26bfd47ffe76f3abae6da57565227fea4ada5b1a7fb4ef4b7a5ca74d0dc44ca3e25c69ddc742587d445beaa36364c0a36341fe773e25fe19962acb62c8fb00ed28932c5f98a51f033bbd59ca7305850988c75f8ff8fec3650239eb56b8ab22195afd1719d7ddb7d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x4, 0x6, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x8, 0xffff, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd5cd, 0x7fffffff, 0x0, 0x2, 0xe566}, 0x1}}]}, {0x73, 0x6, "55ea316f9962773d1ee6bd6a05ad10c5b067a21f25f382daf2a660168496d9c3256da90c463df581dc98bb830681a8fc74f08dad874e41095923111bbb979d6ce6af4d8286bd2f5824022a1d2bfe93f6e648830888929dd918bd63f38d849cc05e2fae4d1a1955e26bb2f0fd3a83c5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x9}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x1, 0x87, 0x10000}, {0x5d9, 0x80, 0x0, 0x40}, {0x1ff, 0x1f, 0x8, 0x7fffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x428, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x932, 0xfffffffa, 0x5551, 0xef, 0x0, 0x200, 0x6d1, 0xfffffffb, 0xf0000000, 0x3f, 0xffffff7f, 0x9, 0x20, 0xadc, 0x1, 0x760, 0x1ff, 0x0, 0x3, 0x0, 0x6, 0x4, 0x6, 0x81, 0xf9, 0x200, 0x9, 0x100, 0x0, 0xfff, 0x8, 0x80, 0x401, 0x529d, 0x3, 0xd3, 0x6, 0x10001, 0xbb, 0xccb, 0x6, 0x1, 0x10001, 0x6b1, 0x6, 0x101, 0xff, 0x9, 0x3, 0x200, 0x80000000, 0x9, 0x5, 0xfffffffc, 0x80, 0x519, 0x815, 0xffff6971, 0x0, 0xfffffff8, 0x31, 0x401, 0x9, 0xfffffff7, 0x7ff, 0xffffffff, 0x1, 0xe86, 0x0, 0x3, 0xd180000, 0x3, 0x3ff, 0x8, 0x100, 0x2, 0x8, 0x46a, 0x1, 0x3, 0x7, 0x1, 0xe21, 0x8, 0x6, 0x0, 0x401, 0x779d, 0x2, 0x81, 0x1000, 0x3, 0x6, 0x6, 0xf0, 0x8, 0x9, 0x2, 0x1, 0xe0000000, 0x7fff, 0x6, 0x7fffffff, 0xff, 0x2, 0x2, 0x80, 0x6, 0x3, 0x20, 0x7f, 0x3, 0x6, 0x4, 0x495, 0x3, 0x4, 0x8, 0xc7b9, 0x20, 0x1f, 0x7, 0x1f, 0x2, 0x1ff, 0x7, 0x1, 0x2, 0x1200, 0xf5d3, 0x7, 0x5, 0x4, 0x5, 0x8, 0x7, 0x3f, 0x4, 0xa1, 0xffffffff, 0x2, 0x5, 0x3, 0x1, 0x14da0998, 0x0, 0x4, 0x2, 0x7f, 0x7c, 0x4, 0x8, 0x8, 0x81, 0x1b6, 0x5, 0x7, 0x401, 0x8, 0x235, 0x9, 0x81, 0xa0d, 0x97d, 0x6, 0x6, 0x6, 0xcb6f, 0x3f, 0x8, 0x67, 0x40, 0x2, 0x1, 0x1, 0xfffffffd, 0xfff, 0x9, 0x1, 0x80000001, 0x5, 0x2, 0xffffff80, 0x3, 0x2, 0x200, 0x6, 0x0, 0x5, 0x9, 0x216e, 0x7f, 0x100, 0x81, 0x5, 0x100, 0x1ff, 0x20, 0x3, 0x7fffffff, 0x100, 0x1cc5, 0x7fff, 0xeb, 0x1, 0x5, 0x6a, 0x0, 0x3, 0x8, 0x3663, 0x81, 0x6, 0x2df, 0x68000000, 0x60, 0x2, 0x8001, 0x0, 0x5, 0x8001, 0x5, 0x6, 0x0, 0x8417, 0x101, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0xfffffffa, 0x0, 0x401, 0xfffffffb, 0xffffffff, 0x8, 0x6, 0x2, 0x80000001, 0x1f, 0xffffffff, 0x800, 0x6, 0x0, 0x2, 0x9, 0x5, 0x6efdedd4, 0x1, 0x1, 0x81, 0x6, 0x200, 0x8, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x55}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1c9300000000}]}]}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x4044044}, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x8, 0x80010, 0xffffffffffffffff, 0x49e7c000) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18114, @rand_addr, 0x400983a}, 0x1c) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYBLOB="4107e400d28eba568e3f47c7f4ffffff"], 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000003140)=@newtfilter={0x168c, 0x2c, 0x10, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4688a7a6b5f69f12, 0x8}, {0x8}, {0x0, 0xfff5}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x11c8, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xf, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_RSVP_ACT={0x11a0, 0x6, [@m_pedit={0xee8, 0x1b, 0x0, 0x0, {{0xa}, {0xeb4, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xeb0, 0x4, {{{0x1, 0x4, 0x6, 0xe78, 0x8}, 0x80, 0x6, [{0x77, 0x7, 0x8, 0x8000, 0x40, 0xfff}, {0x3, 0x7, 0x3, 0x1ff, 0x1, 0x8}, {0x4, 0x4, 0x80000001, 0x2, 0x2, 0x2}, {0x2, 0x2, 0x28, 0xffffbc73, 0x8, 0x7ff}, {0x400, 0x2, 0x9, 0x1, 0xfff, 0x9}, {0x1, 0x541, 0x7fff, 0x7, 0x2, 0x15a}]}, [{0xfffffffd, 0x9, 0x1000, 0x5, 0x331, 0x3}, {0x2, 0x81c, 0x5, 0x7, 0xffffcc6a, 0x4ea}, {0xffffffff, 0x2d4f, 0x2, 0x19, 0x7, 0x80000001}, {0x1, 0x1, 0x20, 0x5, 0x5d, 0x650}, {0xecd6, 0x1, 0x5, 0x80000001, 0x44b3dad1, 0x1}, {0x101, 0x9, 0x5d, 0x100, 0x81, 0xff}, {0x9, 0x4, 0x4, 0x4, 0x2, 0xfffff800}, {0xb3b, 0xfffff801, 0x7fff, 0xa022, 0x4, 0x1}, {0x3, 0x0, 0x9, 0x7, 0x4, 0xb4}, {0x0, 0xffff, 0x5, 0x0, 0x3, 0x100}, {0x4, 0x5, 0x100, 0x401, 0xcbde, 0x2}, {0x4, 0x7, 0x101, 0x4, 0x6}, {0x9, 0x0, 0x3, 0xc093, 0x3, 0xfffffffe}, {0x8, 0x0, 0x1000, 0xfffffffe, 0x7f, 0x400}, {0x80000001, 0x1, 0x9, 0x5, 0x2, 0xe8d6}, {0x1, 0x4428, 0x1, 0x1f, 0x400, 0x4000000}, {0x9, 0xf4, 0x401, 0xc3, 0x80000001, 0x2}, {0x7fff, 0x8, 0x100, 0x1, 0x80000001}, {0x80000000, 0x8, 0x1, 0x8, 0x3, 0x6}, {0x100, 0x5, 0x18, 0x1000, 0x1a}, {0x3, 0x401, 0x1f, 0x4, 0x6, 0x80000001}, {0x0, 0x4, 0x80, 0x6, 0x4, 0x101}, {0x101, 0x200, 0x1, 0x100, 0x9}, {0x0, 0x3, 0x5, 0x2, 0x3, 0xc70}, {0x1, 0x8, 0xba, 0x6b, 0x1, 0x1}, {0x1, 0x1, 0x80, 0x3, 0x7fff, 0xffff}, {0x401, 0x7, 0x7, 0x5, 0x7fffffff, 0x3c3689eb}, {0x9, 0x68, 0x80, 0x6, 0x401, 0x10000}, {0x4, 0x7, 0x101, 0x5, 0x6, 0x8}, {0x6, 0xff, 0xffffffff, 0xb0, 0x5, 0x800}, {0x9, 0x0, 0x200, 0x4, 0x3, 0x101}, {0x3ff, 0x631411ad, 0x7, 0x3, 0x42, 0x6}, {0xffffff80, 0x8, 0x23, 0x3, 0x0, 0x6}, {0x4, 0xff, 0x401, 0x0, 0xa1c, 0xfffffffc}, {0x7, 0x3, 0x7f, 0x4, 0x7, 0x4}, {0x1, 0x84800000, 0x84, 0x5, 0x1, 0x2}, {0x8, 0x81, 0x8, 0x1f, 0x3, 0x3f}, {0x4, 0x80000000, 0x10000, 0x7, 0xf44, 0x9}, {0xffffffff, 0x26fc, 0x8, 0x5, 0x7, 0xffff}, {0x337, 0x9, 0x6, 0x7aa880f0, 0xff, 0x7}, {0x8, 0x9, 0xffffffce, 0x2, 0x3f, 0x6}, {0x6, 0xc4, 0x6, 0x6, 0x5, 0xf4}, {0xfffff800, 0x1, 0x9, 0x7ff, 0x95, 0x400}, {0x9, 0x0, 0x4, 0x8, 0x1ea, 0x8}, {0x1, 0x7, 0x87a, 0x2, 0x1, 0xc18}, {0x3, 0x88, 0xfff, 0x17600000, 0x5, 0xc9}, {0x6, 0x4, 0x4, 0x525, 0x7, 0xff800000}, {0x7, 0xcc, 0x94, 0x5, 0x0, 0x200}, {0x4, 0x5, 0x0, 0x10001, 0x5}, {0x7, 0x2, 0x80000000, 0x3, 0x0, 0x7}, {0x6, 0x7ff, 0x1, 0x2, 0x8, 0xffff0001}, {0x101, 0xad6, 0x0, 0xffffffe0, 0x20, 0xab}, {0xa5ff, 0x2, 0x3, 0x3, 0x2000, 0x9619}, {0x3f, 0x9, 0x1, 0x0, 0x8, 0x1}, {0x2, 0x10000, 0x3, 0x8000, 0x5, 0x1}, {0x5e, 0x9, 0x2, 0x9ffa, 0xdc, 0x7}, {0x1, 0x0, 0x1f8, 0x7, 0x7, 0x4d8}, {0x4000000, 0x7, 0xebbb, 0x80, 0x81a, 0x25ab}, {0x3, 0x5, 0x2, 0x4, 0x8, 0x7}, {0x5, 0x6, 0x7, 0x1, 0x1, 0x2f9}, {0x2, 0x7, 0x6, 0x7, 0x1, 0x3}, {0x4, 0xfff, 0x101, 0x5, 0x10000}, {0xfde, 0x1, 0x0, 0x7f, 0x3}, {0xff, 0x590f, 0x6, 0x1, 0x0, 0xff}, {0x10001, 0x5, 0x8, 0x5, 0x512, 0x1000}, {0x1, 0xfffffffe, 0xffffffe1, 0x8, 0x80000000, 0x7553}, {0x7f, 0x0, 0x8, 0x1, 0x3, 0x12ca}, {0x4, 0x8001, 0x80, 0x2636, 0x8000, 0x902}, {0x8, 0x1, 0x800, 0xfffffffc, 0x200, 0x40}, {0x5, 0xd3, 0x8, 0xfff, 0x4, 0x4}, {0xa0, 0x4, 0x2, 0x7, 0x6, 0x5}, {0x55, 0x7, 0x1000, 0x1ff, 0x7, 0xfffffff9}, {0x1, 0xfff, 0x7, 0x800, 0xfffffffd, 0x80000000}, {0x5, 0x1, 0x101, 0x7, 0x7}, {0x7, 0x200, 0xab, 0x8, 0x5, 0x1}, {0x7, 0x80000000, 0x200, 0x9ab6e109, 0x8000, 0x4}, {0x1, 0x1, 0x1, 0x5, 0x9, 0x6}, {0x4, 0xffff4c3d, 0x6, 0x1000, 0x2b1, 0xd6}, {0x5, 0x11, 0x8, 0x1ff, 0x3f, 0x80000000}, {0x91e, 0x1ff, 0x58f6, 0xc425, 0x7, 0x9}, {0x1000, 0x101, 0x4, 0xb, 0x80000000, 0xcc}, {0x9, 0x0, 0xb858, 0x9, 0x3, 0x1000}, {0x4, 0x5, 0x8001, 0x1ff, 0x0, 0xfa5f}, {0x8, 0x9c0, 0xfff, 0x4, 0x40, 0x9}, {0x8, 0x7, 0x401, 0x5, 0xfff, 0x1}, {0x6, 0x4, 0x6, 0x2, 0x1, 0x80}, {0x9, 0x8, 0x1, 0x1f000000, 0x40ed4647, 0x3}, {0x5, 0x9f7, 0x7, 0x8, 0x80, 0x46f}, {0x4, 0x6, 0x100, 0x3, 0x5, 0xa2b5}, {0x40, 0xc8b7, 0x1f, 0x0, 0x7f, 0x3ff}, {0x7fffffff, 0x0, 0x5, 0x5, 0x3, 0x2}, {0xfff, 0x3, 0x100, 0xb2b, 0xfee1}, {0x9d, 0x1c000, 0xa33, 0x0, 0x0, 0x1ff}, {0x3, 0xd01, 0x2, 0xfffff000, 0x77, 0x2}, {0x81, 0x0, 0x5, 0x3, 0x6, 0x400}, {0x7, 0x4, 0xffffffff, 0x8, 0x8, 0x6}, {0x2, 0xffff, 0x1, 0x29, 0x80000001, 0x3}, {0x26, 0x93412a9, 0x387a, 0x10000, 0x6, 0x2}, {0x7, 0x2, 0x800, 0x2, 0x5e55, 0x3}, {0x8b, 0x5, 0x800, 0x0, 0x0, 0x3ff}, {0x9, 0x92ea, 0x5, 0x1, 0x400}, {0x3, 0x0, 0x3f, 0xfffffff8, 0x2, 0x7}, {0x9, 0x6, 0x1f, 0x6, 0x80000000, 0x40}, {0x3, 0x3, 0xcf50, 0x20, 0x7ff, 0x6}, {0x1, 0xfff, 0x4, 0xb3, 0x2870, 0x10001}, {0xfff, 0x8000, 0x10001, 0x9, 0x7, 0xda9}, {0x9, 0x3ff, 0xfffffff9, 0xffffffff, 0x10001, 0x6}, {0x6, 0xffff, 0x1, 0xa99, 0x5, 0x10000}, {0x4, 0x80, 0x52333868, 0x7fff, 0x1ff}, {0x10001, 0xa93, 0xe941, 0x3be, 0x4, 0x1}, {0xe30, 0x1, 0x1, 0x8, 0x4, 0x4}, {0x18bc, 0xa9, 0x3, 0x0, 0x1, 0x40}, {0x838, 0x80000001, 0x9, 0xfffffffa, 0x20, 0xda}, {0x4, 0x3, 0xf3fa, 0x9, 0x0, 0x3}, {0x7fffffff, 0xffffffff, 0x8000, 0x80000001, 0xd41, 0x2}, {0x3c62c446, 0xffffffff, 0x9, 0xfd75, 0x4c00c44c, 0x1}, {0x3, 0x0, 0x7, 0x5, 0x7, 0x80000000}, {0x7f, 0x180000, 0x800, 0xfff, 0x7ff, 0x6}, {0xb8, 0x409, 0xfffffffe, 0x1, 0x2, 0x97d}, {0x7a, 0x0, 0x59fcb4ce, 0x9, 0x7, 0x400}, {0x9, 0x2, 0x8, 0x3, 0x2, 0x3f}, {0x2, 0x9, 0x401, 0x200, 0x10001, 0x80}, {0x3, 0xd0, 0x5, 0xfffffff9, 0x6, 0x84f}, {0x6, 0x7, 0x20, 0x91, 0x1, 0x80000001}, {0x1, 0x101, 0x401, 0x9, 0x1000, 0x21fc0ad4}, {0x5, 0x145, 0x9, 0x1, 0x4, 0x1}, {0xfffffff9, 0x6, 0x3f, 0x80000001, 0x3, 0x9}, {0x80, 0x4, 0x1, 0x3, 0x9, 0xfab7}], [{0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x4}, {0x1}, {0x5}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x57000b4889a3b156}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x3}, {0x5}, {0x5}, {0x2}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x0, 0x1}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x7, 0x1}, {0x982e2fdb3948f2fd, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x5}, {0x1, 0x1}]}}]}, {0xc, 0x6, "5186f123d8ebc6f9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_ife={0x198, 0x17, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x18, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x40}]}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x3}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="d8f944e4e98e"}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8000, 0xd3, 0x20000000, 0x3, 0xfffffffe}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0x4}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x100, 0x6, "f6c89fa9299f381979d74dd7bd98931c8a36192e8947057e75b83946a019cc151c88659cad76b6e3d578db9f8bb1a53ff8788a71962a88487a011ba3d71f6aad447ad2a7ccc816abb4c635ee56a3a204618b9f75734fb3a00c00fb801b55f950148dfdd94982baf322ce0d0e281648275d13246e67d28913d1482ae05f33b9a8da1b4c22f523b16ed2e85d8b3536d04757ff245bf26bfd47ffe76f3abae6da57565227fea4ada5b1a7fb4ef4b7a5ca74d0dc44ca3e25c69ddc742587d445beaa36364c0a36341fe773e25fe19962acb62c8fb00ed28932c5f98a51f033bbd59ca7305850988c75f8ff8fec3650239eb56b8ab22195afd1719d7ddb7d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x11c, 0x10, 0x0, 0x0, {{0x9}, {0x80, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x9e5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1, 0x4, 0x6, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xee4}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0x7, 0x8, 0xffff, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xd5cd, 0x7fffffff, 0x0, 0x2, 0xe566}, 0x1}}]}, {0x73, 0x6, "55ea316f9962773d1ee6bd6a05ad10c5b067a21f25f382daf2a660168496d9c3256da90c463df581dc98bb830681a8fc74f08dad874e41095923111bbb979d6ce6af4d8286bd2f5824022a1d2bfe93f6e648830888929dd918bd63f38d849cc05e2fae4d1a1955e26bb2f0fd3a83c5"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x7}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x474, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff1, 0x9}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x6, 0x1, 0x87, 0x10000}, {0x5d9, 0x80, 0x0, 0x40}, {0x1ff, 0x1f, 0x8, 0x7fffffff}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x428, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fff, 0x932, 0xfffffffa, 0x5551, 0xef, 0x0, 0x200, 0x6d1, 0xfffffffb, 0xf0000000, 0x3f, 0xffffff7f, 0x9, 0x20, 0xadc, 0x1, 0x760, 0x1ff, 0x0, 0x3, 0x0, 0x6, 0x4, 0x6, 0x81, 0xf9, 0x200, 0x9, 0x100, 0x0, 0xfff, 0x8, 0x80, 0x401, 0x529d, 0x3, 0xd3, 0x6, 0x10001, 0xbb, 0xccb, 0x6, 0x1, 0x10001, 0x6b1, 0x6, 0x101, 0xff, 0x9, 0x3, 0x200, 0x80000000, 0x9, 0x5, 0xfffffffc, 0x80, 0x519, 0x815, 0xffff6971, 0x0, 0xfffffff8, 0x31, 0x401, 0x9, 0xfffffff7, 0x7ff, 0xffffffff, 0x1, 0xe86, 0x0, 0x3, 0xd180000, 0x3, 0x3ff, 0x8, 0x100, 0x2, 0x8, 0x46a, 0x1, 0x3, 0x7, 0x1, 0xe21, 0x8, 0x6, 0x0, 0x401, 0x779d, 0x2, 0x81, 0x1000, 0x3, 0x6, 0x6, 0xf0, 0x8, 0x9, 0x2, 0x1, 0xe0000000, 0x7fff, 0x6, 0x7fffffff, 0xff, 0x2, 0x2, 0x80, 0x6, 0x3, 0x20, 0x7f, 0x3, 0x6, 0x4, 0x495, 0x3, 0x4, 0x8, 0xc7b9, 0x20, 0x1f, 0x7, 0x1f, 0x2, 0x1ff, 0x7, 0x1, 0x2, 0x1200, 0xf5d3, 0x7, 0x5, 0x4, 0x5, 0x8, 0x7, 0x3f, 0x4, 0xa1, 0xffffffff, 0x2, 0x5, 0x3, 0x1, 0x14da0998, 0x0, 0x4, 0x2, 0x7f, 0x7c, 0x4, 0x8, 0x8, 0x81, 0x1b6, 0x5, 0x7, 0x401, 0x8, 0x235, 0x9, 0x81, 0xa0d, 0x97d, 0x6, 0x6, 0x6, 0xcb6f, 0x3f, 0x8, 0x67, 0x40, 0x2, 0x1, 0x1, 0xfffffffd, 0xfff, 0x9, 0x1, 0x80000001, 0x5, 0x2, 0xffffff80, 0x3, 0x2, 0x200, 0x6, 0x0, 0x5, 0x9, 0x216e, 0x7f, 0x100, 0x81, 0x5, 0x100, 0x1ff, 0x20, 0x3, 0x7fffffff, 0x100, 0x1cc5, 0x7fff, 0xeb, 0x1, 0x5, 0x6a, 0x0, 0x3, 0x8, 0x3663, 0x81, 0x6, 0x2df, 0x68000000, 0x60, 0x2, 0x8001, 0x0, 0x5, 0x8001, 0x5, 0x6, 0x0, 0x8417, 0x101, 0x5, 0x2, 0x7fffffff, 0x7fffffff, 0xfffffffa, 0x0, 0x401, 0xfffffffb, 0xffffffff, 0x8, 0x6, 0x2, 0x80000001, 0x1f, 0xffffffff, 0x800, 0x6, 0x0, 0x2, 0x9, 0x5, 0x6efdedd4, 0x1, 0x1, 0x81, 0x6, 0x200, 0x8, 0xfff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x55}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1c9300000000}]}]}}]}, 0x168c}, 0x1, 0x0, 0x0, 0x4044044}, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x8, 0x80010, 0xffffffffffffffff, 0x49e7c000) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r3, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18114, @rand_addr, 0x400983a}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x11, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat$dlm_control(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x801a0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) dup(r1) 20:46:37 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) 20:46:37 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)="80d9557aa3a18af7d958ad1b9423783e7e53e96bcc403411da135d3f935a7b9c1c") 20:46:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="08d96cf02f14c482e8ae610566a45c9b6b1331e33b1f7bc0d33dfd445b6fdf4cb754d1a0aa534851957438e468a95ab6765862f014dc984c4fc282a4e1c3bc9f6101e2cf931a82b32b13ce088d3cb5c7e4e7d2ec8f21b1edbf85b3c22a8d21d031e0399f73b97805f4cb33836dc48a09eee5d86f3ed9b53c8f8347161422346d32fbad89cacb4839c62eb5f7668009e52407e5a55c4df1807e7368b9856b9b8f42b33dc48136631152b30e31028e3c", 0xaf, 0x4000, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0xa76}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000006940)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1, &(0x7f0000000380)=""/130, 0x82}, 0x4fd6d1eb}, {{&(0x7f0000000440)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/87, 0x57}], 0x5, &(0x7f0000000580)}, 0x4}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/119, 0x77}], 0x1, &(0x7f0000000700)=""/139, 0x8b}, 0xb1f7}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/178, 0xb2}, {&(0x7f0000000880)=""/37, 0x25}, {&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/71, 0x47}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x8, &(0x7f0000000fc0)=""/137, 0x89}, 0x9}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005140)=""/218, 0xda}, {&(0x7f0000005240)=""/228, 0xe4}, {&(0x7f0000001080)=""/73, 0x49}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/98, 0x62}, {&(0x7f0000005480)=""/92, 0x5c}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/71, 0x47}], 0x8, &(0x7f00000065c0)=""/125, 0x7d}, 0x4}, {{&(0x7f0000006640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)=""/193, 0xc1}], 0x1}, 0x8001}], 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000006a00)="f57ccc3bda5a2217170bec11bbe7c7d92bb844b3b359124d12b7445798d3e5da5c7203fce5c8a1b6686ffe4f07a91c740ca18d79f3ed4e6e2a4cdbacdbf1fa7e6f9a997be68422129f2d4ff6cec3a09fc2f24d22f6079803adb3c54c22c249cb936936bb0be19111bd097299bcd2e475b4f23c2436f1e7d9cdade1f85b74a48d31a5368cfd6bcf45f0b780aad3ea558a5d702b75bd906d94b6fd519a43b7c5493e180951f2510b23c83d2f06f53f9c3caf4d2c107bb4a6334762c34f430458c50961ecdf27b6f3625b293c30fe918b27e6ff4a", 0xd3, 0x8000, &(0x7f0000000580)={0xa, 0x4e21, 0xb3ad, @loopback, 0x2}, 0x1c) 20:46:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r0, r1, 0x0) socket$bt_rfcomm(0x1f, 0xb5e481de57a2a488, 0x3) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x200000) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r2, r3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) getpgid(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x40, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) dup3(r4, r5, 0x0) r6 = dup(r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x789b1000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r7, r8, 0x0, 0x8000002b) dup(r6) 20:46:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="08d96cf02f14c482e8ae610566a45c9b6b1331e33b1f7bc0d33dfd445b6fdf4cb754d1a0aa534851957438e468a95ab6765862f014dc984c4fc282a4e1c3bc9f6101e2cf931a82b32b13ce088d3cb5c7e4e7d2ec8f21b1edbf85b3c22a8d21d031e0399f73b97805f4cb33836dc48a09eee5d86f3ed9b53c8f8347161422346d32fbad89cacb4839c62eb5f7668009e52407e5a55c4df1807e7368b9856b9b8f42b33dc48136631152b30e31028e3c", 0xaf, 0x4000, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="08d96cf02f14c482e8ae610566a45c9b6b1331e33b1f7bc0d33dfd445b6fdf4cb754d1a0aa534851957438e468a95ab6765862f014dc984c4fc282a4e1c3bc9f6101e2cf931a82b32b13ce088d3cb5c7e4e7d2ec8f21b1edbf85b3c22a8d21d031e0399f73b97805f4cb33836dc48a09eee5d86f3ed9b53c8f8347161422346d32fbad89cacb4839c62eb5f7668009e52407e5a55c4df1807e7368b9856b9b8f42b33dc48136631152b30e31028e3c", 0xaf, 0x4000, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:37 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r0, r1, 0x0) socket$bt_rfcomm(0x1f, 0xb5e481de57a2a488, 0x3) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x200000) (async) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r2, r3, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) getpgid(0x0) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x40, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (rerun: 32) dup3(r4, r5, 0x0) (async) r6 = dup(r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x789b1000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) sendfile(r7, r8, 0x0, 0x8000002b) (async) dup(r6) 20:46:37 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="08d96cf02f14c482e8ae610566a45c9b6b1331e33b1f7bc0d33dfd445b6fdf4cb754d1a0aa534851957438e468a95ab6765862f014dc984c4fc282a4e1c3bc9f6101e2cf931a82b32b13ce088d3cb5c7e4e7d2ec8f21b1edbf85b3c22a8d21d031e0399f73b97805f4cb33836dc48a09eee5d86f3ed9b53c8f8347161422346d32fbad89cacb4839c62eb5f7668009e52407e5a55c4df1807e7368b9856b9b8f42b33dc48136631152b30e31028e3c", 0xaf, 0x4000, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="08d96cf02f14c482e8ae610566a45c9b6b1331e33b1f7bc0d33dfd445b6fdf4cb754d1a0aa534851957438e468a95ab6765862f014dc984c4fc282a4e1c3bc9f6101e2cf931a82b32b13ce088d3cb5c7e4e7d2ec8f21b1edbf85b3c22a8d21d031e0399f73b97805f4cb33836dc48a09eee5d86f3ed9b53c8f8347161422346d32fbad89cacb4839c62eb5f7668009e52407e5a55c4df1807e7368b9856b9b8f42b33dc48136631152b30e31028e3c", 0xaf, 0x4000, &(0x7f0000000000)={0xa, 0x4e22, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:37 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) 20:46:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f00000001c0)=""/172, 0xba}, {&(0x7f0000000280)=""/233, 0xe9}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f0000000440)=""/238, 0xee}, {&(0x7f0000000540)=""/198, 0xc6}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f0000003140)=""/4096, 0x1000}], 0xe, &(0x7f0000000880)=""/90, 0x66}}, {{0x0, 0xfffffef3, 0x0}}], 0x3, 0x0, 0x0) 20:46:38 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) 20:46:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x52c, 0x30c, 0x30c, 0xffffffff, 0x0, 0x134, 0x464, 0x464, 0xffffffff, 0x464, 0x464, 0x5, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x5e, 0x33, 0x2, 0x40}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x2b6, 0x3, 0x1, [0xfff, 0x8, 0x7, 0x9, 0x8, 0xffff, 0x3, 0xfff, 0x0, 0x800, 0x4, 0xfff9, 0x81, 0x6, 0x2, 0x200], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x64, @gre_key=0x100}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x6, 0x18}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@private=0xa010102, @gre_key=0x4, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0xb6, 0x3, 0xa}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2, 0x6, 0x3, 0x6, 0x415, 0x4, 0x1, 0x0, 0x0, 0x7, 0x3ff, 0xfffd, 0x6, 0x1, 0x8, 0xc0ac], 0x3}}, @common=@eui64={{0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r0, r1, 0x0) socket$bt_rfcomm(0x1f, 0xb5e481de57a2a488, 0x3) (async, rerun: 32) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x200000) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r2, r3, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) getpgid(0x0) (async, rerun: 32) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x40, 0x0) (async, rerun: 32) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) dup3(r4, r5, 0x0) r6 = dup(r4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x789b1000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 64) sendfile(r7, r8, 0x0, 0x8000002b) (async) dup(r6) 20:46:38 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x0) 20:46:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x52c, 0x30c, 0x30c, 0xffffffff, 0x0, 0x134, 0x464, 0x464, 0xffffffff, 0x464, 0x464, 0x5, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x5e, 0x33, 0x2, 0x40}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x2b6, 0x3, 0x1, [0xfff, 0x8, 0x7, 0x9, 0x8, 0xffff, 0x3, 0xfff, 0x0, 0x800, 0x4, 0xfff9, 0x81, 0x6, 0x2, 0x200], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x64, @gre_key=0x100}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x6, 0x18}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@private=0xa010102, @gre_key=0x4, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0xb6, 0x3, 0xa}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2, 0x6, 0x3, 0x6, 0x415, 0x4, 0x1, 0x0, 0x0, 0x7, 0x3ff, 0xfffd, 0x6, 0x1, 0x8, 0xc0ac], 0x3}}, @common=@eui64={{0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x52c, 0x30c, 0x30c, 0xffffffff, 0x0, 0x134, 0x464, 0x464, 0xffffffff, 0x464, 0x464, 0x5, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x5e, 0x33, 0x2, 0x40}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x2b6, 0x3, 0x1, [0xfff, 0x8, 0x7, 0x9, 0x8, 0xffff, 0x3, 0xfff, 0x0, 0x800, 0x4, 0xfff9, 0x81, 0x6, 0x2, 0x200], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x64, @gre_key=0x100}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x6, 0x18}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@private=0xa010102, @gre_key=0x4, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0xb6, 0x3, 0xa}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2, 0x6, 0x3, 0x6, 0x415, 0x4, 0x1, 0x0, 0x0, 0x7, 0x3ff, 0xfffd, 0x6, 0x1, 0x8, 0xc0ac], 0x3}}, @common=@eui64={{0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, 0x0}, 0xa76}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000006940)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/179, 0xb3}], 0x1, &(0x7f0000000380)=""/130, 0x82}, 0x4fd6d1eb}, {{&(0x7f0000000440)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/87, 0x57}], 0x5, &(0x7f0000000580)}, 0x4}, {{&(0x7f00000005c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/119, 0x77}], 0x1, &(0x7f0000000700)=""/139, 0x8b}, 0xb1f7}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a00)=""/178, 0xb2}, {&(0x7f0000000880)=""/37, 0x25}, {&(0x7f0000000ac0)=""/135, 0x87}, {&(0x7f0000000b80)=""/202, 0xca}, {&(0x7f0000000c80)=""/71, 0x47}, {&(0x7f0000000d00)=""/246, 0xf6}, {&(0x7f0000000e00)=""/75, 0x4b}, {&(0x7f0000000e80)=""/211, 0xd3}], 0x8, &(0x7f0000000fc0)=""/137, 0x89}, 0x9}, {{0x0, 0x0, &(0x7f0000006580)=[{&(0x7f0000005140)=""/218, 0xda}, {&(0x7f0000005240)=""/228, 0xe4}, {&(0x7f0000001080)=""/73, 0x49}, {&(0x7f0000005340)=""/160, 0xa0}, {&(0x7f0000005400)=""/98, 0x62}, {&(0x7f0000005480)=""/92, 0x5c}, {&(0x7f0000005500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/71, 0x47}], 0x8, &(0x7f00000065c0)=""/125, 0x7d}, 0x4}, {{&(0x7f0000006640)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f00000067c0)=[{&(0x7f00000066c0)=""/193, 0xc1}], 0x1}, 0x8001}], 0x9, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000006a00)="f57ccc3bda5a2217170bec11bbe7c7d92bb844b3b359124d12b7445798d3e5da5c7203fce5c8a1b6686ffe4f07a91c740ca18d79f3ed4e6e2a4cdbacdbf1fa7e6f9a997be68422129f2d4ff6cec3a09fc2f24d22f6079803adb3c54c22c249cb936936bb0be19111bd097299bcd2e475b4f23c2436f1e7d9cdade1f85b74a48d31a5368cfd6bcf45f0b780aad3ea558a5d702b75bd906d94b6fd519a43b7c5493e180951f2510b23c83d2f06f53f9c3caf4d2c107bb4a6334762c34f430458c50961ecdf27b6f3625b293c30fe918b27e6ff4a", 0xd3, 0x8000, &(0x7f0000000580)={0xa, 0x4e21, 0xb3ad, @loopback, 0x2}, 0x1c) 20:46:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x52c, 0x30c, 0x30c, 0xffffffff, 0x0, 0x134, 0x464, 0x464, 0xffffffff, 0x464, 0x464, 0x5, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x5e, 0x33, 0x2, 0x40}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x2b6, 0x3, 0x1, [0xfff, 0x8, 0x7, 0x9, 0x8, 0xffff, 0x3, 0xfff, 0x0, 0x800, 0x4, 0xfff9, 0x81, 0x6, 0x2, 0x200], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x64, @gre_key=0x100}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x6, 0x18}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@private=0xa010102, @gre_key=0x4, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0xb6, 0x3, 0xa}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2, 0x6, 0x3, 0x6, 0x415, 0x4, 0x1, 0x0, 0x0, 0x7, 0x3ff, 0xfffd, 0x6, 0x1, 0x8, 0xc0ac], 0x3}}, @common=@eui64={{0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@nat={'nat\x00', 0x1b, 0x5, 0x52c, 0x30c, 0x30c, 0xffffffff, 0x0, 0x134, 0x464, 0x464, 0xffffffff, 0x464, 0x464, 0x5, &(0x7f00000000c0), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0x0, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x5e, 0x33, 0x2, 0x40}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hbh={{0x48}, {0x2b6, 0x3, 0x1, [0xfff, 0x8, 0x7, 0x9, 0x8, 0xffff, 0x3, 0xfff, 0x0, 0x800, 0x4, 0xfff9, 0x81, 0x6, 0x2, 0x200], 0x9}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x12, @ipv6=@private1, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}, @icmp_id=0x64, @gre_key=0x100}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3a}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x62, 0x2, 0x6, 0x18}, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@loopback, @ipv4=@private=0xa010102, @gre_key=0x4, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@mcast2, @ipv4=@broadcast, @port=0x4e22, @port=0x4e23}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0xffffffff, 0x0, 0xff], 'vxcan1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0xb6, 0x3, 0xa}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x4, 0x4, 0x1, [0x2, 0x6, 0x3, 0x6, 0x415, 0x4, 0x1, 0x0, 0x0, 0x7, 0x3ff, 0xfffd, 0x6, 0x1, 0x8, 0xc0ac], 0x3}}, @common=@eui64={{0x24}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x12, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @gre_key=0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x588) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:38 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) recvmmsg(r2, &(0x7f0000008e80)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/212, 0xd4}], 0x9}, 0xffffffff}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/82, 0x52}], 0x3, &(0x7f0000000980)=""/238, 0xee}, 0xc73d}, {{&(0x7f0000000a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/191, 0xbf}], 0x1}, 0xffffc0ed}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/5, 0x5}], 0x1, &(0x7f0000000d00)=""/110, 0x6e}, 0x3}, {{&(0x7f0000000d80)=@qipcrtr, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/117, 0x75}], 0x3, &(0x7f0000000f80)=""/167, 0xa7}, 0x8}, {{&(0x7f0000005140)=@ieee802154, 0x80, &(0x7f0000006380)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/122, 0x7a}, {&(0x7f0000006240)=""/152, 0x98}, {&(0x7f0000006300)=""/86, 0x56}], 0x4}, 0x9}, {{&(0x7f00000063c0)=@nfc_llcp, 0x80, &(0x7f0000007540)=[{&(0x7f0000006440)=""/8, 0x8}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/175, 0xaf}], 0x3, &(0x7f0000007580)=""/75, 0x4b}, 0x80}, {{&(0x7f0000007600)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007680)=""/93, 0x5d}, {&(0x7f0000007700)=""/168, 0xa8}, {&(0x7f00000077c0)=""/239, 0xef}, {&(0x7f00000078c0)=""/41, 0x29}, {&(0x7f0000007900)=""/204, 0xcc}], 0x5, &(0x7f0000007a40)=""/58, 0x3a}, 0x3}, {{&(0x7f0000007a80)=@rc, 0x80, &(0x7f0000008e00)=[{&(0x7f0000007b00)=""/192, 0xc0}, {&(0x7f0000007bc0)=""/38, 0x26}, {&(0x7f0000007c00)=""/242, 0xf2}, {&(0x7f0000007d00)=""/4088, 0xff8}, {&(0x7f0000008d00)=""/102, 0x66}, {&(0x7f0000008d80)=""/101, 0x65}], 0x6, &(0x7f0000008e40)=""/36, 0x24}, 0x3}], 0x9, 0x100, 0x0) 20:46:38 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:38 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000200)="67d960fd80044c7eb428be3425488ce2c574445d57a52551fe58b71eb4cb6ef348329817f293ae8aac9318f44697adc6e8b339581601d0d4884d2945f8f96bd8c5f2a9cd91b93a82a8501ec65e0726450cd2673a7bd0ad486a69d770a3c100548be7bed9554615b8c0e83dc981e5aae10b2a8216e31da8420f8d5dd31abf9c9eda4a75e4b80a2234a3d4853908cc81882cfd2fd6aca6c7484d4168cad62e2819ce417c03bb12601938299ef763b43a71aa717ad0029bc5cd2761bbf18787e28527e2df7c8fd18e26d104a742d3acfd5b2798eaada6c1491396cce155", 0xdc, 0x890, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xea, 0x1, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x7, 0x83, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x8000, 0x4, 0x24c}}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:38 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) pkey_mprotect(&(0x7f00000bb000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) syz_clone(0x820180, &(0x7f0000000340)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)="80d9557aa3a18af7d958ad1b9423783e7e53e96bcc403411da135d3f935a7b9c1c") 20:46:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x453, 0x1, 0x70bd2c, 0x25dfdbfe, "c4e6744366e03864a4c5e9b0cf18e902a79cf9faca4f4ec8ed381031bf22768a7c86710a8d75d92bb0b464bca3a9a2f4c2a01ea6d92735c85d7bb24970ef8a9eca7497117becb14234c9c300de7cda7dd353b66ef112c69297311ef50badc5c61f256723e8b8b15bebc0c1f48f7989d3433ca4270b4c28c603cb130c1ce58767826cbd2141733e5a4e9d56d68f886d246ba583bec0e0898b3189945e935945005ed19aa7df25c89720acc66a866f3ddcac60e29b4d3666e2a3adf5cd92b3c8f84b", ["", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c080) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000200)="67d960fd80044c7eb428be3425488ce2c574445d57a52551fe58b71eb4cb6ef348329817f293ae8aac9318f44697adc6e8b339581601d0d4884d2945f8f96bd8c5f2a9cd91b93a82a8501ec65e0726450cd2673a7bd0ad486a69d770a3c100548be7bed9554615b8c0e83dc981e5aae10b2a8216e31da8420f8d5dd31abf9c9eda4a75e4b80a2234a3d4853908cc81882cfd2fd6aca6c7484d4168cad62e2819ce417c03bb12601938299ef763b43a71aa717ad0029bc5cd2761bbf18787e28527e2df7c8fd18e26d104a742d3acfd5b2798eaada6c1491396cce155", 0xdc, 0x890, 0x0, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xea, 0x1, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xff, 0x7}}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x7, 0x83, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x8000, 0x4, 0x24c}}) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:39 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000002b) dup(r0) 20:46:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000200)="67d960fd80044c7eb428be3425488ce2c574445d57a52551fe58b71eb4cb6ef348329817f293ae8aac9318f44697adc6e8b339581601d0d4884d2945f8f96bd8c5f2a9cd91b93a82a8501ec65e0726450cd2673a7bd0ad486a69d770a3c100548be7bed9554615b8c0e83dc981e5aae10b2a8216e31da8420f8d5dd31abf9c9eda4a75e4b80a2234a3d4853908cc81882cfd2fd6aca6c7484d4168cad62e2819ce417c03bb12601938299ef763b43a71aa717ad0029bc5cd2761bbf18787e28527e2df7c8fd18e26d104a742d3acfd5b2798eaada6c1491396cce155", 0xdc, 0x890, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xea, 0x1, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xff, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x7, 0x83, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x8000, 0x4, 0x24c}}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) pipe(&(0x7f0000000000)) (async) sendto$inet6(r1, &(0x7f0000000200)="67d960fd80044c7eb428be3425488ce2c574445d57a52551fe58b71eb4cb6ef348329817f293ae8aac9318f44697adc6e8b339581601d0d4884d2945f8f96bd8c5f2a9cd91b93a82a8501ec65e0726450cd2673a7bd0ad486a69d770a3c100548be7bed9554615b8c0e83dc981e5aae10b2a8216e31da8420f8d5dd31abf9c9eda4a75e4b80a2234a3d4853908cc81882cfd2fd6aca6c7484d4168cad62e2819ce417c03bb12601938299ef763b43a71aa717ad0029bc5cd2761bbf18787e28527e2df7c8fd18e26d104a742d3acfd5b2798eaada6c1491396cce155", 0xdc, 0x890, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0xea, 0x1, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x0, 0xff, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r3, 0x2f, 0x0, 0x7, 0x83, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x8000, 0x4, 0x24c}}) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:39 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) recvmmsg(r2, &(0x7f0000008e80)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/212, 0xd4}], 0x9}, 0xffffffff}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/82, 0x52}], 0x3, &(0x7f0000000980)=""/238, 0xee}, 0xc73d}, {{&(0x7f0000000a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/191, 0xbf}], 0x1}, 0xffffc0ed}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/5, 0x5}], 0x1, &(0x7f0000000d00)=""/110, 0x6e}, 0x3}, {{&(0x7f0000000d80)=@qipcrtr, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/117, 0x75}], 0x3, &(0x7f0000000f80)=""/167, 0xa7}, 0x8}, {{&(0x7f0000005140)=@ieee802154, 0x80, &(0x7f0000006380)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/122, 0x7a}, {&(0x7f0000006240)=""/152, 0x98}, {&(0x7f0000006300)=""/86, 0x56}], 0x4}, 0x9}, {{&(0x7f00000063c0)=@nfc_llcp, 0x80, &(0x7f0000007540)=[{&(0x7f0000006440)=""/8, 0x8}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/175, 0xaf}], 0x3, &(0x7f0000007580)=""/75, 0x4b}, 0x80}, {{&(0x7f0000007600)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007680)=""/93, 0x5d}, {&(0x7f0000007700)=""/168, 0xa8}, {&(0x7f00000077c0)=""/239, 0xef}, {&(0x7f00000078c0)=""/41, 0x29}, {&(0x7f0000007900)=""/204, 0xcc}], 0x5, &(0x7f0000007a40)=""/58, 0x3a}, 0x3}, {{&(0x7f0000007a80)=@rc, 0x80, &(0x7f0000008e00)=[{&(0x7f0000007b00)=""/192, 0xc0}, {&(0x7f0000007bc0)=""/38, 0x26}, {&(0x7f0000007c00)=""/242, 0xf2}, {&(0x7f0000007d00)=""/4088, 0xff8}, {&(0x7f0000008d00)=""/102, 0x66}, {&(0x7f0000008d80)=""/101, 0x65}], 0x6, &(0x7f0000008e40)=""/36, 0x24}, 0x3}], 0x9, 0x100, 0x0) 20:46:39 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r1, r2, 0x0, 0x8000002b) dup(r0) 20:46:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) recvfrom$inet6(r0, &(0x7f00000000c0)=""/106, 0x6a, 0x101, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @empty, 0x81}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:39 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 20:46:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) recvfrom$inet6(r0, &(0x7f00000000c0)=""/106, 0x6a, 0x101, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @empty, 0x81}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:39 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x453, 0x1, 0x70bd2c, 0x25dfdbfe, "c4e6744366e03864a4c5e9b0cf18e902a79cf9faca4f4ec8ed381031bf22768a7c86710a8d75d92bb0b464bca3a9a2f4c2a01ea6d92735c85d7bb24970ef8a9eca7497117becb14234c9c300de7cda7dd353b66ef112c69297311ef50badc5c61f256723e8b8b15bebc0c1f48f7989d3433ca4270b4c28c603cb130c1ce58767826cbd2141733e5a4e9d56d68f886d246ba583bec0e0898b3189945e935945005ed19aa7df25c89720acc66a866f3ddcac60e29b4d3666e2a3adf5cd92b3c8f84b", ["", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c080) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2447.458712][T11966] FAULT_INJECTION: forcing a failure. [ 2447.458712][T11966] name failslab, interval 1, probability 0, space 0, times 0 [ 2447.487730][T11966] CPU: 1 PID: 11966 Comm: syz-executor.4 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2447.497850][T11966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2447.507904][T11966] Call Trace: [ 2447.511179][T11966] [ 2447.514105][T11966] dump_stack_lvl+0xd1/0x138 [ 2447.518702][T11966] should_fail_ex.cold+0x5/0xa [ 2447.523479][T11966] ? copy_process+0x3aa/0x7520 [ 2447.528243][T11966] should_failslab+0x9/0x20 [ 2447.532744][T11966] kmem_cache_alloc_node+0x5c/0x460 [ 2447.537943][T11966] copy_process+0x3aa/0x7520 [ 2447.542529][T11966] ? find_held_lock+0x2d/0x110 [ 2447.547300][T11966] ? get_pid_task+0xec/0x210 [ 2447.551897][T11966] ? lock_downgrade+0x6e0/0x6e0 [ 2447.556743][T11966] ? kstrtouint+0x120/0x120 [ 2447.561244][T11966] ? __cleanup_sighand+0xb0/0xb0 [ 2447.566187][T11966] kernel_clone+0xeb/0x990 [ 2447.570600][T11966] ? create_io_thread+0xf0/0xf0 [ 2447.575449][T11966] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2447.581089][T11966] ? wait_for_completion_io_timeout+0x20/0x20 [ 2447.587165][T11966] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2447.592706][T11966] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2447.598602][T11966] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2447.605186][T11966] ? lockdep_hardirqs_on+0x7d/0x100 [ 2447.610380][T11966] __do_fast_syscall_32+0x65/0xf0 [ 2447.615408][T11966] do_fast_syscall_32+0x33/0x70 [ 2447.620259][T11966] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2447.626591][T11966] RIP: 0023:0xf7f01549 [ 2447.630652][T11966] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2447.650257][T11966] RSP: 002b:00000000f7efc57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2447.658670][T11966] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2447.666638][T11966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2447.674612][T11966] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2447.682595][T11966] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2447.690566][T11966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2447.698544][T11966] 20:46:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) r1 = socket$key(0xf, 0x3, 0x2) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) (async, rerun: 64) recvfrom$inet6(r0, &(0x7f00000000c0)=""/106, 0x6a, 0x101, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @empty, 0x81}, 0x1c) (rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x20040, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, 0x453, 0x1, 0x70bd2c, 0x25dfdbfe, "c4e6744366e03864a4c5e9b0cf18e902a79cf9faca4f4ec8ed381031bf22768a7c86710a8d75d92bb0b464bca3a9a2f4c2a01ea6d92735c85d7bb24970ef8a9eca7497117becb14234c9c300de7cda7dd353b66ef112c69297311ef50badc5c61f256723e8b8b15bebc0c1f48f7989d3433ca4270b4c28c603cb130c1ce58767826cbd2141733e5a4e9d56d68f886d246ba583bec0e0898b3189945e935945005ed19aa7df25c89720acc66a866f3ddcac60e29b4d3666e2a3adf5cd92b3c8f84b", ["", "", "", ""]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x404c080) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:40 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 20:46:40 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:40 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 20:46:40 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) (async) recvmmsg(r2, &(0x7f0000008e80)=[{{&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f00000003c0)=""/225, 0xe1}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/212, 0xd4}], 0x9}, 0xffffffff}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/82, 0x52}], 0x3, &(0x7f0000000980)=""/238, 0xee}, 0xc73d}, {{&(0x7f0000000a80)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/191, 0xbf}], 0x1}, 0xffffc0ed}, {{&(0x7f0000000c00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000c80)=""/5, 0x5}], 0x1, &(0x7f0000000d00)=""/110, 0x6e}, 0x3}, {{&(0x7f0000000d80)=@qipcrtr, 0x80, &(0x7f0000000f40)=[{&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/117, 0x75}], 0x3, &(0x7f0000000f80)=""/167, 0xa7}, 0x8}, {{&(0x7f0000005140)=@ieee802154, 0x80, &(0x7f0000006380)=[{&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/122, 0x7a}, {&(0x7f0000006240)=""/152, 0x98}, {&(0x7f0000006300)=""/86, 0x56}], 0x4}, 0x9}, {{&(0x7f00000063c0)=@nfc_llcp, 0x80, &(0x7f0000007540)=[{&(0x7f0000006440)=""/8, 0x8}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/175, 0xaf}], 0x3, &(0x7f0000007580)=""/75, 0x4b}, 0x80}, {{&(0x7f0000007600)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000007680)=""/93, 0x5d}, {&(0x7f0000007700)=""/168, 0xa8}, {&(0x7f00000077c0)=""/239, 0xef}, {&(0x7f00000078c0)=""/41, 0x29}, {&(0x7f0000007900)=""/204, 0xcc}], 0x5, &(0x7f0000007a40)=""/58, 0x3a}, 0x3}, {{&(0x7f0000007a80)=@rc, 0x80, &(0x7f0000008e00)=[{&(0x7f0000007b00)=""/192, 0xc0}, {&(0x7f0000007bc0)=""/38, 0x26}, {&(0x7f0000007c00)=""/242, 0xf2}, {&(0x7f0000007d00)=""/4088, 0xff8}, {&(0x7f0000008d00)=""/102, 0x66}, {&(0x7f0000008d80)=""/101, 0x65}], 0x6, &(0x7f0000008e40)=""/36, 0x24}, 0x3}], 0x9, 0x100, 0x0) 20:46:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="7a4034eef82acdc7dbbad31aaec2bb35ba028276269153ef71bfc8c4991971ebf26aa499a119002c6562fc4f7a594060374974721a3f4d81f965f060cecc97f505ebcc108638623dd87172a9315cc767e76a96344b45f61e99484e07c176a6544cd592425850671f018b1a035168de4dfe063c", 0x73, 0x40, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2448.058421][T11990] FAULT_INJECTION: forcing a failure. [ 2448.058421][T11990] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.099842][T11994] FAULT_INJECTION: forcing a failure. [ 2448.099842][T11994] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.118932][T11990] CPU: 0 PID: 11990 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2448.129062][T11990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2448.139171][T11990] Call Trace: [ 2448.142475][T11990] [ 2448.145431][T11990] dump_stack_lvl+0xd1/0x138 [ 2448.150075][T11990] should_fail_ex.cold+0x5/0xa [ 2448.154902][T11990] ? copy_process+0x3aa/0x7520 [ 2448.159697][T11990] should_failslab+0x9/0x20 [ 2448.164234][T11990] kmem_cache_alloc_node+0x5c/0x460 [ 2448.169480][T11990] copy_process+0x3aa/0x7520 [ 2448.174115][T11990] ? find_held_lock+0x2d/0x110 [ 2448.178936][T11990] ? get_pid_task+0xec/0x210 [ 2448.183663][T11990] ? lock_downgrade+0x6e0/0x6e0 [ 2448.188545][T11990] ? kstrtouint+0x120/0x120 [ 2448.193096][T11990] ? __cleanup_sighand+0xb0/0xb0 [ 2448.198109][T11990] kernel_clone+0xeb/0x990 [ 2448.202571][T11990] ? create_io_thread+0xf0/0xf0 [ 2448.207462][T11990] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2448.213147][T11990] ? wait_for_completion_io_timeout+0x20/0x20 [ 2448.219270][T11990] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2448.224855][T11990] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2448.230795][T11990] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2448.237430][T11990] ? lockdep_hardirqs_on+0x7d/0x100 [ 2448.242660][T11990] __do_fast_syscall_32+0x65/0xf0 [ 2448.247728][T11990] do_fast_syscall_32+0x33/0x70 [ 2448.252628][T11990] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2448.259000][T11990] RIP: 0023:0xf7f0f549 [ 2448.263102][T11990] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2448.282750][T11990] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2448.291205][T11990] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 20:46:40 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="7a4034eef82acdc7dbbad31aaec2bb35ba028276269153ef71bfc8c4991971ebf26aa499a119002c6562fc4f7a594060374974721a3f4d81f965f060cecc97f505ebcc108638623dd87172a9315cc767e76a96344b45f61e99484e07c176a6544cd592425850671f018b1a035168de4dfe063c", 0x73, 0x40, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="7a4034eef82acdc7dbbad31aaec2bb35ba028276269153ef71bfc8c4991971ebf26aa499a119002c6562fc4f7a594060374974721a3f4d81f965f060cecc97f505ebcc108638623dd87172a9315cc767e76a96344b45f61e99484e07c176a6544cd592425850671f018b1a035168de4dfe063c", 0x73, 0x40, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2448.299209][T11990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2448.307210][T11990] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2448.315212][T11990] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2448.323208][T11990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2448.331246][T11990] [ 2448.334282][T11994] CPU: 1 PID: 11994 Comm: syz-executor.4 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2448.344381][T11994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2448.354449][T11994] Call Trace: [ 2448.357733][T11994] [ 2448.360672][T11994] dump_stack_lvl+0xd1/0x138 [ 2448.365296][T11994] should_fail_ex.cold+0x5/0xa [ 2448.370099][T11994] ? prepare_creds+0x43/0x7b0 [ 2448.374892][T11994] should_failslab+0x9/0x20 [ 2448.379424][T11994] kmem_cache_alloc+0x5a/0x430 [ 2448.384203][T11994] ? __validate_process_creds+0x210/0x370 [ 2448.389952][T11994] prepare_creds+0x43/0x7b0 [ 2448.394484][T11994] copy_creds+0xa7/0xd50 [ 2448.398755][T11994] copy_process+0xd60/0x7520 [ 2448.403363][T11994] ? find_held_lock+0x2d/0x110 [ 2448.408161][T11994] ? get_pid_task+0xec/0x210 [ 2448.412782][T11994] ? __cleanup_sighand+0xb0/0xb0 [ 2448.417753][T11994] kernel_clone+0xeb/0x990 [ 2448.422190][T11994] ? create_io_thread+0xf0/0xf0 [ 2448.427062][T11994] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2448.432729][T11994] ? wait_for_completion_io_timeout+0x20/0x20 [ 2448.438835][T11994] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2448.444399][T11994] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2448.450322][T11994] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2448.456933][T11994] ? lockdep_hardirqs_on+0x7d/0x100 [ 2448.462150][T11994] __do_fast_syscall_32+0x65/0xf0 [ 2448.467201][T11994] do_fast_syscall_32+0x33/0x70 [ 2448.472078][T11994] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2448.478428][T11994] RIP: 0023:0xf7f01549 [ 2448.482507][T11994] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2448.502133][T11994] RSP: 002b:00000000f7efc57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2448.510569][T11994] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2448.518549][T11994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2448.526535][T11994] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2448.534519][T11994] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2448.542505][T11994] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 20:46:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="7a4034eef82acdc7dbbad31aaec2bb35ba028276269153ef71bfc8c4991971ebf26aa499a119002c6562fc4f7a594060374974721a3f4d81f965f060cecc97f505ebcc108638623dd87172a9315cc767e76a96344b45f61e99484e07c176a6544cd592425850671f018b1a035168de4dfe063c", 0x73, 0x40, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:41 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 2448.550502][T11994] [ 2448.565710][T11992] FAULT_INJECTION: forcing a failure. [ 2448.565710][T11992] name failslab, interval 1, probability 0, space 0, times 0 20:46:41 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 20:46:41 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0xfffffe7e) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00'}, 0x100) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r3, 0x0, 0xfffffe7e) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @remote, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r1, &(0x7f00000003c0)=0x8, 0x8001) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2c}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x120000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4044880) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2408a600}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4000840) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r11, 0x0, 0xfffffe7e) sendto$inet6(r11, &(0x7f0000000400)="23b0164ee77477aa0f165a40937dbc69c65b4b32d64b17081e01564c0339f062256ad1e253fdc790ddfa0b1fbbe144e90e84cb4db0f927cf2f44f47e297747979e0085b8c1ebee40ca244a3e06c91068e7da02692bfb47c11ca9cef126de3f266b23fccf818addd2fb861f367a2daf78c823a6bc27add6000d54452da353570acbfded5ec31347a0d016fd19782d2f9b0d855219e893fba6028308fad0cd24fb04", 0xa1, 0x4000040, &(0x7f00000004c0)={0xa, 0x4e20, 0x16, @mcast1, 0xefb}, 0x1c) sendfile(r2, r4, 0x0, 0x8000002b) dup(r1) [ 2448.638262][T11992] CPU: 0 PID: 11992 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2448.648504][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2448.658595][T11992] Call Trace: [ 2448.661901][T11992] [ 2448.664856][T11992] dump_stack_lvl+0xd1/0x138 [ 2448.669494][T11992] should_fail_ex.cold+0x5/0xa [ 2448.674327][T11992] ? copy_process+0x3aa/0x7520 [ 2448.679140][T11992] should_failslab+0x9/0x20 [ 2448.683697][T11992] kmem_cache_alloc_node+0x5c/0x460 [ 2448.688944][T11992] copy_process+0x3aa/0x7520 [ 2448.693573][T11992] ? find_held_lock+0x2d/0x110 [ 2448.698397][T11992] ? get_pid_task+0xec/0x210 [ 2448.703030][T11992] ? lock_downgrade+0x6e0/0x6e0 [ 2448.707919][T11992] ? kstrtouint+0x120/0x120 [ 2448.712459][T11992] ? __cleanup_sighand+0xb0/0xb0 [ 2448.717460][T11992] kernel_clone+0xeb/0x990 [ 2448.721918][T11992] ? create_io_thread+0xf0/0xf0 [ 2448.726809][T11992] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2448.732498][T11992] ? wait_for_completion_io_timeout+0x20/0x20 [ 2448.738630][T11992] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2448.744219][T11992] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2448.750167][T11992] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2448.756796][T11992] ? lockdep_hardirqs_on+0x7d/0x100 [ 2448.762040][T11992] __do_fast_syscall_32+0x65/0xf0 [ 2448.767114][T11992] do_fast_syscall_32+0x33/0x70 [ 2448.772016][T11992] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2448.778404][T11992] RIP: 0023:0xf7f7c549 20:46:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x6, @rand_addr, 0x200}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="bb0000005353cc1684ef7089f168396e661ed0aa2ce0c92e0c0fb82357caf761a8d6c5dafb4fd5e0b2ebc5859e30c16979bbbc8f93901084b21da076b69ab7e4b6a2f7392681def06646aa5494ea8db5bad40e9f10d74459ce2d071290a95912c9266e233c7f17a74288efde2a3e4a8cf80f8e6b9ee0232033e2a32a836612aa1d39390b49fcb93f7dd01f3253c2ef1181ddf68bc7418de3d066add21dcfb49d0dc6baa96b22e00a1934b30104000099340d308d506551083c000000000000"], &(0x7f0000000000)=0xc3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = openat$zero(0xffffff9c, &(0x7f0000000300), 0x4800, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) sendto$inet6(r4, &(0x7f0000000380)="66c4e6b4f73c1a66989eab3aa45b214f8521eb60ca11b66b6c7d53f5469bfc7d09d1a703305bcd2c56053c22b043e876f4e8da3f5e353dfc25d6b51787d8ee61aaf1495745de3868881b45fb04d42d10a6d9107df33697a2027b8ef292fc2dad2c55e29396fad0d581391997f4eb5210783e6abbfc3a7d6b5946f0956ae8809423cbaac176b1e0f98596f464aee05efaee5af0bead3b9100d8e5b5a91b0664dc53f8137ab021ac9d48cc3d9e6d1279c64090bd5fe981ae0bf571fa5afd8e7ca88d92be27789a25c69b46647abd870a783c566bf42560afbaab147cf54e45c51906501413ed419440cbf9feb78197", 0xee, 0x0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @empty, 0xa88c}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000340)=0xffffffd4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f00000002c0)=0xc) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2448.782500][T11992] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2448.802163][T11992] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2448.806746][T12011] FAULT_INJECTION: forcing a failure. [ 2448.806746][T12011] name failslab, interval 1, probability 0, space 0, times 0 [ 2448.810594][T11992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 20:46:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x79c80000) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2448.810617][T11992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2448.810636][T11992] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2448.810655][T11992] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2448.810673][T11992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2448.810709][T11992] [ 2448.887644][T12011] CPU: 0 PID: 12011 Comm: syz-executor.4 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2448.897776][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2448.907863][T12011] Call Trace: [ 2448.911171][T12011] [ 2448.914138][T12011] dump_stack_lvl+0xd1/0x138 [ 2448.918784][T12011] should_fail_ex.cold+0x5/0xa [ 2448.923607][T12011] ? alloc_vmap_area+0x16c/0x1ed0 [ 2448.928681][T12011] should_failslab+0x9/0x20 [ 2448.933238][T12011] kmem_cache_alloc_node+0x5c/0x460 [ 2448.938479][T12011] alloc_vmap_area+0x16c/0x1ed0 [ 2448.943407][T12011] ? free_vmap_area+0x1ab0/0x1ab0 [ 2448.948590][T12011] __get_vm_area_node+0x142/0x3f0 [ 2448.953681][T12011] __vmalloc_node_range+0x25b/0x13c0 [ 2448.959028][T12011] ? kernel_clone+0xeb/0x990 [ 2448.963682][T12011] ? kernel_clone+0xeb/0x990 [ 2448.968318][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2448.973216][T12011] ? vfree_atomic+0xe0/0xe0 [ 2448.977758][T12011] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2448.983360][T12011] ? trace_kmem_cache_alloc+0x35/0x100 [ 2448.988942][T12011] ? kernel_clone+0xeb/0x990 [ 2448.993563][T12011] copy_process+0x12d2/0x7520 [ 2448.998265][T12011] ? kernel_clone+0xeb/0x990 [ 2449.002881][T12011] ? find_held_lock+0x2d/0x110 [ 2449.007687][T12011] ? get_pid_task+0xec/0x210 [ 2449.012310][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2449.017178][T12011] ? kstrtouint+0x120/0x120 [ 2449.021706][T12011] ? __cleanup_sighand+0xb0/0xb0 [ 2449.026685][T12011] kernel_clone+0xeb/0x990 [ 2449.031128][T12011] ? create_io_thread+0xf0/0xf0 [ 2449.036003][T12011] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2449.041671][T12011] ? wait_for_completion_io_timeout+0x20/0x20 [ 2449.047775][T12011] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2449.053340][T12011] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2449.059263][T12011] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2449.065873][T12011] ? lockdep_hardirqs_on+0x7d/0x100 [ 2449.071089][T12011] __do_fast_syscall_32+0x65/0xf0 [ 2449.076144][T12011] do_fast_syscall_32+0x33/0x70 [ 2449.081023][T12011] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2449.087372][T12011] RIP: 0023:0xf7f01549 [ 2449.091451][T12011] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2449.111073][T12011] RSP: 002b:00000000f7efc57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2449.119508][T12011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2449.127494][T12011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:46:41 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x79c80000) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2449.135477][T12011] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2449.143481][T12011] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2449.151485][T12011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2449.159505][T12011] [ 2449.166728][T12011] syz-executor.4: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2449.198838][T12017] FAULT_INJECTION: forcing a failure. [ 2449.198838][T12017] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.236851][T12017] CPU: 0 PID: 12017 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2449.246981][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2449.257066][T12017] Call Trace: [ 2449.260371][T12017] [ 2449.263325][T12017] dump_stack_lvl+0xd1/0x138 [ 2449.267964][T12017] should_fail_ex.cold+0x5/0xa [ 2449.272781][T12017] ? prepare_creds+0x43/0x7b0 [ 2449.277510][T12017] should_failslab+0x9/0x20 [ 2449.282057][T12017] kmem_cache_alloc+0x5a/0x430 [ 2449.286837][T12017] ? __validate_process_creds+0x210/0x370 [ 2449.292585][T12017] prepare_creds+0x43/0x7b0 [ 2449.297090][T12017] copy_creds+0xa7/0xd50 [ 2449.301335][T12017] copy_process+0xd60/0x7520 [ 2449.305923][T12017] ? find_held_lock+0x2d/0x110 [ 2449.310691][T12017] ? get_pid_task+0xec/0x210 [ 2449.315281][T12017] ? __cleanup_sighand+0xb0/0xb0 [ 2449.320227][T12017] kernel_clone+0xeb/0x990 [ 2449.324642][T12017] ? create_io_thread+0xf0/0xf0 [ 2449.329492][T12017] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2449.335127][T12017] ? wait_for_completion_io_timeout+0x20/0x20 [ 2449.341199][T12017] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2449.346739][T12017] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2449.352632][T12017] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2449.359215][T12017] ? lockdep_hardirqs_on+0x7d/0x100 [ 2449.364409][T12017] __do_fast_syscall_32+0x65/0xf0 [ 2449.369432][T12017] do_fast_syscall_32+0x33/0x70 [ 2449.374283][T12017] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2449.380615][T12017] RIP: 0023:0xf7f0f549 [ 2449.384674][T12017] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2449.404271][T12017] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2449.412675][T12017] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2449.420637][T12017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2449.428598][T12017] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2449.436557][T12017] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2449.444518][T12017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2449.452492][T12017] [ 2449.508601][T12011] CPU: 0 PID: 12011 Comm: syz-executor.4 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2449.518822][T12011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2449.528903][T12011] Call Trace: [ 2449.532202][T12011] [ 2449.535150][T12011] dump_stack_lvl+0xd1/0x138 [ 2449.539785][T12011] warn_alloc.cold+0x95/0x1a7 [ 2449.544507][T12011] ? zone_watermark_ok_safe+0x300/0x300 [ 2449.550094][T12011] ? slab_free_freelist_hook+0x8b/0x1c0 [ 2449.555707][T12011] ? __get_vm_area_node+0x297/0x3f0 [ 2449.560966][T12011] __vmalloc_node_range+0xe12/0x13c0 [ 2449.566307][T12011] ? kernel_clone+0xeb/0x990 [ 2449.570945][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2449.575835][T12011] ? vfree_atomic+0xe0/0xe0 [ 2449.580380][T12011] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2449.585979][T12011] ? trace_kmem_cache_alloc+0x35/0x100 [ 2449.591496][T12011] ? kernel_clone+0xeb/0x990 [ 2449.596130][T12011] copy_process+0x12d2/0x7520 [ 2449.600846][T12011] ? kernel_clone+0xeb/0x990 [ 2449.605476][T12011] ? find_held_lock+0x2d/0x110 [ 2449.610292][T12011] ? get_pid_task+0xec/0x210 [ 2449.614910][T12011] ? lock_downgrade+0x6e0/0x6e0 [ 2449.619776][T12011] ? kstrtouint+0x120/0x120 [ 2449.624310][T12011] ? __cleanup_sighand+0xb0/0xb0 [ 2449.629282][T12011] kernel_clone+0xeb/0x990 [ 2449.633724][T12011] ? create_io_thread+0xf0/0xf0 [ 2449.638599][T12011] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2449.644266][T12011] ? wait_for_completion_io_timeout+0x20/0x20 [ 2449.650372][T12011] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2449.655936][T12011] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2449.661858][T12011] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2449.668472][T12011] ? lockdep_hardirqs_on+0x7d/0x100 [ 2449.673690][T12011] __do_fast_syscall_32+0x65/0xf0 [ 2449.678743][T12011] do_fast_syscall_32+0x33/0x70 [ 2449.683642][T12011] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2449.689992][T12011] RIP: 0023:0xf7f01549 [ 2449.694072][T12011] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2449.713785][T12011] RSP: 002b:00000000f7efc57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2449.722215][T12011] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2449.730198][T12011] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2449.738177][T12011] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2449.746157][T12011] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 20:46:42 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 32) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)=0x79c80000) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (rerun: 32) 20:46:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) read$rfkill(0xffffffffffffffff, 0x0, 0xfffffe7e) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00'}, 0x100) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r3, 0x0, 0xfffffe7e) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @remote, 0xd}, 0x1c) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendfile(r2, r1, &(0x7f00000003c0)=0x8, 0x8001) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2c}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x120000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4044880) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2408a600}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4000840) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r11, 0x0, 0xfffffe7e) (async) sendto$inet6(r11, &(0x7f0000000400)="23b0164ee77477aa0f165a40937dbc69c65b4b32d64b17081e01564c0339f062256ad1e253fdc790ddfa0b1fbbe144e90e84cb4db0f927cf2f44f47e297747979e0085b8c1ebee40ca244a3e06c91068e7da02692bfb47c11ca9cef126de3f266b23fccf818addd2fb861f367a2daf78c823a6bc27add6000d54452da353570acbfded5ec31347a0d016fd19782d2f9b0d855219e893fba6028308fad0cd24fb04", 0xa1, 0x4000040, &(0x7f00000004c0)={0xa, 0x4e20, 0x16, @mcast1, 0xefb}, 0x1c) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) dup(r1) 20:46:42 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 2449.754136][T12011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2449.762140][T12011] [ 2449.784239][T12011] Mem-Info: 20:46:42 executing program 5: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1270020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x549d, 0xfffffff7}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 20:46:42 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) read$rfkill(0xffffffffffffffff, 0x0, 0xfffffe7e) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00'}, 0x100) (async, rerun: 32) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r3, 0x0, 0xfffffe7e) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @remote, 0xd}, 0x1c) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendfile(r2, r1, &(0x7f00000003c0)=0x8, 0x8001) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r7, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2c}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x120000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4044880) (async, rerun: 32) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2408a600}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4000840) (rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r11, 0x0, 0xfffffe7e) sendto$inet6(r11, &(0x7f0000000400)="23b0164ee77477aa0f165a40937dbc69c65b4b32d64b17081e01564c0339f062256ad1e253fdc790ddfa0b1fbbe144e90e84cb4db0f927cf2f44f47e297747979e0085b8c1ebee40ca244a3e06c91068e7da02692bfb47c11ca9cef126de3f266b23fccf818addd2fb861f367a2daf78c823a6bc27add6000d54452da353570acbfded5ec31347a0d016fd19782d2f9b0d855219e893fba6028308fad0cd24fb04", 0xa1, 0x4000040, &(0x7f00000004c0)={0xa, 0x4e20, 0x16, @mcast1, 0xefb}, 0x1c) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) dup(r1) [ 2449.828586][T12011] active_anon:15614 inactive_anon:126093 isolated_anon:0 [ 2449.828586][T12011] active_file:12433 inactive_file:503 isolated_file:0 [ 2449.828586][T12011] unevictable:768 dirty:0 writeback:0 [ 2449.828586][T12011] slab_reclaimable:20439 slab_unreclaimable:104000 [ 2449.828586][T12011] mapped:19784 shmem:16598 pagetables:784 [ 2449.828586][T12011] sec_pagetables:0 bounce:0 [ 2449.828586][T12011] kernel_misc_reclaimable:0 [ 2449.828586][T12011] free:1278690 free_pcp:11152 free_cma:0 20:46:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x6, @rand_addr, 0x200}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="bb0000005353cc1684ef7089f168396e661ed0aa2ce0c92e0c0fb82357caf761a8d6c5dafb4fd5e0b2ebc5859e30c16979bbbc8f93901084b21da076b69ab7e4b6a2f7392681def06646aa5494ea8db5bad40e9f10d74459ce2d071290a95912c9266e233c7f17a74288efde2a3e4a8cf80f8e6b9ee0232033e2a32a836612aa1d39390b49fcb93f7dd01f3253c2ef1181ddf68bc7418de3d066add21dcfb49d0dc6baa96b22e00a1934b30104000099340d308d506551083c000000000000"], &(0x7f0000000000)=0xc3) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r1 = openat$zero(0xffffff9c, &(0x7f0000000300), 0x4800, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) sendto$inet6(r4, &(0x7f0000000380)="66c4e6b4f73c1a66989eab3aa45b214f8521eb60ca11b66b6c7d53f5469bfc7d09d1a703305bcd2c56053c22b043e876f4e8da3f5e353dfc25d6b51787d8ee61aaf1495745de3868881b45fb04d42d10a6d9107df33697a2027b8ef292fc2dad2c55e29396fad0d581391997f4eb5210783e6abbfc3a7d6b5946f0956ae8809423cbaac176b1e0f98596f464aee05efaee5af0bead3b9100d8e5b5a91b0664dc53f8137ab021ac9d48cc3d9e6d1279c64090bd5fe981ae0bf571fa5afd8e7ca88d92be27789a25c69b46647abd870a783c566bf42560afbaab147cf54e45c51906501413ed419440cbf9feb78197", 0xee, 0x0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @empty, 0xa88c}, 0x1c) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000340)=0xffffffd4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f00000002c0)=0xc) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2449.906137][T12042] FAULT_INJECTION: forcing a failure. [ 2449.906137][T12042] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.930378][T12044] FAULT_INJECTION: forcing a failure. [ 2449.930378][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.943417][T12042] CPU: 1 PID: 12042 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2449.953531][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2449.963617][T12042] Call Trace: [ 2449.966928][T12042] [ 2449.969892][T12042] dump_stack_lvl+0xd1/0x138 [ 2449.974539][T12042] should_fail_ex.cold+0x5/0xa [ 2449.979367][T12042] ? alloc_vmap_area+0x16c/0x1ed0 [ 2449.984453][T12042] should_failslab+0x9/0x20 [ 2449.989009][T12042] kmem_cache_alloc_node+0x5c/0x460 [ 2449.994252][T12042] alloc_vmap_area+0x16c/0x1ed0 [ 2449.999146][T12042] ? __kmem_cache_alloc_node+0x27b/0x430 [ 2450.004814][T12042] ? free_vmap_area+0x1ab0/0x1ab0 [ 2450.009892][T12042] __get_vm_area_node+0x142/0x3f0 [ 2450.014962][T12042] __vmalloc_node_range+0x25b/0x13c0 [ 2450.020269][T12042] ? kernel_clone+0xeb/0x990 [ 2450.024893][T12042] ? kernel_clone+0xeb/0x990 [ 2450.029506][T12042] ? lock_downgrade+0x6e0/0x6e0 [ 2450.034377][T12042] ? vfree_atomic+0xe0/0xe0 [ 2450.038901][T12042] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2450.044480][T12042] ? trace_kmem_cache_alloc+0x35/0x100 [ 2450.049975][T12042] ? kernel_clone+0xeb/0x990 [ 2450.054595][T12042] copy_process+0x12d2/0x7520 [ 2450.059294][T12042] ? kernel_clone+0xeb/0x990 [ 2450.063901][T12042] ? find_held_lock+0x2d/0x110 [ 2450.068695][T12042] ? get_pid_task+0xec/0x210 [ 2450.073310][T12042] ? lock_downgrade+0x6e0/0x6e0 [ 2450.078177][T12042] ? kstrtouint+0x120/0x120 [ 2450.082702][T12042] ? __cleanup_sighand+0xb0/0xb0 [ 2450.087686][T12042] kernel_clone+0xeb/0x990 [ 2450.092132][T12042] ? create_io_thread+0xf0/0xf0 [ 2450.097005][T12042] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2450.102673][T12042] ? wait_for_completion_io_timeout+0x20/0x20 [ 2450.108793][T12042] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2450.114364][T12042] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2450.120288][T12042] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2450.126903][T12042] ? lockdep_hardirqs_on+0x7d/0x100 [ 2450.132124][T12042] __do_fast_syscall_32+0x65/0xf0 [ 2450.137183][T12042] do_fast_syscall_32+0x33/0x70 [ 2450.142069][T12042] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2450.148423][T12042] RIP: 0023:0xf7f0f549 [ 2450.152506][T12042] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2450.172128][T12042] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2450.180558][T12042] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2450.188538][T12042] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2450.196519][T12042] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2450.204603][T12042] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2450.212582][T12042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2450.220580][T12042] [ 2450.272108][T12011] Node 0 active_anon:62456kB inactive_anon:504560kB active_file:49656kB inactive_file:2012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79136kB dirty:0kB writeback:0kB shmem:64856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB kernel_stack:10636kB pagetables:3236kB sec_pagetables:0kB all_unreclaimable? no [ 2450.288570][T12044] CPU: 0 PID: 12044 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2450.306816][T12011] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2450.315142][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2450.315161][T12044] Call Trace: [ 2450.315169][T12044] [ 2450.315179][T12044] dump_stack_lvl+0xd1/0x138 [ 2450.315220][T12044] should_fail_ex.cold+0x5/0xa [ 2450.315266][T12044] should_failslab+0x9/0x20 [ 2450.347174][T12011] Node 0 [ 2450.355555][T12044] __kmem_cache_alloc_node+0x5b/0x430 [ 2450.355588][T12044] ? __get_vm_area_node+0xed/0x3f0 [ 2450.355638][T12044] kmalloc_node_trace+0x21/0x60 [ 2450.361935][T12011] DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2450.366434][T12044] __get_vm_area_node+0xed/0x3f0 [ 2450.376018][T12011] lowmem_reserve[]: [ 2450.378627][T12044] __vmalloc_node_range+0x25b/0x13c0 [ 2450.378661][T12044] ? kernel_clone+0xeb/0x990 [ 2450.378707][T12044] ? kernel_clone+0xeb/0x990 [ 2450.378740][T12044] ? lock_downgrade+0x6e0/0x6e0 [ 2450.384154][T12011] 0 [ 2450.389179][T12044] ? vfree_atomic+0xe0/0xe0 [ 2450.389215][T12044] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2450.389257][T12044] ? trace_kmem_cache_alloc+0x35/0x100 [ 2450.389297][T12044] ? kernel_clone+0xeb/0x990 [ 2450.389330][T12044] copy_process+0x12d2/0x7520 [ 2450.389361][T12044] ? kernel_clone+0xeb/0x990 [ 2450.389392][T12044] ? find_held_lock+0x2d/0x110 [ 2450.389440][T12044] ? get_pid_task+0xec/0x210 [ 2450.389478][T12044] ? lock_downgrade+0x6e0/0x6e0 [ 2450.389505][T12044] ? kstrtouint+0x120/0x120 [ 2450.389539][T12044] ? __cleanup_sighand+0xb0/0xb0 [ 2450.389591][T12044] kernel_clone+0xeb/0x990 [ 2450.389628][T12044] ? create_io_thread+0xf0/0xf0 [ 2450.389666][T12044] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2450.389716][T12044] ? wait_for_completion_io_timeout+0x20/0x20 [ 2450.389770][T12044] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2450.395381][T12011] 2619 [ 2450.420952][T12044] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2450.421000][T12044] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2450.421034][T12044] ? lockdep_hardirqs_on+0x7d/0x100 [ 2450.421064][T12044] __do_fast_syscall_32+0x65/0xf0 [ 2450.421107][T12044] do_fast_syscall_32+0x33/0x70 [ 2450.421145][T12044] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2450.421180][T12044] RIP: 0023:0xf7f7c549 [ 2450.421203][T12044] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2450.421229][T12044] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2450.421255][T12044] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2450.421274][T12044] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2450.421293][T12044] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2450.623779][T12044] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2450.631767][T12044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2450.639764][T12044] [ 2450.659848][T12011] 2621 2621 2621 [ 2450.663563][T12011] Node 0 DMA32 free:1182420kB boost:0kB min:35456kB low:44320kB high:53184kB reserved_highatomic:0KB active_anon:62456kB inactive_anon:504460kB active_file:49656kB inactive_file:2012kB unevictable:1536kB writepending:0kB present:3129332kB managed:2686608kB mlocked:0kB bounce:0kB free_pcp:11876kB local_pcp:2252kB free_cma:0kB [ 2450.710398][T12011] lowmem_reserve[]: 0 0 1 1 1 [ 2450.726560][T12011] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1868kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 2450.754318][T12011] lowmem_reserve[]: 0 0 0 0 0 [ 2450.761687][T12011] Node 1 Normal free:3939344kB boost:0kB min:54424kB low:68028kB high:81632kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117608kB mlocked:0kB bounce:0kB free_pcp:11396kB local_pcp:5700kB free_cma:0kB [ 2450.791471][T12011] lowmem_reserve[]: 0 0 0 0 0 [ 2450.796531][T12011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2450.836037][T12011] Node 0 DMA32: 2737*4kB (UME) 964*8kB (UME) 1493*16kB (UME) 1639*32kB (UME) 517*64kB (UME) 141*128kB (UME) 32*256kB (UM) 12*512kB (UME) 8*1024kB (M) 3*2048kB (M) 246*4096kB (UME) = 1182420kB [ 2450.855758][T12011] Node 0 Normal: 3*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 2450.870184][T12011] Node 1 Normal: 126*4kB (UME) 33*8kB (UME) 27*16kB (UME) 97*32kB (UME) 31*64kB (UME) 7*128kB (UME) 2*256kB (UM) 3*512kB (UME) 0*1024kB 1*2048kB (U) 959*4096kB (M) = 3939344kB [ 2450.888358][T12011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.898130][T12011] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 2450.908440][T12011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2450.918124][T12011] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2450.927535][T12011] 29538 total pagecache pages [ 2450.932224][T12011] 0 pages in swap cache 20:46:43 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x6, @rand_addr, 0x200}, 0x1c) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="bb0000005353cc1684ef7089f168396e661ed0aa2ce0c92e0c0fb82357caf761a8d6c5dafb4fd5e0b2ebc5859e30c16979bbbc8f93901084b21da076b69ab7e4b6a2f7392681def06646aa5494ea8db5bad40e9f10d74459ce2d071290a95912c9266e233c7f17a74288efde2a3e4a8cf80f8e6b9ee0232033e2a32a836612aa1d39390b49fcb93f7dd01f3253c2ef1181ddf68bc7418de3d066add21dcfb49d0dc6baa96b22e00a1934b30104000099340d308d506551083c000000000000"], &(0x7f0000000000)=0xc3) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r1 = openat$zero(0xffffff9c, &(0x7f0000000300), 0x4800, 0x0) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) sendto$inet6(r4, &(0x7f0000000380)="66c4e6b4f73c1a66989eab3aa45b214f8521eb60ca11b66b6c7d53f5469bfc7d09d1a703305bcd2c56053c22b043e876f4e8da3f5e353dfc25d6b51787d8ee61aaf1495745de3868881b45fb04d42d10a6d9107df33697a2027b8ef292fc2dad2c55e29396fad0d581391997f4eb5210783e6abbfc3a7d6b5946f0956ae8809423cbaac176b1e0f98596f464aee05efaee5af0bead3b9100d8e5b5a91b0664dc53f8137ab021ac9d48cc3d9e6d1279c64090bd5fe981ae0bf571fa5afd8e7ca88d92be27789a25c69b46647abd870a783c566bf42560afbaab147cf54e45c51906501413ed419440cbf9feb78197", 0xee, 0x0, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @empty, 0xa88c}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000340)=0xffffffd4, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, &(0x7f00000002c0)=0xc) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:43 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="273e33a5b730addb9543c1c3390c36f23effee7ba89f929bdf962e8353ed6e3975e97aa3bec9a75c3c028eddc827067d52f53589b9c353d5a41b9d5bd165698fa18d7c6e93bb8612e4fe15d119985e5a464bd90d0cba40c928012c53c7107da2b770b89b03511bbc2407d1998d12fbd3f05bb32ff62cd77c429551c04458b5a933c40492c1a5e2e00fcf3959ac6f57720dcb16068a0ead19c09eb29c5b31fe", 0x9f, 0x801, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) 20:46:43 executing program 5: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1270020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x549d, 0xfffffff7}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 20:46:43 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 20:46:43 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 2450.936428][T12011] Free swap = 0kB [ 2450.940246][T12011] Total swap = 0kB [ 2450.943979][T12011] 2097051 pages RAM [ 2450.947876][T12011] 0 pages HighMem/MovableOnly [ 2450.952571][T12011] 391690 pages reserved [ 2450.956738][T12011] 0 pages cma reserved 20:46:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0xff}, 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2451.048262][T12070] FAULT_INJECTION: forcing a failure. [ 2451.048262][T12070] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2451.080902][T12073] FAULT_INJECTION: forcing a failure. [ 2451.080902][T12073] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.105652][T12073] CPU: 1 PID: 12073 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2451.115768][T12073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2451.125823][T12073] Call Trace: [ 2451.129107][T12073] [ 2451.132049][T12073] dump_stack_lvl+0xd1/0x138 [ 2451.136643][T12073] should_fail_ex.cold+0x5/0xa [ 2451.141412][T12073] ? alloc_vmap_area+0x16c/0x1ed0 [ 2451.146438][T12073] should_failslab+0x9/0x20 [ 2451.150943][T12073] kmem_cache_alloc_node+0x5c/0x460 [ 2451.156142][T12073] alloc_vmap_area+0x16c/0x1ed0 [ 2451.161006][T12073] ? free_vmap_area+0x1ab0/0x1ab0 [ 2451.166040][T12073] __get_vm_area_node+0x142/0x3f0 [ 2451.171083][T12073] __vmalloc_node_range+0x25b/0x13c0 [ 2451.176363][T12073] ? kernel_clone+0xeb/0x990 [ 2451.180958][T12073] ? kernel_clone+0xeb/0x990 [ 2451.185547][T12073] ? lock_downgrade+0x6e0/0x6e0 [ 2451.190396][T12073] ? vfree_atomic+0xe0/0xe0 [ 2451.194895][T12073] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2451.200444][T12073] ? trace_kmem_cache_alloc+0x35/0x100 [ 2451.205908][T12073] ? kernel_clone+0xeb/0x990 [ 2451.210518][T12073] copy_process+0x12d2/0x7520 [ 2451.215229][T12073] ? kernel_clone+0xeb/0x990 [ 2451.219842][T12073] ? find_held_lock+0x2d/0x110 [ 2451.224638][T12073] ? get_pid_task+0xec/0x210 [ 2451.229252][T12073] ? lock_downgrade+0x6e0/0x6e0 [ 2451.234118][T12073] ? kstrtouint+0x120/0x120 [ 2451.238644][T12073] ? __cleanup_sighand+0xb0/0xb0 [ 2451.243615][T12073] kernel_clone+0xeb/0x990 [ 2451.248053][T12073] ? create_io_thread+0xf0/0xf0 [ 2451.252925][T12073] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2451.258596][T12073] ? wait_for_completion_io_timeout+0x20/0x20 [ 2451.264704][T12073] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2451.270268][T12073] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2451.276204][T12073] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2451.282816][T12073] ? lockdep_hardirqs_on+0x7d/0x100 [ 2451.288034][T12073] __do_fast_syscall_32+0x65/0xf0 [ 2451.293091][T12073] do_fast_syscall_32+0x33/0x70 [ 2451.297970][T12073] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2451.304319][T12073] RIP: 0023:0xf7f7c549 [ 2451.308421][T12073] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2451.328052][T12073] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2451.336486][T12073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2451.344475][T12073] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2451.352457][T12073] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2451.360437][T12073] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2451.368424][T12073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2451.376426][T12073] [ 2451.420096][T12070] CPU: 1 PID: 12070 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2451.430231][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2451.440317][T12070] Call Trace: [ 2451.443618][T12070] [ 2451.446571][T12070] dump_stack_lvl+0xd1/0x138 [ 2451.451208][T12070] should_fail_ex.cold+0x5/0xa [ 2451.456029][T12070] prepare_alloc_pages+0x178/0x570 [ 2451.461171][T12070] ? __lock_acquire+0x166e/0x56d0 [ 2451.466217][T12070] __alloc_pages+0x149/0x5b0 [ 2451.470826][T12070] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2451.477620][T12070] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2451.483637][T12070] alloc_pages+0x1aa/0x270 [ 2451.488071][T12070] __get_free_pages+0xc/0x40 [ 2451.492674][T12070] kasan_populate_vmalloc_pte+0x27/0x150 [ 2451.498339][T12070] __apply_to_page_range+0x68c/0x1030 [ 2451.503736][T12070] ? kasan_poison+0x60/0x60 [ 2451.508272][T12070] alloc_vmap_area+0x512/0x1ed0 [ 2451.513165][T12070] ? free_vmap_area+0x1ab0/0x1ab0 [ 2451.518231][T12070] __get_vm_area_node+0x142/0x3f0 [ 2451.523293][T12070] __vmalloc_node_range+0x25b/0x13c0 [ 2451.528597][T12070] ? kernel_clone+0xeb/0x990 [ 2451.533223][T12070] ? kernel_clone+0xeb/0x990 [ 2451.537833][T12070] ? lock_downgrade+0x6e0/0x6e0 [ 2451.542701][T12070] ? vfree_atomic+0xe0/0xe0 [ 2451.547224][T12070] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2451.552798][T12070] ? trace_kmem_cache_alloc+0x35/0x100 [ 2451.558283][T12070] ? kernel_clone+0xeb/0x990 [ 2451.562897][T12070] copy_process+0x12d2/0x7520 [ 2451.567591][T12070] ? kernel_clone+0xeb/0x990 [ 2451.572198][T12070] ? find_held_lock+0x2d/0x110 [ 2451.577006][T12070] ? get_pid_task+0xec/0x210 [ 2451.581620][T12070] ? lock_downgrade+0x6e0/0x6e0 [ 2451.586482][T12070] ? kstrtouint+0x120/0x120 [ 2451.591004][T12070] ? __cleanup_sighand+0xb0/0xb0 [ 2451.595976][T12070] kernel_clone+0xeb/0x990 [ 2451.600416][T12070] ? create_io_thread+0xf0/0xf0 [ 2451.605293][T12070] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2451.610962][T12070] ? wait_for_completion_io_timeout+0x20/0x20 [ 2451.617074][T12070] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2451.622639][T12070] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2451.628558][T12070] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2451.635165][T12070] ? lockdep_hardirqs_on+0x7d/0x100 [ 2451.640377][T12070] __do_fast_syscall_32+0x65/0xf0 [ 2451.645437][T12070] do_fast_syscall_32+0x33/0x70 [ 2451.650311][T12070] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2451.656660][T12070] RIP: 0023:0xf7f0f549 [ 2451.660739][T12070] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2451.680361][T12070] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2451.688796][T12070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2451.696786][T12070] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2451.704765][T12070] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2451.712744][T12070] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 20:46:44 executing program 5: sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1270020}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x549d, 0xfffffff7}}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic\x00', 0x6) 20:46:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0xff}, 0x1c) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async, rerun: 32) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2451.720723][T12070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2451.728719][T12070] 20:46:44 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 20:46:44 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) dup(r0) 20:46:44 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2451.977303][T12100] FAULT_INJECTION: forcing a failure. [ 2451.977303][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.993817][T12098] FAULT_INJECTION: forcing a failure. [ 2451.993817][T12098] name failslab, interval 1, probability 0, space 0, times 0 20:46:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="273e33a5b730addb9543c1c3390c36f23effee7ba89f929bdf962e8353ed6e3975e97aa3bec9a75c3c028eddc827067d52f53589b9c353d5a41b9d5bd165698fa18d7c6e93bb8612e4fe15d119985e5a464bd90d0cba40c928012c53c7107da2b770b89b03511bbc2407d1998d12fbd3f05bb32ff62cd77c429551c04458b5a933c40492c1a5e2e00fcf3959ac6f57720dcb16068a0ead19c09eb29c5b31fe", 0x9f, 0x801, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f00000000c0)="273e33a5b730addb9543c1c3390c36f23effee7ba89f929bdf962e8353ed6e3975e97aa3bec9a75c3c028eddc827067d52f53589b9c353d5a41b9d5bd165698fa18d7c6e93bb8612e4fe15d119985e5a464bd90d0cba40c928012c53c7107da2b770b89b03511bbc2407d1998d12fbd3f05bb32ff62cd77c429551c04458b5a933c40492c1a5e2e00fcf3959ac6f57720dcb16068a0ead19c09eb29c5b31fe", 0x9f, 0x801, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) (async) 20:46:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0xff}, 0x1c) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2452.039983][T12100] CPU: 1 PID: 12100 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2452.050113][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2452.060205][T12100] Call Trace: [ 2452.063514][T12100] [ 2452.066471][T12100] dump_stack_lvl+0xd1/0x138 [ 2452.071112][T12100] should_fail_ex.cold+0x5/0xa [ 2452.075937][T12100] ? dup_fd+0x8d/0xcb0 [ 2452.080052][T12100] should_failslab+0x9/0x20 [ 2452.084607][T12100] kmem_cache_alloc+0x5a/0x430 [ 2452.089419][T12100] dup_fd+0x8d/0xcb0 [ 2452.093357][T12100] ? trace_kmalloc+0x35/0x100 [ 2452.098086][T12100] ? apparmor_task_alloc+0x2bf/0x3b0 [ 2452.103430][T12100] ? bpf_lsm_task_alloc+0x9/0x10 [ 2452.108419][T12100] ? security_task_alloc+0xe4/0x250 [ 2452.113675][T12100] copy_process+0x24ea/0x7520 [ 2452.118398][T12100] ? find_held_lock+0x2d/0x110 [ 2452.123236][T12100] ? __cleanup_sighand+0xb0/0xb0 [ 2452.128239][T12100] kernel_clone+0xeb/0x990 [ 2452.132704][T12100] ? create_io_thread+0xf0/0xf0 [ 2452.137601][T12100] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2452.143301][T12100] ? wait_for_completion_io_timeout+0x20/0x20 [ 2452.149428][T12100] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2452.155002][T12100] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2452.160929][T12100] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2452.167548][T12100] ? lockdep_hardirqs_on+0x7d/0x100 [ 2452.172773][T12100] __do_fast_syscall_32+0x65/0xf0 [ 2452.177839][T12100] do_fast_syscall_32+0x33/0x70 [ 2452.182719][T12100] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2452.189103][T12100] RIP: 0023:0xf7f0f549 [ 2452.193186][T12100] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2452.212817][T12100] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2452.221255][T12100] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2452.229325][T12100] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:46:44 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) dup(r0) [ 2452.237305][T12100] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2452.245287][T12100] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2452.253267][T12100] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2452.261263][T12100] [ 2452.284042][T12098] CPU: 1 PID: 12098 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2452.294173][T12098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2452.304353][T12098] Call Trace: [ 2452.307657][T12098] [ 2452.310612][T12098] dump_stack_lvl+0xd1/0x138 [ 2452.315252][T12098] should_fail_ex.cold+0x5/0xa [ 2452.320075][T12098] should_failslab+0x9/0x20 [ 2452.324614][T12098] __kmem_cache_alloc_node+0x5b/0x430 [ 2452.330013][T12098] ? security_task_alloc+0x10f/0x250 [ 2452.335331][T12098] ? memset+0x24/0x50 [ 2452.339347][T12098] ? security_task_alloc+0x10f/0x250 [ 2452.344661][T12098] __kmalloc+0x4a/0xd0 [ 2452.348758][T12098] security_task_alloc+0x10f/0x250 [ 2452.353907][T12098] copy_process+0x2431/0x7520 [ 2452.358604][T12098] ? find_held_lock+0x2d/0x110 [ 2452.363409][T12098] ? __cleanup_sighand+0xb0/0xb0 [ 2452.368386][T12098] kernel_clone+0xeb/0x990 [ 2452.372831][T12098] ? create_io_thread+0xf0/0xf0 [ 2452.377794][T12098] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2452.383467][T12098] ? wait_for_completion_io_timeout+0x20/0x20 [ 2452.389575][T12098] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2452.395138][T12098] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2452.401062][T12098] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2452.407671][T12098] ? lockdep_hardirqs_on+0x7d/0x100 [ 2452.412891][T12098] __do_fast_syscall_32+0x65/0xf0 [ 2452.417946][T12098] do_fast_syscall_32+0x33/0x70 [ 2452.422828][T12098] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2452.429190][T12098] RIP: 0023:0xf7f7c549 [ 2452.433269][T12098] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2452.452891][T12098] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2452.461323][T12098] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2452.469305][T12098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2452.477288][T12098] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 20:46:45 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 2452.485270][T12098] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2452.493250][T12098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2452.501248][T12098] 20:46:45 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) dup(r0) (async) 20:46:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) sendto(0xffffffffffffffff, &(0x7f00000000c0)="273e33a5b730addb9543c1c3390c36f23effee7ba89f929bdf962e8353ed6e3975e97aa3bec9a75c3c028eddc827067d52f53589b9c353d5a41b9d5bd165698fa18d7c6e93bb8612e4fe15d119985e5a464bd90d0cba40c928012c53c7107da2b770b89b03511bbc2407d1998d12fbd3f05bb32ff62cd77c429551c04458b5a933c40492c1a5e2e00fcf3959ac6f57720dcb16068a0ead19c09eb29c5b31fe", 0x9f, 0x801, 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) [ 2452.594703][T12128] FAULT_INJECTION: forcing a failure. [ 2452.594703][T12128] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.622891][T12128] CPU: 0 PID: 12128 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2452.633028][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2452.643122][T12128] Call Trace: [ 2452.646431][T12128] [ 2452.649388][T12128] dump_stack_lvl+0xd1/0x138 [ 2452.654011][T12128] should_fail_ex.cold+0x5/0xa [ 2452.658813][T12128] should_failslab+0x9/0x20 [ 2452.663343][T12128] __kmem_cache_alloc_node+0x5b/0x430 [ 2452.668732][T12128] ? alloc_fdtable+0xa5/0x2a0 [ 2452.673441][T12128] ? do_raw_spin_lock+0x124/0x2b0 [ 2452.678492][T12128] kmalloc_trace+0x26/0x60 [ 2452.682936][T12128] alloc_fdtable+0xa5/0x2a0 [ 2452.687461][T12128] dup_fd+0x722/0xcb0 [ 2452.691472][T12128] copy_process+0x24ea/0x7520 [ 2452.696171][T12128] ? find_held_lock+0x2d/0x110 [ 2452.700974][T12128] ? __cleanup_sighand+0xb0/0xb0 [ 2452.705948][T12128] kernel_clone+0xeb/0x990 [ 2452.710386][T12128] ? create_io_thread+0xf0/0xf0 [ 2452.715265][T12128] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2452.720937][T12128] ? wait_for_completion_io_timeout+0x20/0x20 [ 2452.727046][T12128] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2452.732616][T12128] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2452.738540][T12128] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2452.745152][T12128] ? lockdep_hardirqs_on+0x7d/0x100 [ 2452.750370][T12128] __do_fast_syscall_32+0x65/0xf0 [ 2452.755423][T12128] do_fast_syscall_32+0x33/0x70 [ 2452.760306][T12128] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2452.766655][T12128] RIP: 0023:0xf7f0f549 [ 2452.770736][T12128] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 20:46:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2452.790359][T12128] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2452.798792][T12128] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2452.806777][T12128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2452.814757][T12128] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2452.822738][T12128] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2452.830717][T12128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2452.838715][T12128] 20:46:45 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x7, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_buf(r3, 0x29, 0x44, &(0x7f0000000100)=""/141, &(0x7f00000001c0)=0x8d) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:45 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) dup3(r2, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x74, 0x0, @fd=r2}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) ptrace(0x4207, r5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000100)={0xfffffffffffff000, 0x38, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r4, r6, 0x0, 0x8000002b) dup(r1) 20:46:45 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x4, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:45 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 20:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x7, 0x4) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_buf(r3, 0x29, 0x44, &(0x7f0000000100)=""/141, &(0x7f00000001c0)=0x8d) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) (rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0f00000001402db57aec95205f6434"], &(0x7f00000000c0)=0x13) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x5, 0xffff, 0x20, 0x1, 0x46, 0x6}, &(0x7f0000000400)=0x9c) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x2, 0xb4f, 0x200, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000004c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x1, 0x8000, 0x81, 0x5, 0x3, 0x3, 0x1f, r2}, 0x20) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x20, &(0x7f0000000240)) [ 2453.252469][T12168] FAULT_INJECTION: forcing a failure. [ 2453.252469][T12168] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:46:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0f00000001402db57aec95205f6434"], &(0x7f00000000c0)=0x13) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x5, 0xffff, 0x20, 0x1, 0x46, 0x6}, &(0x7f0000000400)=0x9c) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x2, 0xb4f, 0x200, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000004c0)=0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x1, 0x8000, 0x81, 0x5, 0x3, 0x3, 0x1f, r2}, 0x20) (async) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x20, &(0x7f0000000240)) 20:46:45 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 20:46:45 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x7, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_buf(r3, 0x29, 0x44, &(0x7f0000000100)=""/141, &(0x7f00000001c0)=0x8d) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000200)=0x7, 0x4) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r1, r2, 0x0) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) getsockopt$inet6_buf(r3, 0x29, 0x44, &(0x7f0000000100)=""/141, &(0x7f00000001c0)=0x8d) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000000c0)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2453.348482][T12168] CPU: 0 PID: 12168 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2453.358622][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2453.368695][T12168] Call Trace: [ 2453.371983][T12168] [ 2453.374923][T12168] dump_stack_lvl+0xd1/0x138 [ 2453.379543][T12168] should_fail_ex.cold+0x5/0xa [ 2453.384347][T12168] prepare_alloc_pages+0x178/0x570 [ 2453.389489][T12168] __alloc_pages+0x149/0x5b0 [ 2453.394104][T12168] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2453.400890][T12168] ? find_held_lock+0x2d/0x110 [ 2453.405686][T12168] ? lock_downgrade+0x6e0/0x6e0 [ 2453.410556][T12168] ? do_raw_spin_lock+0x124/0x2b0 [ 2453.415611][T12168] alloc_pages+0x1aa/0x270 [ 2453.420050][T12168] __get_free_pages+0xc/0x40 [ 2453.424659][T12168] kasan_populate_vmalloc_pte+0x27/0x150 [ 2453.430320][T12168] __apply_to_page_range+0x68c/0x1030 [ 2453.435718][T12168] ? kasan_poison+0x60/0x60 [ 2453.440257][T12168] alloc_vmap_area+0x512/0x1ed0 [ 2453.445151][T12168] ? free_vmap_area+0x1ab0/0x1ab0 [ 2453.450215][T12168] __get_vm_area_node+0x142/0x3f0 [ 2453.455280][T12168] __vmalloc_node_range+0x25b/0x13c0 [ 2453.460588][T12168] ? kernel_clone+0xeb/0x990 [ 2453.465211][T12168] ? kernel_clone+0xeb/0x990 [ 2453.469821][T12168] ? lock_downgrade+0x6e0/0x6e0 [ 2453.474690][T12168] ? vfree_atomic+0xe0/0xe0 [ 2453.479213][T12168] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2453.484795][T12168] ? trace_kmem_cache_alloc+0x35/0x100 [ 2453.490283][T12168] ? kernel_clone+0xeb/0x990 [ 2453.494895][T12168] copy_process+0x12d2/0x7520 [ 2453.499598][T12168] ? kernel_clone+0xeb/0x990 [ 2453.504204][T12168] ? find_held_lock+0x2d/0x110 [ 2453.509001][T12168] ? get_pid_task+0xec/0x210 [ 2453.513618][T12168] ? lock_downgrade+0x6e0/0x6e0 [ 2453.518483][T12168] ? kstrtouint+0x120/0x120 [ 2453.523006][T12168] ? __cleanup_sighand+0xb0/0xb0 [ 2453.527980][T12168] kernel_clone+0xeb/0x990 [ 2453.532421][T12168] ? create_io_thread+0xf0/0xf0 [ 2453.537296][T12168] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2453.543051][T12168] ? wait_for_completion_io_timeout+0x20/0x20 [ 2453.549159][T12168] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2453.554725][T12168] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2453.560647][T12168] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2453.567259][T12168] ? lockdep_hardirqs_on+0x7d/0x100 [ 2453.572478][T12168] __do_fast_syscall_32+0x65/0xf0 [ 2453.577531][T12168] do_fast_syscall_32+0x33/0x70 [ 2453.582414][T12168] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2453.588766][T12168] RIP: 0023:0xf7f7c549 [ 2453.592847][T12168] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2453.612469][T12168] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2453.620904][T12168] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2453.628888][T12168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2453.636869][T12168] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2453.644853][T12168] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2453.652834][T12168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2453.660834][T12168] 20:46:46 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:46 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) dup3(r2, r3, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x74, 0x0, @fd=r2}, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) ptrace(0x4207, r5) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000100)={0xfffffffffffff000, 0x38, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (rerun: 64) sendfile(r4, r6, 0x0, 0x8000002b) (async) dup(r1) 20:46:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x8000, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0f00000001402db57aec95205f6434"], &(0x7f00000000c0)=0x13) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x5, 0xffff, 0x20, 0x1, 0x46, 0x6}, &(0x7f0000000400)=0x9c) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x2, 0xb4f, 0x200, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000004c0)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x1, 0x8000, 0x81, 0x5, 0x3, 0x3, 0x1f, r2}, 0x20) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x20, &(0x7f0000000240)) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.events\x00', 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0f00000001402db57aec95205f6434"], &(0x7f00000000c0)=0x13) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x5, 0xffff, 0x20, 0x1, 0x46, 0x6}, &(0x7f0000000400)=0x9c) (async) fcntl$lock(r0, 0x7, &(0x7f0000000500)={0x1, 0x2, 0xb4f, 0x200, 0xffffffffffffffff}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={r3, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000004c0)=0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x3, 0x1, 0x8000, 0x81, 0x5, 0x3, 0x3, 0x1f, r2}, 0x20) (async) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400, 0x20, &(0x7f0000000240)) (async) 20:46:46 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 20:46:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) dup3(r2, r3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x74, 0x0, @fd=r2}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) ptrace(0x4207, r5) (async) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r8, 0xc038943b, &(0x7f0000000100)={0xfffffffffffff000, 0x38, '\x00', 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) process_vm_readv(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r4, r6, 0x0, 0x8000002b) (async) dup(r1) [ 2453.931128][T12198] FAULT_INJECTION: forcing a failure. [ 2453.931128][T12198] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:46:46 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x8000, 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x1, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x100) splice(r1, &(0x7f0000000300)=0x2, r2, &(0x7f0000000380), 0x9, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2454.043600][T12210] FAULT_INJECTION: forcing a failure. [ 2454.043600][T12210] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.056510][T12198] CPU: 1 PID: 12198 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2454.066615][T12198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2454.076706][T12198] Call Trace: [ 2454.080013][T12198] [ 2454.082971][T12198] dump_stack_lvl+0xd1/0x138 [ 2454.087617][T12198] should_fail_ex.cold+0x5/0xa [ 2454.092428][T12198] prepare_alloc_pages+0x178/0x570 [ 2454.097545][T12198] __alloc_pages+0x149/0x5b0 [ 2454.102135][T12198] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2454.108915][T12198] ? find_held_lock+0x2d/0x110 [ 2454.113738][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2454.118634][T12198] ? do_raw_spin_lock+0x124/0x2b0 [ 2454.123694][T12198] alloc_pages+0x1aa/0x270 [ 2454.128117][T12198] __get_free_pages+0xc/0x40 [ 2454.132698][T12198] kasan_populate_vmalloc_pte+0x27/0x150 [ 2454.138343][T12198] __apply_to_page_range+0x68c/0x1030 [ 2454.143730][T12198] ? kasan_poison+0x60/0x60 [ 2454.148246][T12198] alloc_vmap_area+0x512/0x1ed0 [ 2454.153120][T12198] ? free_vmap_area+0x1ab0/0x1ab0 [ 2454.158173][T12198] __get_vm_area_node+0x142/0x3f0 [ 2454.163221][T12198] __vmalloc_node_range+0x25b/0x13c0 [ 2454.168508][T12198] ? kernel_clone+0xeb/0x990 [ 2454.173107][T12198] ? kernel_clone+0xeb/0x990 [ 2454.177703][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2454.182556][T12198] ? vfree_atomic+0xe0/0xe0 [ 2454.187059][T12198] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2454.192611][T12198] ? trace_kmem_cache_alloc+0x35/0x100 [ 2454.198108][T12198] ? kernel_clone+0xeb/0x990 [ 2454.202797][T12198] copy_process+0x12d2/0x7520 [ 2454.207480][T12198] ? kernel_clone+0xeb/0x990 [ 2454.212090][T12198] ? find_held_lock+0x2d/0x110 [ 2454.216858][T12198] ? get_pid_task+0xec/0x210 [ 2454.221446][T12198] ? lock_downgrade+0x6e0/0x6e0 [ 2454.226288][T12198] ? kstrtouint+0x120/0x120 [ 2454.230788][T12198] ? __cleanup_sighand+0xb0/0xb0 [ 2454.235729][T12198] kernel_clone+0xeb/0x990 [ 2454.240141][T12198] ? create_io_thread+0xf0/0xf0 [ 2454.244986][T12198] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2454.250639][T12198] ? wait_for_completion_io_timeout+0x20/0x20 [ 2454.256707][T12198] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2454.262253][T12198] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2454.268151][T12198] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2454.274736][T12198] ? lockdep_hardirqs_on+0x7d/0x100 [ 2454.279933][T12198] __do_fast_syscall_32+0x65/0xf0 [ 2454.284960][T12198] do_fast_syscall_32+0x33/0x70 [ 2454.289807][T12198] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2454.296132][T12198] RIP: 0023:0xf7f7c549 [ 2454.300275][T12198] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2454.319874][T12198] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2454.328280][T12198] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2454.336243][T12198] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2454.344201][T12198] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2454.352159][T12198] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2454.360120][T12198] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2454.368178][T12198] [ 2454.393289][T12210] CPU: 1 PID: 12210 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2454.403418][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2454.413474][T12210] Call Trace: [ 2454.416746][T12210] [ 2454.419671][T12210] dump_stack_lvl+0xd1/0x138 [ 2454.424273][T12210] should_fail_ex.cold+0x5/0xa [ 2454.429051][T12210] ? copy_fs_struct+0x49/0x340 [ 2454.433816][T12210] should_failslab+0x9/0x20 [ 2454.438319][T12210] kmem_cache_alloc+0x5a/0x430 [ 2454.443079][T12210] copy_fs_struct+0x49/0x340 [ 2454.447685][T12210] copy_process+0x37c9/0x7520 [ 2454.452387][T12210] ? find_held_lock+0x2d/0x110 [ 2454.457160][T12210] ? __cleanup_sighand+0xb0/0xb0 [ 2454.462101][T12210] kernel_clone+0xeb/0x990 [ 2454.466513][T12210] ? create_io_thread+0xf0/0xf0 [ 2454.471474][T12210] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2454.477110][T12210] ? wait_for_completion_io_timeout+0x20/0x20 [ 2454.483200][T12210] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2454.488766][T12210] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2454.494688][T12210] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2454.501270][T12210] ? lockdep_hardirqs_on+0x7d/0x100 [ 2454.506460][T12210] __do_fast_syscall_32+0x65/0xf0 [ 2454.511483][T12210] do_fast_syscall_32+0x33/0x70 [ 2454.516330][T12210] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2454.522651][T12210] RIP: 0023:0xf7f0f549 [ 2454.526720][T12210] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2454.546318][T12210] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2454.554723][T12210] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2454.562694][T12210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2454.570656][T12210] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2454.578624][T12210] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2454.586586][T12210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 20:46:47 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x1, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x100) splice(r1, &(0x7f0000000300)=0x2, r2, &(0x7f0000000380), 0x9, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x1, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) (async) syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x100) (async) splice(r1, &(0x7f0000000300)=0x2, r2, &(0x7f0000000380), 0x9, 0x2) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2454.594563][T12210] 20:46:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (rerun: 32) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x8000, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async, rerun: 64) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) 20:46:47 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x6, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x2e}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}], &(0x7f00000000c0)='GPL\x00', 0x100, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x1, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0xffffffffffffffff]}, 0x80) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x7fff, 0x100) splice(r1, &(0x7f0000000300)=0x2, r2, &(0x7f0000000380), 0x9, 0x2) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:47 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x38c, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, r3}, 0x14) 20:46:47 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 20:46:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) 20:46:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20008854, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x18115, @empty, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xd0}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) 20:46:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, r3}, 0x14) [ 2454.936536][T12254] FAULT_INJECTION: forcing a failure. [ 2454.936536][T12254] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.989040][T12253] FAULT_INJECTION: forcing a failure. [ 2454.989040][T12253] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.007141][T12254] CPU: 0 PID: 12254 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2455.017272][T12254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2455.027347][T12254] Call Trace: [ 2455.030624][T12254] [ 2455.033547][T12254] dump_stack_lvl+0xd1/0x138 [ 2455.038139][T12254] should_fail_ex.cold+0x5/0xa [ 2455.042911][T12254] should_failslab+0x9/0x20 [ 2455.047413][T12254] __kmem_cache_alloc_node+0x5b/0x430 [ 2455.052801][T12254] ? __vmalloc_node_range+0xa11/0x13c0 [ 2455.058256][T12254] ? __vmalloc_node_range+0xa11/0x13c0 [ 2455.063712][T12254] __kmalloc_node+0x4d/0xd0 [ 2455.068216][T12254] __vmalloc_node_range+0xa11/0x13c0 [ 2455.073508][T12254] ? kernel_clone+0xeb/0x990 [ 2455.078097][T12254] ? lock_downgrade+0x6e0/0x6e0 [ 2455.082942][T12254] ? vfree_atomic+0xe0/0xe0 [ 2455.087452][T12254] ? rcu_read_lock_sched_held+0x3e/0x70 [ 2455.093023][T12254] ? trace_kmem_cache_alloc+0x35/0x100 [ 2455.098510][T12254] ? kernel_clone+0xeb/0x990 [ 2455.103126][T12254] copy_process+0x12d2/0x7520 [ 2455.107814][T12254] ? kernel_clone+0xeb/0x990 [ 2455.112431][T12254] ? find_held_lock+0x2d/0x110 [ 2455.117222][T12254] ? get_pid_task+0xec/0x210 [ 2455.121847][T12254] ? lock_downgrade+0x6e0/0x6e0 [ 2455.126692][T12254] ? kstrtouint+0x120/0x120 [ 2455.131197][T12254] ? __cleanup_sighand+0xb0/0xb0 [ 2455.136139][T12254] kernel_clone+0xeb/0x990 [ 2455.140552][T12254] ? create_io_thread+0xf0/0xf0 [ 2455.145399][T12254] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2455.151039][T12254] ? wait_for_completion_io_timeout+0x20/0x20 [ 2455.157114][T12254] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2455.162657][T12254] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2455.168553][T12254] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2455.175137][T12254] ? lockdep_hardirqs_on+0x7d/0x100 [ 2455.180328][T12254] __do_fast_syscall_32+0x65/0xf0 [ 2455.185370][T12254] do_fast_syscall_32+0x33/0x70 [ 2455.190232][T12254] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2455.196555][T12254] RIP: 0023:0xf7f7c549 [ 2455.200627][T12254] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2455.220255][T12254] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2455.228678][T12254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2455.236687][T12254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2455.244681][T12254] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2455.252646][T12254] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2455.260618][T12254] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2455.268593][T12254] [ 2455.294483][T12253] CPU: 1 PID: 12253 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2455.304604][T12253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2455.314682][T12253] Call Trace: [ 2455.317978][T12253] [ 2455.320918][T12253] dump_stack_lvl+0xd1/0x138 [ 2455.325512][T12253] should_fail_ex.cold+0x5/0xa [ 2455.330285][T12253] ? copy_process+0x2655/0x7520 [ 2455.335134][T12253] should_failslab+0x9/0x20 [ 2455.339638][T12253] kmem_cache_alloc+0x5a/0x430 [ 2455.344393][T12253] ? _raw_spin_unlock+0x28/0x40 [ 2455.349248][T12253] copy_process+0x2655/0x7520 [ 2455.353923][T12253] ? find_held_lock+0x2d/0x110 [ 2455.358699][T12253] ? __cleanup_sighand+0xb0/0xb0 [ 2455.363644][T12253] kernel_clone+0xeb/0x990 [ 2455.368068][T12253] ? create_io_thread+0xf0/0xf0 [ 2455.372916][T12253] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2455.378551][T12253] ? wait_for_completion_io_timeout+0x20/0x20 [ 2455.384624][T12253] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2455.390199][T12253] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2455.396123][T12253] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2455.402710][T12253] ? lockdep_hardirqs_on+0x7d/0x100 [ 2455.407992][T12253] __do_fast_syscall_32+0x65/0xf0 [ 2455.413027][T12253] do_fast_syscall_32+0x33/0x70 [ 2455.417874][T12253] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2455.424196][T12253] RIP: 0023:0xf7f0f549 [ 2455.428259][T12253] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2455.447873][T12253] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2455.456286][T12253] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2455.464255][T12253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2455.472214][T12253] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2455.480174][T12253] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 20:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20008854, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x18115, @empty, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xd0}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) [ 2455.488132][T12253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2455.496105][T12253] 20:46:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xc) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) (async) 20:46:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xda8, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x4}}, 0x10) (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x2, 0x4) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x18}, r3}, 0x14) 20:46:48 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:48 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 20:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20008854, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x18115, @empty, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xd0}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4, 0x4) 20:46:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xdd4, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:48 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_clone(0x30000080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={r6, 0x1, 0x8000}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x7}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r9, 0x1, 0x8000, 0x2, 0x6, {{0x1a, 0x4, 0x3, 0x38, 0x68, 0x64, 0x0, 0xb0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x9, [0x5, 0x0, 0x1, 0xffff32b0, 0x3c, 0x6, 0x1, 0x1]}, @end, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x7, [{@broadcast, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, {@empty}, {@private=0xa010101, 0xf254}, {@local}]}]}}}}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r2) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) dup(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x4, 0x10}, &(0x7f0000000640)=0xc) sendmsg$inet_sctp(r10, &(0x7f0000000680)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ddb94244705cb5cfcc3e2824723b62e578e43c93a1f53c13ec61e2c17469e72e0024a6a692afd07426c9ee123b150c7ab8dd60ac2a71c5033417d8ad22cceb562400bf822d52ed9a1d61938e07d980", 0x4f}, {&(0x7f0000000440)="f900185c66bbe5bd579ba70fc6380fadfdce9973df8e908dbf4598750a9df3ccfa8cbcaa9e9fbb3fefb43b862f876e268c6e11d87d70f9dade78c5516349d6be1f00", 0x42}, {&(0x7f00000004c0)="be47606dc7ca2ea69bec76f4e12937", 0xf}, {&(0x7f0000000500)="935a9f7a1ab5fc8a331988fc36adb58ce92a89c7ffdfa8271ee1891e512cda2888ae624a443ce8824942f2f20e8ec1ff1cc9d71fced254a62176fa7772d148d4674a35fbbbb39715e5bf6f419226d9af9a671d1f0d6d9e46077d593d165a88a5c05e88e7369aeacb105a0b18c519e0f7ed33e411882931d8448694813e5633bcbffe720cdc6c75", 0x87}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000008400000001000000060008000e8000000100008066410000230a00004400000002000000", @ANYRES32=0x0, @ANYBLOB="100000008400000007000000ac141414100000008400000007000000ac1414bb2c00000084000000010000000008c9080080000005000000080000007e0300000008000006000000", @ANYRES32=r12, @ANYBLOB="100000adfc8a19e0520000066faa114403f53f54b2a2f66a712676556ba57f28b03df216bdc19c12a80ab658215ef75556fc386572256b85b815b990bab083551ba665cd389ec5820000036e736d4ff38270f48f458c6ef4e31abbb2717ec8e4bf8ea90240dba748512213b93761f6b54ef4e56a8c9bb17340303b14b39e7c93aa63d9295563da7d1bf8974aafc4bb4b1f9cb1d06ee2541f3b825a77214515083686fbecc96086f2afb8b27e80828950da1af7b7af1c950bd55d7c2ef3c2e4cc97a57500000000"], 0x88}, 0x24040010) 20:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x11, &(0x7f0000000000)={0xa, 0x4e22, 0x4f, @private1, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x29) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f00000002c0)=""/162, 0xa2}], 0x4, 0x3ff, 0x400) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4002, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) 20:46:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xddd, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001140)="47fe74c46d754ef7ec9015b4ad3dca247407f8e23ec9b9cb6fc01f4e9fcfbca0a447f4b0e4523825140bcca6c0ca2f3167e5115c60a9a0b548474c0e167c290e00f0a8c4f0d3ecfc1742db6453604487e386e3ce1a9fc3e20c2ff074585b6ed06680be662bd01fac9b853594a6ce79ce78d775d6d814d8d656bc77979702a0ea34be19347968b76ae56d5b89ae2536c14d603c7fcdde6de56ef6aba99857ae5890191783287348c8fa680224934b884657949c0c6d8a84cdd3efef1bce5a070286f9e5903e6f00993baaf102afa94c7d22485f6da9d69d87fae0a39f1e784f0257dd341ff909b82ccfdfee1af45804a7c097283bd770ade89914322b2238998bcc452f0cb3cd11a13231c3ab978ed439c96f3dec77fef72c251afbea23c650449e7c6c9c5950657e217640684951380f48d58b7adbd3f7b59984bf44a04d1a17a6a1213b88500cfd4117b163908fda534207abb0b7bb590055483229ad5a053c8506342e78a2013b0a2a24d1df5b8f51260c7d4e1ddf0afaac63843f49703157d9b7a45103a5220440f46ff0132cd10e9aff5297d12a72a56e9a43fdcb189e830b35815bde5580270647c42bfbbb2dc8404511638be9a210759723805d6c50cb2e87fbb8a1e69d7625171284487604d1a9c44dabbf28495f3fd0a8a69e9e6b13cd7ff3b4ead53d161f9291051e0efe6b3fab2b7e0d5c8757ceb502f635119e1dff35ec7d86b0783323c30b83b6b925657ee28b70c41b7acb25a87ed04a5b0c1256fb0bdea2fe5ac010486199fc6a62624cbaf4804160da375b0c3cf244b0eec1ccbfb7449881abec88d41d0cbb84b83c17e2ff5587e5241018cfae645ee7a82252b7cb182606b345916afddf66777e7a437de972f8326e71fb2978c3a09bfb34991bbd61a056051f057909440978a1993ceb1305fba45b6b4c8c02856d3d3ad1fe42c3436abe268ae84aff975d109f820aef039cfba2388c56f7bc1d866a8c9448feab3d33aa963e95aa2cca4ed63ac8a2a35dd3cc79bcf4329dafa986e860398fc2f9c61377932fcc9b5957cbd560b8730affc09357baab0dca3c295ccd668f85572f53f2562581c0d1d99542bd57f6b29b425a070a7d4c2312dfdaddbdbbac5e6372c9e0c4b4b67616aa2e7996d92f5ab668b4b5408554a1b3e87f114c6cba4080d9ee89f98ca9174a26314b4857af59f5fa8fb546694401bbff4044550f848246eeb22298875742db7a45f3332171928fa342161d32d85f8c5420a6b6bc1cf6af1942c25eb18fe73c92c215d8ab440a24959935970b9fa3c5bdaa92248f473a5e269c5607a19c82fef0931548917dd8a9f27bffc3bf7cd31a73acf1634c24893e1d7c3ffcde42b77bc89b7816bcb2a1c64dc91c3ea442a119ea753a7f2e148047f56179ef7efce8a18ec2d557f6fa39e15acaf0861c01c9109825706a586bedf466de16137fc1f2d2f537e58a96a6d496baba3d94669a19e35136029289867dad53e340a580a36335972750e28f6570ac0e32f22a24f3861ebd49cde4aaa6ae4d6b5389f257a4e732b8068d10b7ac666bffe64b10515b5e19405c42e96657e44672803f2d7a8d080d3eb6fa69bb8d670db7b3cd9d64ad00c1acc4a1ff45776d9d6d464171de4220c125518a081909d6eb2f5aa29d960c9c242ed673049a7803c2692e1ae0849473c0d1782e4a61a62a39b3ad827a17ba6c30634e7bbe6ae334a3c11981b20950e6d0fad9246fde8fa272b116aead6eda6c303f6937744b55ce5e28ed20215da9bbaa5ef4eedc196b00934cf005d45acb89eb27fb000f28f43cfc24c4881711044bc8a8f6350fed635af19161804ea0d5b8afef7ba1711edea580d3ed65d4d3fc4546ae9f0d3d5b2b2adb81205dfc99b34012de1d0fb01c1f27697222aa8559f18ee076891f2d9c1db1ad0efeaa449d656f235c15d4f49f3c0395bef13d7092112c38af821a9ae019f327a0798bbd7a9da0e7e71b74b51519f0dad797788153dac4abef255b7b2f9f2ed5512286c7c67ff60840369df7c35989afd9b9542f46ad56c355791fcbb3f36dfd511e7484258550730115ce3dcfe4ed19ecd64609d15a96e67656819c2ffc73d8e6d836b38a69dc3bf0a090e08cd43fbbb474755f3d5616fef35542e3b8557964f85d852bc1006e7855f0197d2453c9262fa2f7a771ddca7a7f3d43918d019e2f7723874893e41fbe749959813476a1786dd05d5e915850814a68925d24bfa5f24af02c0917741630bbe91f3b51db731f3cfa10dcf98155cfd5b47506ab5500823363a8c68622012705e7f377988a12178b24122a068f37645b419f6a9a74d3bd50fc86a30babf57e6eb115a3215dc6470be01e0c61ddd2370f37fe031a85c6ff0dc9c19d75daf981f5bd0a0522ddec9928db15dd6cadb2ae0fce4755a329c4889625caa58ba5c6971f986386229839df7e914cef112e938e29fb7e89cb37f1a4ccb973aab6d11b42ab1756c7149d9ae11f274915f6aa2a018c7ba9a9e963c06f1657110b6cd97a45d56659dd5bbb17e292123e09c034c13ff1833b7a244e8d7dd4b11d0f61dd0e2dc9fafbad75c1a45f48f9d691987ab41a9899093711d6e9528e1b7dcc39fd8990eb82dcddb2f21ecde06a1289b3d31e7425a9c539a6526ec00f42cf6ba8826d7dcad5c49efbe8522546bc7bb9cbd2eaaa1d3bf6e1dbf27ba3780c72b3ffbf3e27e0fcb3be4940f5a7abb5d059a051f1a31d7cee70cf4b38486769dcb7bfa2f0b1551fe81a2242ef3822b74f1a8e04ba700a14eaa623d38bfa98d320b242dbd10ec3e4c2e692a7bf8379d3955cb6b8dd751a3932439f15bfda58094fc68cb1157aaa9db194a3bc11c83b453bc7847a7c0b67079285664272ec04a5ef0f95ecb26b382a736c02731399286a8758b8c39cd0bef4310dd0c8b969010797648f10a8c255c0c10b5e116879531bbbee69f7c484844b962baae89a8a377fac60fa74b5a5bb2979960c50919ec6047bbb2250fc7ce52d6595322c56172b6596d389224c74653f27ea8c70799e6307ea404872fdedba0d67519f9917ca49ce040f9deb915f4377bd2a577c6be974d66b040c5040898f725ad77eef333f97d7bfe8cdb682ad8c3db7404b426b75427745d6391571c565cb25936f23c4239cca7ed53d902bc057fe8c823135ea161fabfd26417a3f2c50634e5d5b65650f7fff77a108ac364c272fdd54a0665ccbba7716b0a45fe925b2a8a0cc1a69bb1f92fde3b1a17dfc71c8710cb46252dc9bc719835bbd479ac23a7f7f1796c7fba9bff21012fd7f5abc68227b53a50aa738fa4ef6a892229fd1bed34a8c4350b63533c7c572c085396f9bda12abc844cab9b28095a30a2575422064d363f9ccc0a7f5d80fe7949c95d2e23f0ac1514a0fe929696f56074a623df7a1ba4b391aed4d5080164b1e56a0c6e7b6bbdc1244f960c31f5f9d89520529f84dafce0041cffa05f2a2a40295e02b0c6c4f0dca9dbc14a9aa6073bbec2ba75752765e92ba027ab811e3ee59a7923b9b2a69217bc1490bdf178449a7273a49fb4ddf6775add96222925ffde680a120290422989e510d10c5505917f2f94f54c8159fac9fd9aec434972ed55294113e449ac2c30f09a2ddd6e11871b65ced0686b2183088ed4d746ee8cbc6368e565ea6fc6612be554a757d544fc7cbdbf475f69b651a6965e400424915835aa89d496f7068ed495419f27a6f8e49ed3d90a1772e5f78ed3b30ce5fa1902a8fbd90ae6c93d1d6d70c66e8127d30c8ab316c54c7144cdb890bb311f1c0cdfe67b00db7feb9ad195da19341680b6f8043e2da24117ee166c5adce31e070805a113ef7c05372e4bb1f92df96fe80adc4f4fe11c5597201823a21b4e87a3f7dea95076090e77e3c03ce0b586681a2522b6056944d49027b09bb938b93d9e426223439877ec0b87837e4e1964d388d966b4d260a319284dba087d290a5e8853826ce74a7dc918056ebee0a4ff03c796d68eac35a76096a2d32e6d32c3ea854b75502e11c440512354a6572046d1f6c0f0d4176bba7c2f55ac1772365ca75f5f5577301271ca4d3ef0681c5309e7758f9bae244cd4ff2103c82570574acef5d2030c7e9af591384e3c2cbc9d6f8e8e3fc4d712a80ca2decaa679dd3b625db23902e4705eed5764268f2e63143ad60e7695f210681cc8b4846f06914d6c6082e7e30057d5276fe2329aaab8f6681b276138a7f8781182526d6dd88df3ad56e0d68426189d0f405643353cd490bde51e9968535f8455732a1ca751dbb59a8e698ee7081011c7b0305df8e4eb5f44fb23981b0743a6280cc6f877978b3db9b3fdb3298002e52169ee291a63d44e63a4f49f8f412f91cfe2e08dee9a5f18508021f68c60f7dfff6a1738ca9f42fde0c562d9e5f7d3d2b1892e579abf73fd427ff7f69f58ee396e5abe48df91284342b1bce0de851c355f03144808fe02f896436a62e4c4ef38211eab5d34c8bf9e24a8d07cfd68db5f0350c2cb46bb0193e45e1b4a933dcc88926c793fe69bde748347a2aea5b093c7ae570db5dd158ca3185f7756bc407be50f13df4358f458306513697786c6d961ec9a55e9b17e5dc5ec52242a0a3481035edacf7fcadeaefc84d529fd51374cedd9808513fbc5e805bfc9e1fe7fe3543b04311e0ba2816b1fdc2b4551831525c252efae56ba53b1de6d4bf339493ef6cfab6f2b02ba60b574ad91ced9f269712f4ac89a065cbc8f22c6079cc338efb728a037d6b0bacf4fd5707aa544ac81ca3ca49f91c7d473c7fc2b8f17d4fd39804bbecd00a1c5d8d8e8d0db496eab71c98142969878515cba3291cb054f4db5df89fe770882f6f992f20c6dea30e1910a96a8c7c18e7ba1fb8388b9f455dd2b8a9f9f64742761addb5865eb2f1c1eba9976f4c1b2255768d22b2be2970815e5c30581fb960e1de978969a8def12f4d08d50e42017a768d94b92ff6af56c83f561cf0324d882167e1bcd447a81e9012cdc8db62da575f9980a015a370e3cd1d1862a453da704425eda12ebbe4087f0804b7103b8b57d0233ced7806f033851daea5d2245124901635a29e984bd2bd131a708520dcc98db486462cb9e7842f01b06806f910bcf33215d3d07e491052698741cabda448e029684ea63e9f99c5ccc9391fce4ed8abccfc30ce75f2722dc40efb84885c588395116829cde8e62eeae56fafb30bfb2dc35ab1dd7965a94807d579f7ceef4f71d4601f3723e5466a1d960f9f0b0008c1dbeafec48fb83ea4da0fe4c28cdbc1ee6e59b2dc86dd1be650ce407d1a30a91b68fbc14ecd8c3758d221b2218a6339efc10e21ee9f4e0c3d7e418ae7f8f7d5c602877704bdfe7e2d55f44752fc5e02f4d2801f01b6fb52526cda57efa2f5d9c01c81c9d590cd5b3ed6599347142f37419df01f2725314fcc87c754a84d30c1e615a6433eae9d699ff3b4cd6e7883ed3b75f39367c0daeb7606244f5e3117d87778a44e937f58bc97a3d08d000e4b4f7951b270cf6f9e310e87ad3784dc9d5e71f7da65105b94b7ca1829ef6719b3ba7de6e9e3058ea886061c3009b1773888ff8fed5c4145ba880dc5fdd91b385371c6f6b5861257459938447a5f7d7439fafb66d1b826e278300f86c1605999287e50fd5badb7b50d08113cdecbd09396f81f7bfce6c0911cc7d303e9e369e6a2b6bfe60b25deff218112b5cac199911292a889f12ee7cd435c254d28ac176310de90e5bbc002a3025b50e6ffee3d9a3fd51cd187067eb3a7bd3efb044aa30ac54b504e3f3387fe004eb99b07b1b201751016d8265a", 0x1000, 0x11, &(0x7f0000000000)={0xa, 0x4e22, 0x4f, @private1, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x11, &(0x7f0000000000)={0xa, 0x4e22, 0x4f, @private1, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2455.816797][T12297] FAULT_INJECTION: forcing a failure. [ 2455.816797][T12297] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.886154][T12297] CPU: 1 PID: 12297 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2455.896293][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2455.906383][T12297] Call Trace: [ 2455.909689][T12297] [ 2455.912650][T12297] dump_stack_lvl+0xd1/0x138 [ 2455.917295][T12297] should_fail_ex.cold+0x5/0xa [ 2455.922120][T12297] ? copy_process+0x27d6/0x7520 [ 2455.927023][T12297] should_failslab+0x9/0x20 [ 2455.931578][T12297] kmem_cache_alloc+0x5a/0x430 20:46:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xdde, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:48 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 2455.936383][T12297] ? _raw_spin_unlock_irq+0x23/0x50 [ 2455.941633][T12297] copy_process+0x27d6/0x7520 [ 2455.946359][T12297] ? find_held_lock+0x2d/0x110 [ 2455.951281][T12297] ? __cleanup_sighand+0xb0/0xb0 [ 2455.956283][T12297] kernel_clone+0xeb/0x990 [ 2455.960753][T12297] ? create_io_thread+0xf0/0xf0 [ 2455.965676][T12297] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2455.971370][T12297] ? wait_for_completion_io_timeout+0x20/0x20 [ 2455.977503][T12297] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2455.983094][T12297] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2455.989036][T12297] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2455.995737][T12297] ? lockdep_hardirqs_on+0x7d/0x100 [ 2456.001045][T12297] __do_fast_syscall_32+0x65/0xf0 [ 2456.006097][T12297] do_fast_syscall_32+0x33/0x70 [ 2456.010976][T12297] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2456.017330][T12297] RIP: 0023:0xf7f0f549 [ 2456.021409][T12297] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2456.041032][T12297] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2456.050154][T12297] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2456.058136][T12297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2456.066114][T12297] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2456.074093][T12297] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 20:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x11, &(0x7f0000000000)={0xa, 0x4e22, 0x4f, @private1, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x11, &(0x7f0000000000)={0xa, 0x4e22, 0x4f, @private1, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2456.082075][T12297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2456.090075][T12297] 20:46:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x29) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f00000002c0)=""/162, 0xa2}], 0x4, 0x3ff, 0x400) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4002, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) 20:46:48 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 20:46:48 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xde1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:48 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) sendto$inet6(r1, &(0x7f00000000c0)="67b8daf63e95f4c48e673840666fc2fc8db16ecbad61a0aba9a619f11abb11dbe3b94d2220d9175b097ab6acad188029c3462b6efe04fe79a2a1f4d42c1a5de1cd60d63e", 0x44, 0x48000, 0x0, 0x0) [ 2456.236511][T12321] FAULT_INJECTION: forcing a failure. [ 2456.236511][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.319683][T12321] CPU: 1 PID: 12321 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2456.329811][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2456.339871][T12321] Call Trace: [ 2456.343141][T12321] [ 2456.346067][T12321] dump_stack_lvl+0xd1/0x138 [ 2456.350660][T12321] should_fail_ex.cold+0x5/0xa [ 2456.355430][T12321] ? copy_fs_struct+0x49/0x340 [ 2456.360190][T12321] should_failslab+0x9/0x20 [ 2456.364693][T12321] kmem_cache_alloc+0x5a/0x430 [ 2456.369454][T12321] copy_fs_struct+0x49/0x340 [ 2456.374045][T12321] copy_process+0x37c9/0x7520 [ 2456.378716][T12321] ? find_held_lock+0x2d/0x110 [ 2456.383488][T12321] ? __cleanup_sighand+0xb0/0xb0 [ 2456.388430][T12321] kernel_clone+0xeb/0x990 [ 2456.392845][T12321] ? create_io_thread+0xf0/0xf0 [ 2456.397691][T12321] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2456.403326][T12321] ? wait_for_completion_io_timeout+0x20/0x20 [ 2456.409401][T12321] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2456.414942][T12321] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2456.420850][T12321] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2456.427442][T12321] ? lockdep_hardirqs_on+0x7d/0x100 [ 2456.432658][T12321] __do_fast_syscall_32+0x65/0xf0 [ 2456.437686][T12321] do_fast_syscall_32+0x33/0x70 [ 2456.442545][T12321] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2456.448866][T12321] RIP: 0023:0xf7f7c549 [ 2456.452922][T12321] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2456.472520][T12321] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2456.480925][T12321] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2456.488885][T12321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2456.496846][T12321] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2456.504806][T12321] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2456.512770][T12321] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2456.520740][T12321] [ 2456.567034][T12328] FAULT_INJECTION: forcing a failure. [ 2456.567034][T12328] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.610842][T12328] CPU: 1 PID: 12328 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2456.620964][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2456.631126][T12328] Call Trace: [ 2456.634430][T12328] [ 2456.637386][T12328] dump_stack_lvl+0xd1/0x138 [ 2456.642020][T12328] should_fail_ex.cold+0x5/0xa [ 2456.646799][T12328] ? copy_process+0x43a0/0x7520 [ 2456.651648][T12328] should_failslab+0x9/0x20 [ 2456.656169][T12328] kmem_cache_alloc+0x5a/0x430 [ 2456.660977][T12328] copy_process+0x43a0/0x7520 [ 2456.665704][T12328] ? find_held_lock+0x2d/0x110 [ 2456.670517][T12328] ? __cleanup_sighand+0xb0/0xb0 [ 2456.675464][T12328] kernel_clone+0xeb/0x990 [ 2456.679887][T12328] ? create_io_thread+0xf0/0xf0 [ 2456.684735][T12328] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2456.690372][T12328] ? wait_for_completion_io_timeout+0x20/0x20 [ 2456.696446][T12328] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2456.701993][T12328] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2456.707889][T12328] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2456.714472][T12328] ? lockdep_hardirqs_on+0x7d/0x100 [ 2456.719663][T12328] __do_fast_syscall_32+0x65/0xf0 [ 2456.724694][T12328] do_fast_syscall_32+0x33/0x70 [ 2456.729555][T12328] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2456.735888][T12328] RIP: 0023:0xf7f0f549 [ 2456.739966][T12328] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2456.759650][T12328] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 20:46:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_clone(0x30000080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={r6, 0x1, 0x8000}) (async, rerun: 64) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x7}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r9, 0x1, 0x8000, 0x2, 0x6, {{0x1a, 0x4, 0x3, 0x38, 0x68, 0x64, 0x0, 0xb0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x9, [0x5, 0x0, 0x1, 0xffff32b0, 0x3c, 0x6, 0x1, 0x1]}, @end, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x7, [{@broadcast, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, {@empty}, {@private=0xa010101, 0xf254}, {@local}]}]}}}}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r2) (async) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async, rerun: 32) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (rerun: 32) process_vm_readv(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) (async) dup(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x4, 0x10}, &(0x7f0000000640)=0xc) sendmsg$inet_sctp(r10, &(0x7f0000000680)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ddb94244705cb5cfcc3e2824723b62e578e43c93a1f53c13ec61e2c17469e72e0024a6a692afd07426c9ee123b150c7ab8dd60ac2a71c5033417d8ad22cceb562400bf822d52ed9a1d61938e07d980", 0x4f}, {&(0x7f0000000440)="f900185c66bbe5bd579ba70fc6380fadfdce9973df8e908dbf4598750a9df3ccfa8cbcaa9e9fbb3fefb43b862f876e268c6e11d87d70f9dade78c5516349d6be1f00", 0x42}, {&(0x7f00000004c0)="be47606dc7ca2ea69bec76f4e12937", 0xf}, {&(0x7f0000000500)="935a9f7a1ab5fc8a331988fc36adb58ce92a89c7ffdfa8271ee1891e512cda2888ae624a443ce8824942f2f20e8ec1ff1cc9d71fced254a62176fa7772d148d4674a35fbbbb39715e5bf6f419226d9af9a671d1f0d6d9e46077d593d165a88a5c05e88e7369aeacb105a0b18c519e0f7ed33e411882931d8448694813e5633bcbffe720cdc6c75", 0x87}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000008400000001000000060008000e8000000100008066410000230a00004400000002000000", @ANYRES32=0x0, @ANYBLOB="100000008400000007000000ac141414100000008400000007000000ac1414bb2c00000084000000010000000008c9080080000005000000080000007e0300000008000006000000", @ANYRES32=r12, @ANYBLOB="100000adfc8a19e0520000066faa114403f53f54b2a2f66a712676556ba57f28b03df216bdc19c12a80ab658215ef75556fc386572256b85b815b990bab083551ba665cd389ec5820000036e736d4ff38270f48f458c6ef4e31abbb2717ec8e4bf8ea90240dba748512213b93761f6b54ef4e56a8c9bb17340303b14b39e7c93aa63d9295563da7d1bf8974aafc4bb4b1f9cb1d06ee2541f3b825a77214515083686fbecc96086f2afb8b27e80828950da1af7b7af1c950bd55d7c2ef3c2e4cc97a57500000000"], 0x88}, 0x24040010) 20:46:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xdf6, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) (async) sendto$inet6(r1, &(0x7f00000000c0)="67b8daf63e95f4c48e673840666fc2fc8db16ecbad61a0aba9a619f11abb11dbe3b94d2220d9175b097ab6acad188029c3462b6efe04fe79a2a1f4d42c1a5de1cd60d63e", 0x44, 0x48000, 0x0, 0x0) 20:46:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x29) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f0000000540)=""/182, 0xb6}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f00000002c0)=""/162, 0xa2}], 0x4, 0x3ff, 0x400) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4002, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) [ 2456.768057][T12328] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2456.776020][T12328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2456.784068][T12328] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2456.792028][T12328] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2456.799990][T12328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2456.807962][T12328] 20:46:49 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x1, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) sendto$inet6(r1, &(0x7f00000000c0)="67b8daf63e95f4c48e673840666fc2fc8db16ecbad61a0aba9a619f11abb11dbe3b94d2220d9175b097ab6acad188029c3462b6efe04fe79a2a1f4d42c1a5de1cd60d63e", 0x44, 0x48000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) sendto$inet6(r1, &(0x7f00000000c0)="67b8daf63e95f4c48e673840666fc2fc8db16ecbad61a0aba9a619f11abb11dbe3b94d2220d9175b097ab6acad188029c3462b6efe04fe79a2a1f4d42c1a5de1cd60d63e", 0x44, 0x48000, 0x0, 0x0) (async) 20:46:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xe36, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2456.971034][T12352] FAULT_INJECTION: forcing a failure. [ 2456.971034][T12352] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.984653][T12352] CPU: 0 PID: 12352 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2456.994767][T12352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2457.004854][T12352] Call Trace: [ 2457.008161][T12352] [ 2457.011108][T12352] dump_stack_lvl+0xd1/0x138 [ 2457.015706][T12352] should_fail_ex.cold+0x5/0xa [ 2457.020475][T12352] ? copy_process+0x2655/0x7520 [ 2457.025321][T12352] should_failslab+0x9/0x20 [ 2457.029831][T12352] kmem_cache_alloc+0x5a/0x430 [ 2457.034594][T12352] ? _raw_spin_unlock+0x28/0x40 [ 2457.039445][T12352] copy_process+0x2655/0x7520 [ 2457.044120][T12352] ? find_held_lock+0x2d/0x110 [ 2457.048902][T12352] ? __cleanup_sighand+0xb0/0xb0 [ 2457.053940][T12352] kernel_clone+0xeb/0x990 [ 2457.058353][T12352] ? create_io_thread+0xf0/0xf0 [ 2457.063202][T12352] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2457.068837][T12352] ? wait_for_completion_io_timeout+0x20/0x20 [ 2457.074910][T12352] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2457.080454][T12352] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2457.086347][T12352] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2457.092928][T12352] ? lockdep_hardirqs_on+0x7d/0x100 [ 2457.098135][T12352] __do_fast_syscall_32+0x65/0xf0 [ 2457.103162][T12352] do_fast_syscall_32+0x33/0x70 [ 2457.108011][T12352] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2457.114345][T12352] RIP: 0023:0xf7f7c549 [ 2457.118404][T12352] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2457.138192][T12352] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2457.146631][T12352] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2457.154596][T12352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2457.162559][T12352] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 20:46:49 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) [ 2457.170521][T12352] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2457.178481][T12352] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2457.186451][T12352] 20:46:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x1, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x1, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000)="576edf87d5cd6762a2e2b1ee34a4", 0xe, 0x44840, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:49 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xe49, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_clone(0x30000080, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000100)={r6, 0x1, 0x8000}) (async, rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x7}}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl0\x00', r9, 0x1, 0x8000, 0x2, 0x6, {{0x1a, 0x4, 0x3, 0x38, 0x68, 0x64, 0x0, 0xb0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x24, 0xfe, 0x0, 0x9, [0x5, 0x0, 0x1, 0xffff32b0, 0x3c, 0x6, 0x1, 0x1]}, @end, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x7, [{@broadcast, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x1}, {@empty}, {@private=0xa010101, 0xf254}, {@local}]}]}}}}}) (async) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, r2) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 64) sendfile(r3, r4, 0x0, 0x8000002b) dup(r1) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x4, 0x10}, &(0x7f0000000640)=0xc) (rerun: 32) sendmsg$inet_sctp(r10, &(0x7f0000000680)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0x0, @private0, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ddb94244705cb5cfcc3e2824723b62e578e43c93a1f53c13ec61e2c17469e72e0024a6a692afd07426c9ee123b150c7ab8dd60ac2a71c5033417d8ad22cceb562400bf822d52ed9a1d61938e07d980", 0x4f}, {&(0x7f0000000440)="f900185c66bbe5bd579ba70fc6380fadfdce9973df8e908dbf4598750a9df3ccfa8cbcaa9e9fbb3fefb43b862f876e268c6e11d87d70f9dade78c5516349d6be1f00", 0x42}, {&(0x7f00000004c0)="be47606dc7ca2ea69bec76f4e12937", 0xf}, {&(0x7f0000000500)="935a9f7a1ab5fc8a331988fc36adb58ce92a89c7ffdfa8271ee1891e512cda2888ae624a443ce8824942f2f20e8ec1ff1cc9d71fced254a62176fa7772d148d4674a35fbbbb39715e5bf6f419226d9af9a671d1f0d6d9e46077d593d165a88a5c05e88e7369aeacb105a0b18c519e0f7ed33e411882931d8448694813e5633bcbffe720cdc6c75", 0x87}], 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="2c0000008400000001000000060008000e8000000100008066410000230a00004400000002000000", @ANYRES32=0x0, @ANYBLOB="100000008400000007000000ac141414100000008400000007000000ac1414bb2c00000084000000010000000008c9080080000005000000080000007e0300000008000006000000", @ANYRES32=r12, @ANYBLOB="100000adfc8a19e0520000066faa114403f53f54b2a2f66a712676556ba57f28b03df216bdc19c12a80ab658215ef75556fc386572256b85b815b990bab083551ba665cd389ec5820000036e736d4ff38270f48f458c6ef4e31abbb2717ec8e4bf8ea90240dba748512213b93761f6b54ef4e56a8c9bb17340303b14b39e7c93aa63d9295563da7d1bf8974aafc4bb4b1f9cb1d06ee2541f3b825a77214515083686fbecc96086f2afb8b27e80828950da1af7b7af1c950bd55d7c2ef3c2e4cc97a57500000000"], 0x88}, 0x24040010) 20:46:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x1, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x1, 0x3}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2457.348930][T12370] FAULT_INJECTION: forcing a failure. [ 2457.348930][T12370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2457.387594][T12370] CPU: 1 PID: 12370 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2457.397731][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2457.407814][T12370] Call Trace: [ 2457.411101][T12370] [ 2457.414039][T12370] dump_stack_lvl+0xd1/0x138 [ 2457.418659][T12370] should_fail_ex.cold+0x5/0xa [ 2457.423460][T12370] prepare_alloc_pages+0x178/0x570 [ 2457.428602][T12370] __alloc_pages+0x149/0x5b0 [ 2457.433211][T12370] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2457.440010][T12370] ? memcg_slab_post_alloc_hook+0x249/0x480 [ 2457.445944][T12370] alloc_pages+0x1aa/0x270 [ 2457.450390][T12370] __get_free_pages+0xc/0x40 [ 2457.454999][T12370] pgd_alloc+0x29/0x260 [ 2457.459185][T12370] mm_init+0x63b/0xc10 [ 2457.463278][T12370] copy_process+0x43f6/0x7520 [ 2457.467975][T12370] ? find_held_lock+0x2d/0x110 [ 2457.472780][T12370] ? __cleanup_sighand+0xb0/0xb0 [ 2457.477758][T12370] kernel_clone+0xeb/0x990 [ 2457.482195][T12370] ? create_io_thread+0xf0/0xf0 [ 2457.487069][T12370] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2457.492745][T12370] ? wait_for_completion_io_timeout+0x20/0x20 [ 2457.498852][T12370] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2457.504416][T12370] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2457.510340][T12370] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2457.516947][T12370] ? lockdep_hardirqs_on+0x7d/0x100 [ 2457.522161][T12370] __do_fast_syscall_32+0x65/0xf0 [ 2457.527217][T12370] do_fast_syscall_32+0x33/0x70 [ 2457.532094][T12370] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2457.538449][T12370] RIP: 0023:0xf7f0f549 [ 2457.542533][T12370] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2457.562153][T12370] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2457.570583][T12370] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2457.578566][T12370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2457.586546][T12370] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 20:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000)="576edf87d5cd6762a2e2b1ee34a4", 0xe, 0x44840, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="576edf87d5cd6762a2e2b1ee34a4", 0xe, 0x44840, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2457.594534][T12370] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2457.602513][T12370] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2457.610512][T12370] 20:46:50 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "ce89e597013fe01d", "457f3b341542de88e57d8b939da5db5e", "35a1e68b", "3212cd187d87d92d"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000100)="f96f45a214225cdd4d0e13f87b4bf5052d1cf8198cf83f66412bab698d240d4e32a663b46ec3ab470f525263ec734abf4791df37ba6636c466028041394cadd6a8d38b2709a2689d3669cd949edea52608eca4efe3752a2798e1be3196cb848b5c2872ecc89659f4bac28ef7b5d5465d340d3e93e9e5bcf36fb4b4957878f9", 0x7f, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="bd07dcd791d3e08660d709713bd3627c45113c0dcc7b693db37eba4eda9838580374309f8a8d283d237159", 0x2b, 0x20000804, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000)="576edf87d5cd6762a2e2b1ee34a4", 0xe, 0x44840, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000000)="576edf87d5cd6762a2e2b1ee34a4", 0xe, 0x44840, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x900) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) dup3(0xffffffffffffffff, r4, 0x0) readahead(r0, 0x20, 0x6) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @mcast2, 0xd}, 0x1c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r7, r8, 0x0, 0x8000002b) dup(r6) 20:46:50 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 20:46:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "ce89e597013fe01d", "457f3b341542de88e57d8b939da5db5e", "35a1e68b", "3212cd187d87d92d"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000100)="f96f45a214225cdd4d0e13f87b4bf5052d1cf8198cf83f66412bab698d240d4e32a663b46ec3ab470f525263ec734abf4791df37ba6636c466028041394cadd6a8d38b2709a2689d3669cd949edea52608eca4efe3752a2798e1be3196cb848b5c2872ecc89659f4bac28ef7b5d5465d340d3e93e9e5bcf36fb4b4957878f9", 0x7f, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="bd07dcd791d3e08660d709713bd3627c45113c0dcc7b693db37eba4eda9838580374309f8a8d283d237159", 0x2b, 0x20000804, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "ce89e597013fe01d", "457f3b341542de88e57d8b939da5db5e", "35a1e68b", "3212cd187d87d92d"}, 0x28) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000100)="f96f45a214225cdd4d0e13f87b4bf5052d1cf8198cf83f66412bab698d240d4e32a663b46ec3ab470f525263ec734abf4791df37ba6636c466028041394cadd6a8d38b2709a2689d3669cd949edea52608eca4efe3752a2798e1be3196cb848b5c2872ecc89659f4bac28ef7b5d5465d340d3e93e9e5bcf36fb4b4957878f9", 0x7f, 0x8000, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="bd07dcd791d3e08660d709713bd3627c45113c0dcc7b693db37eba4eda9838580374309f8a8d283d237159", 0x2b, 0x20000804, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}], 0x3, &(0x7f0000000900)=""/104, 0x68}, 0x81}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2457.884531][T12405] FAULT_INJECTION: forcing a failure. [ 2457.884531][T12405] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.937379][T12405] CPU: 0 PID: 12405 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2457.947515][T12405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2457.957587][T12405] Call Trace: [ 2457.960860][T12405] [ 2457.963785][T12405] dump_stack_lvl+0xd1/0x138 [ 2457.968386][T12405] should_fail_ex.cold+0x5/0xa [ 2457.973163][T12405] ? __khugepaged_enter+0x38/0x3a0 [ 2457.978285][T12405] should_failslab+0x9/0x20 [ 2457.982792][T12405] kmem_cache_alloc+0x5a/0x430 [ 2457.987561][T12405] __khugepaged_enter+0x38/0x3a0 [ 2457.992521][T12405] dup_mmap+0xcdf/0x10b0 [ 2457.996781][T12405] ? find_held_lock+0x2d/0x110 [ 2458.001554][T12405] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2458.006842][T12405] ? lock_downgrade+0x6e0/0x6e0 [ 2458.011700][T12405] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2458.017538][T12405] ? mm_init+0x8e0/0xc10 [ 2458.021793][T12405] copy_process+0x440f/0x7520 [ 2458.026468][T12405] ? find_held_lock+0x2d/0x110 [ 2458.031250][T12405] ? __cleanup_sighand+0xb0/0xb0 [ 2458.036193][T12405] kernel_clone+0xeb/0x990 [ 2458.040613][T12405] ? create_io_thread+0xf0/0xf0 [ 2458.045463][T12405] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2458.051104][T12405] ? wait_for_completion_io_timeout+0x20/0x20 [ 2458.057181][T12405] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2458.062729][T12405] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2458.068631][T12405] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2458.075215][T12405] ? lockdep_hardirqs_on+0x7d/0x100 [ 2458.080409][T12405] __do_fast_syscall_32+0x65/0xf0 [ 2458.085457][T12405] do_fast_syscall_32+0x33/0x70 [ 2458.090304][T12405] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2458.096628][T12405] RIP: 0023:0xf7f0f549 [ 2458.100688][T12405] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2458.120290][T12405] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2458.128695][T12405] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2458.136658][T12405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2458.144618][T12405] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2458.152578][T12405] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2458.160541][T12405] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2458.168553][T12405] 20:46:50 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x900) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) dup3(0xffffffffffffffff, r4, 0x0) readahead(r0, 0x20, 0x6) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000001c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @mcast2, 0xd}, 0x1c) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r7, r8, 0x0, 0x8000002b) (async) dup(r6) 20:46:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "ce89e597013fe01d", "457f3b341542de88e57d8b939da5db5e", "35a1e68b", "3212cd187d87d92d"}, 0x28) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000100)="f96f45a214225cdd4d0e13f87b4bf5052d1cf8198cf83f66412bab698d240d4e32a663b46ec3ab470f525263ec734abf4791df37ba6636c466028041394cadd6a8d38b2709a2689d3669cd949edea52608eca4efe3752a2798e1be3196cb848b5c2872ecc89659f4bac28ef7b5d5465d340d3e93e9e5bcf36fb4b4957878f9", 0x7f, 0x8000, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000000c0)="bd07dcd791d3e08660d709713bd3627c45113c0dcc7b693db37eba4eda9838580374309f8a8d283d237159", 0x2b, 0x20000804, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:50 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:50 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}], 0x3, &(0x7f0000000900)=""/104, 0x68}, 0x81}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2458.298786][T12416] FAULT_INJECTION: forcing a failure. [ 2458.298786][T12416] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.335908][T12416] CPU: 1 PID: 12416 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2458.346039][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2458.356083][T12416] Call Trace: [ 2458.359353][T12416] [ 2458.362277][T12416] dump_stack_lvl+0xd1/0x138 [ 2458.366884][T12416] should_fail_ex.cold+0x5/0xa [ 2458.371648][T12416] ? copy_process+0x27d6/0x7520 [ 2458.376499][T12416] should_failslab+0x9/0x20 [ 2458.381005][T12416] kmem_cache_alloc+0x5a/0x430 [ 2458.385760][T12416] ? _raw_spin_unlock_irq+0x23/0x50 [ 2458.390973][T12416] copy_process+0x27d6/0x7520 [ 2458.395677][T12416] ? find_held_lock+0x2d/0x110 [ 2458.400484][T12416] ? __cleanup_sighand+0xb0/0xb0 [ 2458.405456][T12416] kernel_clone+0xeb/0x990 [ 2458.409897][T12416] ? create_io_thread+0xf0/0xf0 [ 2458.414768][T12416] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2458.420433][T12416] ? wait_for_completion_io_timeout+0x20/0x20 [ 2458.426537][T12416] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2458.432104][T12416] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2458.438030][T12416] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2458.444640][T12416] ? lockdep_hardirqs_on+0x7d/0x100 [ 2458.449856][T12416] __do_fast_syscall_32+0x65/0xf0 [ 2458.454909][T12416] do_fast_syscall_32+0x33/0x70 [ 2458.459785][T12416] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2458.466135][T12416] RIP: 0023:0xf7f7c549 [ 2458.470219][T12416] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2458.489849][T12416] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2458.498280][T12416] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2458.506281][T12416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2458.514261][T12416] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2458.522243][T12416] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2458.530235][T12416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2458.538236][T12416] 20:46:51 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:51 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 20:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="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", 0x131, 0x4811, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}], 0x3, &(0x7f0000000900)=""/104, 0x68}, 0x81}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:51 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x900) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (rerun: 64) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) dup3(0xffffffffffffffff, r4, 0x0) (async, rerun: 64) readahead(r0, 0x20, 0x6) (rerun: 64) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f00000001c0)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @mcast2, 0xd}, 0x1c) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r7, r8, 0x0, 0x8000002b) (async) dup(r6) 20:46:51 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x360e, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="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", 0x131, 0x4811, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x200, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x2, 0x3, 0x1, 0x100, 0x6}, 0x20) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2458.819449][T12453] FAULT_INJECTION: forcing a failure. [ 2458.819449][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.867219][T12453] CPU: 0 PID: 12453 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2458.877357][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2458.887447][T12453] Call Trace: [ 2458.890751][T12453] [ 2458.893712][T12453] dump_stack_lvl+0xd1/0x138 [ 2458.898361][T12453] should_fail_ex.cold+0x5/0xa [ 2458.903196][T12453] ? copy_process+0x43a0/0x7520 [ 2458.908093][T12453] should_failslab+0x9/0x20 [ 2458.912646][T12453] kmem_cache_alloc+0x5a/0x430 [ 2458.917451][T12453] copy_process+0x43a0/0x7520 [ 2458.922169][T12453] ? find_held_lock+0x2d/0x110 [ 2458.927021][T12453] ? __cleanup_sighand+0xb0/0xb0 [ 2458.932017][T12453] kernel_clone+0xeb/0x990 [ 2458.936490][T12453] ? create_io_thread+0xf0/0xf0 [ 2458.941395][T12453] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2458.947098][T12453] ? wait_for_completion_io_timeout+0x20/0x20 [ 2458.953227][T12453] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2458.958800][T12453] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2458.964730][T12453] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2458.971345][T12453] ? lockdep_hardirqs_on+0x7d/0x100 [ 2458.976566][T12453] __do_fast_syscall_32+0x65/0xf0 [ 2458.981625][T12453] do_fast_syscall_32+0x33/0x70 [ 2458.986589][T12453] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2458.992939][T12453] RIP: 0023:0xf7f7c549 [ 2458.997017][T12453] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 20:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="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", 0x131, 0x4811, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000280)="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", 0x131, 0x4811, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x200, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x2, 0x3, 0x1, 0x100, 0x6}, 0x20) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r1, r2, 0x0) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) (async) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x200, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e23}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x2, 0x3, 0x1, 0x100, 0x6}, 0x20) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:51 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) process_vm_writev(r5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000280)=""/164, 0xa4}], 0x5, &(0x7f0000000640)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/23, 0x17}, {&(0x7f0000000600)=""/44, 0x2c}], 0x5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) [ 2459.016653][T12453] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2459.025085][T12453] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2459.033068][T12453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2459.041054][T12453] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2459.049045][T12453] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2459.057025][T12453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2459.065039][T12453] 20:46:51 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 20:46:51 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:51 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x490e, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="b7d427cfd04dee3a0d69bbece62be2603adad1019adc0bb3d5b066a8eec8fcc53dd8dae030f37799385006d5dd60c8583bcc5c1b89eb448e653c0609291a88ac8700590f5f38931709b408489898e5f3b97b03fc38ff6cd51dd2a319d67509b56ed3bc144d3396f20e1414", 0x6b, 0xc880, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x2}, 0x1c) 20:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000100)) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f00000000c0)=0x200, 0x4) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x4e23}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, 0x3, 0x2, 0x3, 0x1, 0x100, 0x6}, 0x20) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:51 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 20:46:51 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8c03, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="b7d427cfd04dee3a0d69bbece62be2603adad1019adc0bb3d5b066a8eec8fcc53dd8dae030f37799385006d5dd60c8583bcc5c1b89eb448e653c0609291a88ac8700590f5f38931709b408489898e5f3b97b03fc38ff6cd51dd2a319d67509b56ed3bc144d3396f20e1414", 0x6b, 0xc880, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x2}, 0x1c) 20:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f26f8c2e8aedef2df320662920a54d0aebf28b507a3903d0767e8e95cf16aff1", "d1323dfa6f8493b777bdd850b3529d1cb9100fdcc5182b92e8b4e5cfa569fb61", "366bfe4a10d9c411d2bc09600ca530e51a9bb77890fc505f8a2162b627c320a6", "384503294b8095b0710515aae519ed793cb1c3627da72cd2bea1d08c7f7b4315", "43af41ba0f5dda9c93e03b14e4d9709521f1c3945a6dca3d4bb2ef8f61dc3a9e", "f76eb749ef9179b9651fd246", 0x10001, 0x7, 0x0, 0xffff, 0x4}}) 20:46:51 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xa80d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:52 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 2459.525167][T12501] FAULT_INJECTION: forcing a failure. [ 2459.525167][T12501] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.578929][T12501] CPU: 1 PID: 12501 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2459.589061][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2459.599111][T12501] Call Trace: [ 2459.602389][T12501] [ 2459.605325][T12501] dump_stack_lvl+0xd1/0x138 [ 2459.609922][T12501] should_fail_ex.cold+0x5/0xa [ 2459.614695][T12501] ? vm_area_dup+0x7d/0x380 [ 2459.619201][T12501] should_failslab+0x9/0x20 [ 2459.623729][T12501] kmem_cache_alloc+0x5a/0x430 [ 2459.628541][T12501] vm_area_dup+0x7d/0x380 [ 2459.632903][T12501] ? find_held_lock+0x2d/0x110 [ 2459.637696][T12501] ? kmem_cache_alloc_bulk+0x38e/0x840 [ 2459.643190][T12501] ? mas_next_nentry+0x610/0xab0 [ 2459.648223][T12501] ? vm_area_alloc+0x100/0x100 [ 2459.653002][T12501] ? mas_find+0x211/0xd10 [ 2459.657336][T12501] dup_mmap+0x655/0x10b0 [ 2459.661578][T12501] ? find_held_lock+0x2d/0x110 [ 2459.666355][T12501] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2459.671660][T12501] ? lock_downgrade+0x6e0/0x6e0 [ 2459.676549][T12501] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2459.682424][T12501] ? mm_init+0x8e0/0xc10 [ 2459.686710][T12501] copy_process+0x440f/0x7520 [ 2459.691421][T12501] ? find_held_lock+0x2d/0x110 [ 2459.696199][T12501] ? __cleanup_sighand+0xb0/0xb0 [ 2459.701144][T12501] kernel_clone+0xeb/0x990 [ 2459.705574][T12501] ? create_io_thread+0xf0/0xf0 [ 2459.710464][T12501] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2459.716141][T12501] ? wait_for_completion_io_timeout+0x20/0x20 [ 2459.722222][T12501] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2459.727780][T12501] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2459.733709][T12501] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2459.740298][T12501] ? lockdep_hardirqs_on+0x7d/0x100 [ 2459.745492][T12501] __do_fast_syscall_32+0x65/0xf0 [ 2459.750532][T12501] do_fast_syscall_32+0x33/0x70 [ 2459.755383][T12501] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2459.761719][T12501] RIP: 0023:0xf7f0f549 [ 2459.765796][T12501] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2459.785498][T12501] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2459.793909][T12501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2459.801897][T12501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2459.809868][T12501] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2459.817836][T12501] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2459.825802][T12501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2459.833782][T12501] 20:46:52 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xd40d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f00000001c0)="b7d427cfd04dee3a0d69bbece62be2603adad1019adc0bb3d5b066a8eec8fcc53dd8dae030f37799385006d5dd60c8583bcc5c1b89eb448e653c0609291a88ac8700590f5f38931709b408489898e5f3b97b03fc38ff6cd51dd2a319d67509b56ed3bc144d3396f20e1414", 0x6b, 0xc880, &(0x7f0000000000)={0xa, 0x4e21, 0x8, @mcast2, 0x2}, 0x1c) 20:46:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) (async) process_vm_writev(r5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000280)=""/164, 0xa4}], 0x5, &(0x7f0000000640)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/23, 0x17}, {&(0x7f0000000600)=""/44, 0x2c}], 0x5, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:46:52 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (rerun: 64) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f26f8c2e8aedef2df320662920a54d0aebf28b507a3903d0767e8e95cf16aff1", "d1323dfa6f8493b777bdd850b3529d1cb9100fdcc5182b92e8b4e5cfa569fb61", "366bfe4a10d9c411d2bc09600ca530e51a9bb77890fc505f8a2162b627c320a6", "384503294b8095b0710515aae519ed793cb1c3627da72cd2bea1d08c7f7b4315", "43af41ba0f5dda9c93e03b14e4d9709521f1c3945a6dca3d4bb2ef8f61dc3a9e", "f76eb749ef9179b9651fd246", 0x10001, 0x7, 0x0, 0xffff, 0x4}}) 20:46:52 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="161c1f82f151d24cfe07f0bb42f7e72311603082d78344c3ac8cf76a6d79162175207bcfc801d51625fe8a6abd93d90d23a02b614c9e1d6f4fcdfa9fef9193dbc86dd76748f82dfa5237ee92dcbc7cb88e2796a5eda83b2c2c9a31181c575cc40b44fb75861ccb9a52b86ab63f89adc69a98f3d0c67564a81c7d35", 0x7b, 0x20000, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:52 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 20:46:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="161c1f82f151d24cfe07f0bb42f7e72311603082d78344c3ac8cf76a6d79162175207bcfc801d51625fe8a6abd93d90d23a02b614c9e1d6f4fcdfa9fef9193dbc86dd76748f82dfa5237ee92dcbc7cb88e2796a5eda83b2c2c9a31181c575cc40b44fb75861ccb9a52b86ab63f89adc69a98f3d0c67564a81c7d35", 0x7b, 0x20000, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x8}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r1, &(0x7f00000001c0)="161c1f82f151d24cfe07f0bb42f7e72311603082d78344c3ac8cf76a6d79162175207bcfc801d51625fe8a6abd93d90d23a02b614c9e1d6f4fcdfa9fef9193dbc86dd76748f82dfa5237ee92dcbc7cb88e2796a5eda83b2c2c9a31181c575cc40b44fb75861ccb9a52b86ab63f89adc69a98f3d0c67564a81c7d35", 0x7b, 0x20000, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x8}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2460.151011][T12532] FAULT_INJECTION: forcing a failure. [ 2460.151011][T12532] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.207789][T12532] CPU: 0 PID: 12532 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2460.217937][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2460.228016][T12532] Call Trace: [ 2460.231292][T12532] [ 2460.234216][T12532] dump_stack_lvl+0xd1/0x138 [ 2460.238808][T12532] should_fail_ex.cold+0x5/0xa [ 2460.243575][T12532] ? vm_area_dup+0x7d/0x380 [ 2460.248074][T12532] should_failslab+0x9/0x20 [ 2460.252574][T12532] kmem_cache_alloc+0x5a/0x430 [ 2460.257332][T12532] vm_area_dup+0x7d/0x380 [ 2460.261658][T12532] ? copy_page_range+0x1dfe/0x3b40 [ 2460.266776][T12532] ? mas_node_count_gfp+0x88/0x140 [ 2460.271900][T12532] ? mas_next_nentry+0x610/0xab0 [ 2460.276838][T12532] ? vm_area_alloc+0x100/0x100 [ 2460.281611][T12532] ? percpu_counter_add_batch+0xc1/0x180 [ 2460.287300][T12532] ? __vm_enough_memory+0x188/0x390 [ 2460.292501][T12532] ? security_vm_enough_memory_mm+0x89/0xb0 [ 2460.298402][T12532] dup_mmap+0x655/0x10b0 [ 2460.302648][T12532] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2460.307926][T12532] ? lock_downgrade+0x6e0/0x6e0 [ 2460.312776][T12532] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2460.318587][T12532] ? mm_init+0x8e0/0xc10 [ 2460.322827][T12532] copy_process+0x440f/0x7520 [ 2460.327519][T12532] ? find_held_lock+0x2d/0x110 [ 2460.332319][T12532] ? __cleanup_sighand+0xb0/0xb0 [ 2460.337261][T12532] kernel_clone+0xeb/0x990 [ 2460.341692][T12532] ? create_io_thread+0xf0/0xf0 [ 2460.346573][T12532] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2460.352212][T12532] ? wait_for_completion_io_timeout+0x20/0x20 [ 2460.358284][T12532] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2460.363826][T12532] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2460.369719][T12532] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2460.376303][T12532] ? lockdep_hardirqs_on+0x7d/0x100 [ 2460.381493][T12532] __do_fast_syscall_32+0x65/0xf0 [ 2460.386525][T12532] do_fast_syscall_32+0x33/0x70 [ 2460.391377][T12532] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2460.397705][T12532] RIP: 0023:0xf7f0f549 [ 2460.401764][T12532] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2460.421366][T12532] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2460.429778][T12532] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2460.437742][T12532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2460.445704][T12532] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 20:46:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xdd0d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async, rerun: 32) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (rerun: 32) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "f26f8c2e8aedef2df320662920a54d0aebf28b507a3903d0767e8e95cf16aff1", "d1323dfa6f8493b777bdd850b3529d1cb9100fdcc5182b92e8b4e5cfa569fb61", "366bfe4a10d9c411d2bc09600ca530e51a9bb77890fc505f8a2162b627c320a6", "384503294b8095b0710515aae519ed793cb1c3627da72cd2bea1d08c7f7b4315", "43af41ba0f5dda9c93e03b14e4d9709521f1c3945a6dca3d4bb2ef8f61dc3a9e", "f76eb749ef9179b9651fd246", 0x10001, 0x7, 0x0, 0xffff, 0x4}}) [ 2460.453665][T12532] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2460.461624][T12532] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2460.469599][T12532] 20:46:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) (rerun: 64) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) process_vm_writev(r5, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/111, 0x6f}, {&(0x7f00000001c0)=""/135, 0x87}, {&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000280)=""/164, 0xa4}], 0x5, &(0x7f0000000640)=[{&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/23, 0x17}, {&(0x7f0000000600)=""/44, 0x2c}], 0x5, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x8000002b) (rerun: 64) dup(r1) 20:46:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xde0d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) sendto$inet6(r1, &(0x7f00000001c0)="161c1f82f151d24cfe07f0bb42f7e72311603082d78344c3ac8cf76a6d79162175207bcfc801d51625fe8a6abd93d90d23a02b614c9e1d6f4fcdfa9fef9193dbc86dd76748f82dfa5237ee92dcbc7cb88e2796a5eda83b2c2c9a31181c575cc40b44fb75861ccb9a52b86ab63f89adc69a98f3d0c67564a81c7d35", 0x7b, 0x20000, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x8}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:53 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 20:46:53 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xe10d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="c7a4568a7426d8e458abb70270abc9e719519e7138b76b379d6e4f682e92e8bf2387b1d84becabfecc5079018a9eea9e9be43c72ff6d6e4cb950712cd5b9eb405ae9743f1c", 0x45, 0xc0080, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:53 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r7 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="181900000200800000000000bbf73027f986cf6cbe63fe0297065a1962673a89f60db47c38f8f3472b37d0e39ad760a51d398b4768227d0188195f21271b9e7e21f1945e67078484c22a3d69944c99cb540367b1a59552326111a3b1bac90584ab40e9d2df185280576c480a133efc7d38cf0d3eb7c9d8e2fba224ddf538c83118a7efaa4284f517bec7128978f046c600"/154, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7], 0xc0, 0x4080}}], 0x4, 0x24000010) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) r10 = getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r11, 0x0, 0x0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r14 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r12]}}, @cred={{0x18, 0x1, 0x2, {r11, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r12, 0xffffffffffffffff, r13]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @cred={{0x18, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r14}}}], 0xc0, 0x4080}}], 0x4, 0x24000010) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) syz_fuse_handle_req(r0, &(0x7f0000003140)="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", 0x2000, &(0x7f0000000ac0)={&(0x7f0000000100)={0x50, 0x0, 0x1000, {0x7, 0x26, 0x1ff, 0x0, 0x1, 0x1, 0xca90, 0x6e40}}, &(0x7f0000000180)={0x18, 0x0, 0x100000000, {0x81e4}}, &(0x7f00000001c0)={0x18, 0x0, 0xbb89, {0x80}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x5, {0x1}}, &(0x7f0000000240)={0x18, 0x0, 0x59a, {0x6}}, &(0x7f0000000280)={0x28, 0x0, 0x2, {{0x3, 0xe504, 0x2}}}, &(0x7f00000002c0)={0x60, 0x0, 0x7fff, {{0x6, 0x4, 0x48, 0x8000000000000000, 0x7, 0x3ff, 0xffffff00, 0x100}}}, &(0x7f0000000340)={0x18, 0x0, 0x80, {0x5}}, &(0x7f0000000380)={0x11, 0xfffffffffffffffe, 0x0, {'\x00'}}, &(0x7f00000003c0)={0x20, 0xfffffffffffffffe, 0x5, {0x0, 0x9}}, &(0x7f0000000400)={0x78, 0xfffffffffffffffe, 0x80000001, {0x2, 0x7f, 0x0, {0x0, 0x6, 0x7ff, 0x8000000000000001, 0x0, 0x5, 0x2, 0x3f, 0x5, 0x6000, 0x7, r1, r2, 0xf2c, 0x7}}}, &(0x7f0000000600)={0x90, 0xfffffffffffffffe, 0x4, {0x1, 0x2, 0x8, 0xdd, 0x0, 0x8001, {0x6, 0x2, 0x6142, 0x5, 0x3, 0x5, 0x9, 0x5, 0x800, 0x8000, 0x9, 0x0, 0x0, 0x5, 0xffffffff}}}, &(0x7f00000006c0)={0x48, 0x0, 0xffffffffffffffff, [{0x6, 0x5, 0x0, 0x1}, {0x4, 0x2, 0x1, 0x9, '\x00'}]}, &(0x7f0000001140)={0x458, 0x0, 0x5, [{{0x1, 0x3, 0x6, 0x8000000000000000, 0x1f16659c, 0x6, {0x6, 0xbb6, 0xffffffff, 0xffffffffffffffff, 0x1ff, 0x2, 0x100, 0x81, 0x7fff, 0x2000, 0x6, r1, 0x0, 0x6, 0x400}}, {0x5, 0x0, 0x0, 0x2}}, {{0x3, 0x2, 0x5, 0x3a5cecee, 0x400, 0x3, {0x1, 0x6, 0x100000001, 0x7, 0x7fff, 0xc90000000000, 0x8, 0x3, 0x3, 0x6000, 0x6, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x4, 0x0, 0x6}}, {{0x4, 0x0, 0x3, 0x80000001, 0x38b1, 0xfffffeef, {0x4, 0x4fda34d0, 0xe8, 0xff, 0xffffffffffffffff, 0x7, 0x1000, 0x7, 0x3f, 0xc000, 0xfffffff9, r1, r7, 0x0, 0xfffffff7}}, {0x0, 0x53e, 0x1, 0x1f, '\x00'}}, {{0x2, 0x2, 0x8, 0xa4, 0x37, 0x341, {0x2, 0x3, 0x7e55, 0xfffffffffffffffc, 0x0, 0x8, 0x5e7, 0x8, 0x20, 0xa000, 0x6, r1, r2, 0x3, 0x7f}}, {0x2, 0x8000000000000000, 0x1, 0x8, '\x00'}}, {{0x0, 0x1, 0x5, 0x4, 0xfffffffd, 0xfff, {0x2, 0x8000, 0x100000000, 0x9, 0x10001, 0xfcb, 0x4f, 0x7, 0x9, 0xc000, 0x0, r1, r14, 0xffffffff, 0x7}}, {0x0, 0x45, 0x1, 0x6, '\x00'}}, {{0x5, 0x0, 0x6, 0xffffffffffffff80, 0x7, 0x925d, {0x1, 0x4, 0x5, 0x0, 0xff, 0x101, 0x6, 0x2, 0x2, 0x1000, 0x1, r16, r17, 0x7ff, 0x4}}, {0x5, 0x5, 0x0, 0x7ff}}, {{0x1, 0x0, 0x100000000, 0x81, 0x6, 0x7, {0x2, 0x9, 0x800, 0x8, 0x101, 0x4, 0x9a9e, 0x2, 0x7, 0x2000, 0x2, r1, r2, 0x0, 0xfffff3ee}}, {0x5, 0x0, 0x1, 0x401, '\x00'}}]}, &(0x7f00000009c0)={0xa0, 0x0, 0x100000000, {{0x3, 0x0, 0x2, 0x3, 0x600000, 0x2, {0x2, 0x0, 0x2c5, 0x464, 0x81, 0xfffffffffffffff7, 0x8, 0x7fffffff, 0x0, 0x8000, 0x0, r1, r2, 0x88}}, {0x0, 0x10}}}, &(0x7f0000000a80)={0x20, 0x0, 0xffffffffffffffff, {0x2, 0x6, 0x7, 0xfffffffc}}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000001c0)="c7a4568a7426d8e458abb70270abc9e719519e7138b76b379d6e4f682e92e8bf2387b1d84becabfecc5079018a9eea9e9be43c72ff6d6e4cb950712cd5b9eb405ae9743f1c", 0x45, 0xc0080, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000001c0)="c7a4568a7426d8e458abb70270abc9e719519e7138b76b379d6e4f682e92e8bf2387b1d84becabfecc5079018a9eea9e9be43c72ff6d6e4cb950712cd5b9eb405ae9743f1c", 0x45, 0xc0080, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:53 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:53 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = fanotify_init(0x1, 0x400) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000001c0)={{0x8001, 0x4}, 0x100, './file0\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) dup(r1) 20:46:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000001c0)="c7a4568a7426d8e458abb70270abc9e719519e7138b76b379d6e4f682e92e8bf2387b1d84becabfecc5079018a9eea9e9be43c72ff6d6e4cb950712cd5b9eb405ae9743f1c", 0x45, 0xc0080, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (rerun: 32) [ 2461.135636][T12583] FAULT_INJECTION: forcing a failure. [ 2461.135636][T12583] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.155595][T12585] FAULT_INJECTION: forcing a failure. [ 2461.155595][T12585] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.213480][T12585] CPU: 0 PID: 12585 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2461.223618][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2461.233712][T12585] Call Trace: [ 2461.237012][T12585] [ 2461.240055][T12585] dump_stack_lvl+0xd1/0x138 [ 2461.244697][T12585] should_fail_ex.cold+0x5/0xa [ 2461.249519][T12585] ? dup_fd+0x8d/0xcb0 [ 2461.253633][T12585] should_failslab+0x9/0x20 [ 2461.258182][T12585] kmem_cache_alloc+0x5a/0x430 [ 2461.262983][T12585] dup_fd+0x8d/0xcb0 [ 2461.266905][T12585] ? trace_kmalloc+0x35/0x100 [ 2461.271700][T12585] ? apparmor_task_alloc+0x2bf/0x3b0 [ 2461.277021][T12585] ? bpf_lsm_task_alloc+0x9/0x10 [ 2461.282000][T12585] ? security_task_alloc+0xe4/0x250 [ 2461.287233][T12585] copy_process+0x24ea/0x7520 [ 2461.291928][T12585] ? find_held_lock+0x2d/0x110 [ 2461.296736][T12585] ? __cleanup_sighand+0xb0/0xb0 [ 2461.301711][T12585] kernel_clone+0xeb/0x990 [ 2461.306151][T12585] ? create_io_thread+0xf0/0xf0 [ 2461.311023][T12585] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2461.316691][T12585] ? wait_for_completion_io_timeout+0x20/0x20 [ 2461.322802][T12585] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2461.328369][T12585] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2461.334295][T12585] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2461.340914][T12585] ? lockdep_hardirqs_on+0x7d/0x100 [ 2461.346132][T12585] __do_fast_syscall_32+0x65/0xf0 [ 2461.351188][T12585] do_fast_syscall_32+0x33/0x70 [ 2461.356066][T12585] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2461.362416][T12585] RIP: 0023:0xf7f0f549 [ 2461.366496][T12585] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2461.386131][T12585] RSP: 002b:00000000f7ee957c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2461.394561][T12585] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2461.402543][T12585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2461.410522][T12585] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2461.418500][T12585] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2461.426480][T12585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2461.434479][T12585] 20:46:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x50, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2008000}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2461.537646][T12583] CPU: 0 PID: 12583 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2461.547777][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2461.557870][T12583] Call Trace: [ 2461.561172][T12583] [ 2461.564132][T12583] dump_stack_lvl+0xd1/0x138 [ 2461.568769][T12583] should_fail_ex.cold+0x5/0xa [ 2461.573594][T12583] should_failslab+0x9/0x20 [ 2461.578140][T12583] __kmem_cache_alloc_node+0x5b/0x430 [ 2461.583551][T12583] ? security_prepare_creds+0x112/0x190 [ 2461.589157][T12583] ? security_prepare_creds+0x112/0x190 [ 2461.594752][T12583] __kmalloc+0x4a/0xd0 [ 2461.598868][T12583] security_prepare_creds+0x112/0x190 [ 2461.604301][T12583] prepare_creds+0x572/0x7b0 [ 2461.608940][T12583] copy_creds+0xa7/0xd50 [ 2461.613239][T12583] copy_process+0xd60/0x7520 [ 2461.617875][T12583] ? find_held_lock+0x2d/0x110 [ 2461.622692][T12583] ? get_pid_task+0xec/0x210 [ 2461.627325][T12583] ? lock_downgrade+0x6e0/0x6e0 [ 2461.632218][T12583] ? __cleanup_sighand+0xb0/0xb0 [ 2461.637315][T12583] kernel_clone+0xeb/0x990 [ 2461.641773][T12583] ? create_io_thread+0xf0/0xf0 [ 2461.646670][T12583] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2461.652363][T12583] ? wait_for_completion_io_timeout+0x20/0x20 [ 2461.658489][T12583] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2461.664075][T12583] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2461.670020][T12583] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2461.676655][T12583] ? lockdep_hardirqs_on+0x7d/0x100 [ 2461.681890][T12583] __do_fast_syscall_32+0x65/0xf0 [ 2461.686979][T12583] do_fast_syscall_32+0x33/0x70 [ 2461.691871][T12583] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2461.698235][T12583] RIP: 0023:0xf7f7c549 [ 2461.702336][T12583] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2461.721992][T12583] RSP: 002b:00000000f7f5657c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2461.730442][T12583] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2461.738445][T12583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2461.746444][T12583] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2461.754448][T12583] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2461.762446][T12583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2461.770469][T12583] 20:46:54 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xf60d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:54 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 20:46:54 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x50, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2008000}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x50, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2008000}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) (async) r7 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="21954b6bd140e6021ce9dad600983038a6051dee9ca66c43c0b3e5b34be22b8e5dcc5043605e1ed11ca2f15a907404b0d68d5f2697c8fea11467d0109be3d47a4ee39e971384c43400f7a4c7966468120ee41742209d226580a3a48535657f5a631ea6167acf1fb1d7c9dfe24ffffa2615c35d3cf5d4e9401e1c96b2c199068e3e7547bbb382e5689ce6f08142c8e2eaa980588355184140b8e0c011165701c2dc6478fb34e84a79b1e0a8c73063d29a563e7f449b6810f0dfa4e062e0a99d6815aff389eda46ffe5fe6872db403196be7c3ef8c847f54182660e3677c9e5ec07d3846f2810d8ee048694537c2e9bd43e7ce30b0c2449deec22888fd5d07b0353b4cfe99b7ff494371a438d5065e9afbe069ef2a84af1f32680bdf05f05564d25ff80643368c00bf4e44a8333a31eea1a0144161adf5de5ed1a28849f26464aaf1af132de366d3391ccb75119d7b177685bb5155c395d56f12509ca239b880d4610877b5829a175df2605743a8c7fdb50139dd47638e81688efb81de07074c404342d5d9e6af1c942b75256a2d53b3d8494e77a984188fea424e5f389566487a399189b23e51a3246d5ca7ebe05ba59c1f9f9f5de25104a07a73bcbe2dd35dc1b2a67a62884e9d6d7f0edd2481aabb7d54f82ff3b4eef09d6e371e9a80049fdcecb8d3efce4bdc4ed0b98a1754f6c1305f92dce128b5e6b3eca464b66d628d4bf0906e2b2ec91f2c4005bbd154e4702724abbd69380b9f8ba2f3eeda30235132edc1175764c7fbc40ad69eb16fb43432a5bc89b10b7226a134952f61a0a578540fa51a81c5f1b020ac8c2b380ca4006498465b37ce89983159e85f621a7772380bd0272295a997f258ec279d3a69f126da7ef7135ceeded710d714a225d4555a81517c3da6815f9e0a7f5612520bb823cda2696da1e55131fbfc85c14d01cd02bbe8e68b2d484d90e1e716f59dfd79575f50d4aa4f61b724c711e1dd5060b509bac5b6192d0103dc6a5a560bbe27f972840fe26f37728fbb8915c19ebe8738f9f29cb4e2759a568c835eb9616262ee485c453c2808108c952e90caa16f55b89e94d78e11c9732e9794956c951a3ffde38970d50a943fb9fed121689c7af14c85d61835aa0ea70afe722a21a3dd4a8e38f5dc4d9bd6b9df2125ee3e1b4fce74b26aecae0abf99526f0b79cdf24b5de85f233f56ddc662e07348358a893fbdda3bb197df133617cd0ad591bd65c0b47352a1fbfbabd2b5dcfffd38f217f29f3c511ee0c22ea05dad2c1cb90b4ed41375f56ec3b3293285e0314092c94876b7b5a9d2e1d04dd3751e6dfd710e223c647852bd0c3ea92002b85fe17d894fae1dd1db5fd606564466bea9841e5589a44d16b742970d19a7ae6a91d8eb385d130a683cb559e9c91e5407bb30af80eef2715f82486a4539fb058499dae3974ec7aadc28dae6f77a7aab34f9f1d67babfc14f2d73d34357062ce13a90b505399687700af8a03d25e5931ac390daf45e946366ea07e050be999fe44783690c4a1a77d267bf1c9cc1ce7b308b0daaf06921110fed44447cdd6bfa54c3f1470303a55d8a8d9f0916b85a7e58f20780406de6db0e4ffe66e00171ed5a36ffdc46ced8812e76113b9526073cd7ae6d59ce961cc27d1e10da792cda0c6ffe2c24b1aacf34d67849b8945781be2a58dbe6ccbd5ed761c4eef2d189ed76ba678555cd3289aaf9c8322e42fd353b8f5114c081ac4b89f44ac5957e96245233ecf8198c17a5efaa89709bed5b49b074c75112ffd8b68cb2d35df1fc68bae6f8503b8b570cdf0bf731b6b2ef6728248966580f1d9354c41013b78af9046dc31d0fc0bd3b4cc0bb21dac9df34d637266ab7d03615c12c161e985bf6c730ad0e8ec364fce4e04717f30613c33e88084ef8ac8d7f0f1270495c583c02df2d42d74493740a55175e8caaf93acd358974aee3de0d480054a7a52bc3249c69c00c461e46142e1a081cfba35bb171c180fbf28d4159a1f674a38174bdc3e6155291952ef9fd413b7382f41da3ccebbb25167f3360a5c8f3d6509dcac8bc4f1670bdbfb55eec248f50b92c8b1cde6cf404eb6a4757c0a13c194dc0e013e7e1d9001882fb7f2493e200d63f5f0628c1c858ac0f34f5a888ce6968dd3f0175bbde8083a7c398d07db7773421e740017af6c9900cddd8374c6d8ad3268123127a9d717753aa877e30a4087521e1c61127e06d5ac9bdb541a605d581a21695f44ab0df511dcf883683cbe6f1c299e9fdea836915ed7a41ce5cfbc4075d00178cc826ce485088965ab6e3eb9d1e1bda069b7a86d80626e3b0dbc504d89daa2ecc7e143bb655d974831281a6dc27b0246361c24f532719bf11087cbe7b73e5ab4c12305b10d04a10ba55ec10ec75e933ca60a7d3cdd2102c94fdaa6c9492e151f839b9272f7b4324a7a8cca923eb2b69d1d30760ff06b1ccef2c82663bb77c7983be7e65f245914734077004aa7c46f15f8d17e03cf02168d8e33a0ec3534d7fd0a1eea2551bfd511a6a339dae3f5588ba1a03503eae009f7f9d3b165ea5e6d642d2f4e4305a64633e048ee725ccfec3516577c2bcf6a4cf480fecef92697ca76b8fbe14bf8ea6b5cecdcdbbb53c2b9731e1a60a9fc5e5109b366c7263a4a5f7dbea533e401e4da5cd2569dac00e9ec6da6c2f4ee2d1b6e0a5684a38bfbd31c364ffafe849e505e790ec1895cffa78740", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="181900000200800000000000bbf73027f986cf6cbe63fe0297065a1962673a89f60db47c38f8f3472b37d0e39ad760a51d398b4768227d0188195f21271b9e7e21f1945e67078484c22a3d69944c99cb540367b1a59552326111a3b1bac90584ab40e9d2df185280576c480a133efc7d38cf0d3eb7c9d8e2fba224ddf538c83118a7efaa4284f517bec7128978f046c600"/154, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7], 0xc0, 0x4080}}], 0x4, 0x24000010) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) r10 = getpid() (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r11, 0x0, 0x0) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r14 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r12]}}, @cred={{0x18, 0x1, 0x2, {r11, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r12, 0xffffffffffffffff, r13]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @cred={{0x18, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r14}}}], 0xc0, 0x4080}}], 0x4, 0x24000010) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) syz_fuse_handle_req(r0, &(0x7f0000003140)="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", 0x2000, &(0x7f0000000ac0)={&(0x7f0000000100)={0x50, 0x0, 0x1000, {0x7, 0x26, 0x1ff, 0x0, 0x1, 0x1, 0xca90, 0x6e40}}, &(0x7f0000000180)={0x18, 0x0, 0x100000000, {0x81e4}}, &(0x7f00000001c0)={0x18, 0x0, 0xbb89, {0x80}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x5, {0x1}}, &(0x7f0000000240)={0x18, 0x0, 0x59a, {0x6}}, &(0x7f0000000280)={0x28, 0x0, 0x2, {{0x3, 0xe504, 0x2}}}, &(0x7f00000002c0)={0x60, 0x0, 0x7fff, {{0x6, 0x4, 0x48, 0x8000000000000000, 0x7, 0x3ff, 0xffffff00, 0x100}}}, &(0x7f0000000340)={0x18, 0x0, 0x80, {0x5}}, &(0x7f0000000380)={0x11, 0xfffffffffffffffe, 0x0, {'\x00'}}, &(0x7f00000003c0)={0x20, 0xfffffffffffffffe, 0x5, {0x0, 0x9}}, &(0x7f0000000400)={0x78, 0xfffffffffffffffe, 0x80000001, {0x2, 0x7f, 0x0, {0x0, 0x6, 0x7ff, 0x8000000000000001, 0x0, 0x5, 0x2, 0x3f, 0x5, 0x6000, 0x7, r1, r2, 0xf2c, 0x7}}}, &(0x7f0000000600)={0x90, 0xfffffffffffffffe, 0x4, {0x1, 0x2, 0x8, 0xdd, 0x0, 0x8001, {0x6, 0x2, 0x6142, 0x5, 0x3, 0x5, 0x9, 0x5, 0x800, 0x8000, 0x9, 0x0, 0x0, 0x5, 0xffffffff}}}, &(0x7f00000006c0)={0x48, 0x0, 0xffffffffffffffff, [{0x6, 0x5, 0x0, 0x1}, {0x4, 0x2, 0x1, 0x9, '\x00'}]}, &(0x7f0000001140)={0x458, 0x0, 0x5, [{{0x1, 0x3, 0x6, 0x8000000000000000, 0x1f16659c, 0x6, {0x6, 0xbb6, 0xffffffff, 0xffffffffffffffff, 0x1ff, 0x2, 0x100, 0x81, 0x7fff, 0x2000, 0x6, r1, 0x0, 0x6, 0x400}}, {0x5, 0x0, 0x0, 0x2}}, {{0x3, 0x2, 0x5, 0x3a5cecee, 0x400, 0x3, {0x1, 0x6, 0x100000001, 0x7, 0x7fff, 0xc90000000000, 0x8, 0x3, 0x3, 0x6000, 0x6, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x4, 0x0, 0x6}}, {{0x4, 0x0, 0x3, 0x80000001, 0x38b1, 0xfffffeef, {0x4, 0x4fda34d0, 0xe8, 0xff, 0xffffffffffffffff, 0x7, 0x1000, 0x7, 0x3f, 0xc000, 0xfffffff9, r1, r7, 0x0, 0xfffffff7}}, {0x0, 0x53e, 0x1, 0x1f, '\x00'}}, {{0x2, 0x2, 0x8, 0xa4, 0x37, 0x341, {0x2, 0x3, 0x7e55, 0xfffffffffffffffc, 0x0, 0x8, 0x5e7, 0x8, 0x20, 0xa000, 0x6, r1, r2, 0x3, 0x7f}}, {0x2, 0x8000000000000000, 0x1, 0x8, '\x00'}}, {{0x0, 0x1, 0x5, 0x4, 0xfffffffd, 0xfff, {0x2, 0x8000, 0x100000000, 0x9, 0x10001, 0xfcb, 0x4f, 0x7, 0x9, 0xc000, 0x0, r1, r14, 0xffffffff, 0x7}}, {0x0, 0x45, 0x1, 0x6, '\x00'}}, {{0x5, 0x0, 0x6, 0xffffffffffffff80, 0x7, 0x925d, {0x1, 0x4, 0x5, 0x0, 0xff, 0x101, 0x6, 0x2, 0x2, 0x1000, 0x1, r16, r17, 0x7ff, 0x4}}, {0x5, 0x5, 0x0, 0x7ff}}, {{0x1, 0x0, 0x100000000, 0x81, 0x6, 0x7, {0x2, 0x9, 0x800, 0x8, 0x101, 0x4, 0x9a9e, 0x2, 0x7, 0x2000, 0x2, r1, r2, 0x0, 0xfffff3ee}}, {0x5, 0x0, 0x1, 0x401, '\x00'}}]}, &(0x7f00000009c0)={0xa0, 0x0, 0x100000000, {{0x3, 0x0, 0x2, 0x3, 0x600000, 0x2, {0x2, 0x0, 0x2c5, 0x464, 0x81, 0xfffffffffffffff7, 0x8, 0x7fffffff, 0x0, 0x8000, 0x0, r1, r2, 0x88}}, {0x0, 0x10}}}, &(0x7f0000000a80)={0x20, 0x0, 0xffffffffffffffff, {0x2, 0x6, 0x7, 0xfffffffc}}}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:54 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 32) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = fanotify_init(0x1, 0x400) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000001c0)={{0x8001, 0x4}, 0x100, './file0\x00'}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r3, r4, 0x0, 0x8000002b) (async) dup(r1) 20:46:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000001140)="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", 0x1000, 0x50, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @empty, 0x2008000}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2462.148518][T12603] FAULT_INJECTION: forcing a failure. [ 2462.148518][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.167711][T12603] CPU: 1 PID: 12603 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2462.177836][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2462.187924][T12603] Call Trace: [ 2462.191226][T12603] [ 2462.194184][T12603] dump_stack_lvl+0xd1/0x138 [ 2462.198815][T12603] should_fail_ex.cold+0x5/0xa [ 2462.203589][T12603] ? vm_area_dup+0x7d/0x380 [ 2462.208092][T12603] should_failslab+0x9/0x20 [ 2462.212595][T12603] kmem_cache_alloc+0x5a/0x430 [ 2462.217357][T12603] vm_area_dup+0x7d/0x380 [ 2462.221684][T12603] ? copy_page_range+0x1dfe/0x3b40 [ 2462.226804][T12603] ? mas_node_count_gfp+0x88/0x140 [ 2462.231993][T12603] ? mas_next_nentry+0x610/0xab0 [ 2462.236977][T12603] ? vm_area_alloc+0x100/0x100 [ 2462.241748][T12603] ? percpu_counter_add_batch+0xc1/0x180 [ 2462.247391][T12603] ? __vm_enough_memory+0x188/0x390 [ 2462.252594][T12603] ? security_vm_enough_memory_mm+0x89/0xb0 [ 2462.258496][T12603] dup_mmap+0x655/0x10b0 [ 2462.262744][T12603] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2462.268036][T12603] ? lock_downgrade+0x6e0/0x6e0 [ 2462.272885][T12603] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2462.278701][T12603] ? mm_init+0x8e0/0xc10 [ 2462.282943][T12603] copy_process+0x440f/0x7520 [ 2462.287618][T12603] ? find_held_lock+0x2d/0x110 [ 2462.292391][T12603] ? __cleanup_sighand+0xb0/0xb0 [ 2462.297347][T12603] kernel_clone+0xeb/0x990 [ 2462.301763][T12603] ? create_io_thread+0xf0/0xf0 [ 2462.306609][T12603] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2462.312246][T12603] ? wait_for_completion_io_timeout+0x20/0x20 [ 2462.318316][T12603] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2462.323855][T12603] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2462.329755][T12603] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2462.336341][T12603] ? lockdep_hardirqs_on+0x7d/0x100 [ 2462.341530][T12603] __do_fast_syscall_32+0x65/0xf0 [ 2462.346554][T12603] do_fast_syscall_32+0x33/0x70 [ 2462.351403][T12603] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2462.357729][T12603] RIP: 0023:0xf7f7c549 [ 2462.361795][T12603] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2462.381404][T12603] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2462.389815][T12603] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 20:46:54 executing program 5: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r7 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32=r5, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="181900000200800000000000bbf73027f986cf6cbe63fe0297065a1962673a89f60db47c38f8f3472b37d0e39ad760a51d398b4768227d0188195f21271b9e7e21f1945e67078484c22a3d69944c99cb540367b1a59552326111a3b1bac90584ab40e9d2df185280576c480a133efc7d38cf0d3eb7c9d8e2fba224ddf538c83118a7efaa4284f517bec7128978f046c600"/154, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7], 0xc0, 0x4080}}], 0x4, 0x24000010) (async) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) (async) r10 = getpid() (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) sched_setaffinity(r11, 0x0, 0x0) (async) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r12, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r13 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x131100, 0x0) r14 = getgid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002700)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f00000002c0)="51dcdec64c16edf340ff6389ba80ca3dfc865b9bbe168a99cef50a082cc9467858d4974307fdc496a86ea1bdd1bc6b591336d976dff88a4741f9854c54e7ccbce5b8920f5ae73511e3881022fbcff3f2ca151d1c54ef8f4cc85a17436768f6c078e16e3ab016158249543fea3893bb74dd2073e994831cd446ebb9f0a58de9c006838756e7c42c945cd83482ba6651b880a90ab5909a0dbdd7b24518ff795ae6077eec231448b993d9e78f4d1445d9bb9b6b35f29cfab2b0d19afc6d92e904158f1f4d6046e2ac3804187c3ad0aabea428ab6a60be4ef42bfcabd6161ad5dabb0bf9e9ccf4", 0xe5}, {&(0x7f00000003c0)="7396f062c6a4aec8cff0d73050d8a068c2aabc053aaa07e73942d356ee839f4c10440bdba99d3f46180972719221e9485adf18dedf4c65eef62a1a55cca22752002647f059520b83f44e86e60b7511b7751169947f400085e55897d3f0a641d886cebdce0b3a7ab60e41", 0x6a}, {&(0x7f0000000440)="a10b6c6eb62b8151abde4fa5fd71221b6c4ef9929e3f79793a8cdfb49e23919835a7d5bea14c14b148dd24b7fe24b84c", 0x30}, {&(0x7f0000000580)="ba48aaeb5709d47a9219d2bb0f0261c8650d04dab2794813237f984ee80959bbfc8ae22ca3c72ace444e9b5dc23ae5e61d1c5501c1db1665a2f9ef17503be344b2345c8f2f39431ec911e0ebe37fff2b014b2d6fd83812524f9bc281d1100042c75df9b8932a33ec7923d19f14a49b3633d8250c5cfa7135a0a38eada99ffb7e06da8e5142934956866976ee70706a9f53a0415f8249a25b1df297f2e0ad683a424ba4d86e93d16ac4df", 0xaa}], 0x4, 0x0, 0x0, 0x24044880}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x780}, {&(0x7f00000006c0)="7e7b00384b309e96aa0560dad5e65599d02105afa41b7a698312b0571f28cfef44ec720b85cabae0f634525bb4895fef51a4c8895d2e7b273df7ecbbabe97bbbe9604fd8f29b2c34bb0ed25a00a2c5b432e34432f67655cd2ea0a8c73cad62eb2c1f28656163829a9e60ea6a4eb453a14668dee7985a9dbcdb4879eb9900f55a8870ce83703308527514d9a3d9cf67e7d7df2b84c76979fe1ba38ab44ac10bc7f42e8d1688e0f7962a90355fc683aa7310777266a3caf29ad03bbd2cf771cf", 0xbf}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="2800000000000dc14ff6ae5859522faf08", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000040}}, {{&(0x7f0000001a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)="d6da22a27e5fab5249a419fee55b5cf8cafbe07cb4f532fb012e026c4868c248b0fc9e5987df6dd7ded0fc9cc5c15c6cd8faddee765ef8a518c2bb153b50ed247968d76109172332aa5e147283a856c919711d82acba6d7907", 0x59}, {&(0x7f0000001b00)="7c12e22be048726189ed568f718989051b6dc5d702f0b692c6b3e9c8b5632cf590eb1b7939b919502c29cb5b9696b599ee50430fa7285776dadaca6ddc68fa048dc5dbfd118c69231756ea1b76cd543d70ed89f03ab50f6796366c77404b18382c67571b8a005499e12b28f15707e33f42246a84b9ef0ff105ada592cbf8800d877a359c146b2a8743f94b4e5475920169e1393e02341ff3dff3daaa4a0d48858175218740", 0xa5}, {&(0x7f0000001bc0)="4cd9e8a282567c487aba4cd5c682ce326b9404212d91ab02ee95979db91ec15c45f8899dfb4e3deb1d4b323056e79e8e7e51a4837eda4105b1903f8394ac23618e813c7ec3313785ef7090675d29b5b376949d975859618b1cf7d8c2b139eb00fbbd96271aaebf0902210dd8c10b2fb7c771a5cb5adf62db86f185bf2dfaea42877659f50224fa9d34e967a97770977d4e95670f6d54b6c8682a2ab9d7", 0x9d}, {&(0x7f0000001c80)="4cb00fe879ec2b553ef47a801b2712c26e0c1c0997f4012a58429030f76b7c159d3113afc6da24d14c58ae0d21cf720c1880747b6921d1cc99953d21b80f6c22e706ea2ee703792438f3f16de74880a2c1513de6137b6ea4a7f4db3161591e333cd87e1ddad1ae98afcd9be7a9ae23dfe2f6d875b80eb5556f0ff8c60d805df768690093c5f2f54435ec41f46dfa4e1889818012a01f034df04801393b11aa216a13a66268b2749f3fa7bf02f2d8f80cd363e8437e72b1aa5091ca66417fcc341221e7e63b", 0xc5}, {&(0x7f0000001d80)="e778efa2bd92b5a0f52eb997551d1b0872c569bdd56064b7973449849c577c289ce35e5eba0be860a0801b72b7bd3a35ee210ee0124fd2a19471c7126d81c63a71bef4442af5", 0x46}], 0x5, 0x0, 0x0, 0x40}}, {{&(0x7f0000001e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000001f00)="9220fa1d971d1a9320adfd43c887fac912f3d0b5bd68d2e7c73b1f9e36e3dc0b121ebac01cdda4e44a0f8546fdb273c697e20706ea13f103fa516b97f8ac6db4b368b9de9231e415e770c0b56aa950bf68f30ada0006e925e7fd48040b0be7307c9c4ef87ad993b2b51c7262a50efbcb8c45007dbf6b89555f98819112d4cfd58833216c2f2a87036d5b04891545", 0x8e}, {&(0x7f0000001fc0)="b038f514612fff27ab7545e6bb066a9afaba2c649c6791e810b238c816431577e77346dc7e16a9c17feefa987fccb4e593093853a5f6bfa573efe3083cb7c75edd5d2db8dc66f20add6c77e2dcffdea4ee4329a67e896b0ac70249363108206bce0de2314981a67d16f507cc16e144", 0x6f}, {&(0x7f0000002040)="95c974f9e166f845500e558ff76df4fc810e1ddd478d0bef85b9227cfced0d91049f24114a585fb86e339ef2495fc8e722eb47967c6dabd5d1f60c9aecb3c23746fa65930c2a0d14d9a414b504a8b49211212261db8164865ee67e58169a8dc55633af140bf55a0a61857f8750514e68e88db7fb4bc1223f59688f3ce3cf056a3871b0d9709ddf3a43e34fbbe351f6d8c8610a5ce85d8c8f4062936299c21e49e7c3b049d9ae4a8b58", 0xa9}, {&(0x7f00000007c0)="be7950502a3b5d62741245081ba1c9aa09076d2ba9321d7284a31098787b19916dd4e8e0f98155de32d150945af6ae9e", 0x30}], 0x4, &(0x7f00000025c0)=[@rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [r12]}}, @cred={{0x18, 0x1, 0x2, {r11, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r12, 0xffffffffffffffff, r13]}}, @cred={{0x18, 0x1, 0x2, {r10}}}, @cred={{0x18, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, r14}}}], 0xc0, 0x4080}}], 0x4, 0x24000010) (async) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) syz_fuse_handle_req(r0, &(0x7f0000003140)="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", 0x2000, &(0x7f0000000ac0)={&(0x7f0000000100)={0x50, 0x0, 0x1000, {0x7, 0x26, 0x1ff, 0x0, 0x1, 0x1, 0xca90, 0x6e40}}, &(0x7f0000000180)={0x18, 0x0, 0x100000000, {0x81e4}}, &(0x7f00000001c0)={0x18, 0x0, 0xbb89, {0x80}}, &(0x7f0000000200)={0x18, 0xffffffffffffffda, 0x5, {0x1}}, &(0x7f0000000240)={0x18, 0x0, 0x59a, {0x6}}, &(0x7f0000000280)={0x28, 0x0, 0x2, {{0x3, 0xe504, 0x2}}}, &(0x7f00000002c0)={0x60, 0x0, 0x7fff, {{0x6, 0x4, 0x48, 0x8000000000000000, 0x7, 0x3ff, 0xffffff00, 0x100}}}, &(0x7f0000000340)={0x18, 0x0, 0x80, {0x5}}, &(0x7f0000000380)={0x11, 0xfffffffffffffffe, 0x0, {'\x00'}}, &(0x7f00000003c0)={0x20, 0xfffffffffffffffe, 0x5, {0x0, 0x9}}, &(0x7f0000000400)={0x78, 0xfffffffffffffffe, 0x80000001, {0x2, 0x7f, 0x0, {0x0, 0x6, 0x7ff, 0x8000000000000001, 0x0, 0x5, 0x2, 0x3f, 0x5, 0x6000, 0x7, r1, r2, 0xf2c, 0x7}}}, &(0x7f0000000600)={0x90, 0xfffffffffffffffe, 0x4, {0x1, 0x2, 0x8, 0xdd, 0x0, 0x8001, {0x6, 0x2, 0x6142, 0x5, 0x3, 0x5, 0x9, 0x5, 0x800, 0x8000, 0x9, 0x0, 0x0, 0x5, 0xffffffff}}}, &(0x7f00000006c0)={0x48, 0x0, 0xffffffffffffffff, [{0x6, 0x5, 0x0, 0x1}, {0x4, 0x2, 0x1, 0x9, '\x00'}]}, &(0x7f0000001140)={0x458, 0x0, 0x5, [{{0x1, 0x3, 0x6, 0x8000000000000000, 0x1f16659c, 0x6, {0x6, 0xbb6, 0xffffffff, 0xffffffffffffffff, 0x1ff, 0x2, 0x100, 0x81, 0x7fff, 0x2000, 0x6, r1, 0x0, 0x6, 0x400}}, {0x5, 0x0, 0x0, 0x2}}, {{0x3, 0x2, 0x5, 0x3a5cecee, 0x400, 0x3, {0x1, 0x6, 0x100000001, 0x7, 0x7fff, 0xc90000000000, 0x8, 0x3, 0x3, 0x6000, 0x6, 0x0, 0x0, 0x0, 0x100}}, {0x0, 0x4, 0x0, 0x6}}, {{0x4, 0x0, 0x3, 0x80000001, 0x38b1, 0xfffffeef, {0x4, 0x4fda34d0, 0xe8, 0xff, 0xffffffffffffffff, 0x7, 0x1000, 0x7, 0x3f, 0xc000, 0xfffffff9, r1, r7, 0x0, 0xfffffff7}}, {0x0, 0x53e, 0x1, 0x1f, '\x00'}}, {{0x2, 0x2, 0x8, 0xa4, 0x37, 0x341, {0x2, 0x3, 0x7e55, 0xfffffffffffffffc, 0x0, 0x8, 0x5e7, 0x8, 0x20, 0xa000, 0x6, r1, r2, 0x3, 0x7f}}, {0x2, 0x8000000000000000, 0x1, 0x8, '\x00'}}, {{0x0, 0x1, 0x5, 0x4, 0xfffffffd, 0xfff, {0x2, 0x8000, 0x100000000, 0x9, 0x10001, 0xfcb, 0x4f, 0x7, 0x9, 0xc000, 0x0, r1, r14, 0xffffffff, 0x7}}, {0x0, 0x45, 0x1, 0x6, '\x00'}}, {{0x5, 0x0, 0x6, 0xffffffffffffff80, 0x7, 0x925d, {0x1, 0x4, 0x5, 0x0, 0xff, 0x101, 0x6, 0x2, 0x2, 0x1000, 0x1, r16, r17, 0x7ff, 0x4}}, {0x5, 0x5, 0x0, 0x7ff}}, {{0x1, 0x0, 0x100000000, 0x81, 0x6, 0x7, {0x2, 0x9, 0x800, 0x8, 0x101, 0x4, 0x9a9e, 0x2, 0x7, 0x2000, 0x2, r1, r2, 0x0, 0xfffff3ee}}, {0x5, 0x0, 0x1, 0x401, '\x00'}}]}, &(0x7f00000009c0)={0xa0, 0x0, 0x100000000, {{0x3, 0x0, 0x2, 0x3, 0x600000, 0x2, {0x2, 0x0, 0x2c5, 0x464, 0x81, 0xfffffffffffffff7, 0x8, 0x7fffffff, 0x0, 0x8000, 0x0, r1, r2, 0x88}}, {0x0, 0x10}}}, &(0x7f0000000a80)={0x20, 0x0, 0xffffffffffffffff, {0x2, 0x6, 0x7, 0xfffffffc}}}) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2462.397791][T12603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2462.405758][T12603] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2462.413720][T12603] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2462.421685][T12603] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2462.429663][T12603] 20:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdcc}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 20:46:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x20010, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2462.472550][T12610] FAULT_INJECTION: forcing a failure. [ 2462.472550][T12610] name failslab, interval 1, probability 0, space 0, times 0 20:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdcc}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdcc}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x10) (async) 20:46:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2462.621875][T12610] CPU: 1 PID: 12610 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2462.632042][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2462.642237][T12610] Call Trace: [ 2462.645544][T12610] [ 2462.648505][T12610] dump_stack_lvl+0xd1/0x138 [ 2462.653144][T12610] should_fail_ex.cold+0x5/0xa [ 2462.657958][T12610] ? anon_vma_fork+0xe2/0x630 [ 2462.662696][T12610] should_failslab+0x9/0x20 [ 2462.667260][T12610] kmem_cache_alloc+0x5a/0x430 [ 2462.672076][T12610] anon_vma_fork+0xe2/0x630 [ 2462.676633][T12610] ? __vm_enough_memory+0x188/0x390 [ 2462.681900][T12610] dup_mmap+0xbb8/0x10b0 [ 2462.686179][T12610] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2462.691485][T12610] ? lock_downgrade+0x6e0/0x6e0 [ 2462.696361][T12610] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2462.702203][T12610] ? mm_init+0x8e0/0xc10 [ 2462.706469][T12610] copy_process+0x440f/0x7520 [ 2462.711165][T12610] ? find_held_lock+0x2d/0x110 [ 2462.715975][T12610] ? __cleanup_sighand+0xb0/0xb0 [ 2462.720952][T12610] kernel_clone+0xeb/0x990 [ 2462.725396][T12610] ? create_io_thread+0xf0/0xf0 [ 2462.730278][T12610] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2462.735951][T12610] ? wait_for_completion_io_timeout+0x20/0x20 [ 2462.742060][T12610] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2462.747626][T12610] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2462.753555][T12610] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2462.760167][T12610] ? lockdep_hardirqs_on+0x7d/0x100 [ 2462.765387][T12610] __do_fast_syscall_32+0x65/0xf0 [ 2462.770442][T12610] do_fast_syscall_32+0x33/0x70 [ 2462.775322][T12610] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2462.781678][T12610] RIP: 0023:0xf7f0f549 [ 2462.785770][T12610] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2462.805403][T12610] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2462.813832][T12610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2462.821815][T12610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2462.829809][T12610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2462.837788][T12610] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2462.845770][T12610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2462.853774][T12610] 20:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=@deltaction={0x1e4, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcb}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x87}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdcc}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x10) 20:46:55 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 20:46:55 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/145, 0x91, 0x40002122, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = fanotify_init(0x1, 0x400) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000001c0)={{0x8001, 0x4}, 0x100, './file0\x00'}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 32) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) sendfile(r3, r4, 0x0, 0x8000002b) (async) dup(r1) 20:46:55 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) r4 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x4e23, 0x7f, @mcast2, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5b2e1b", 0x3, 0x4000000, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffce, @mcast1, 0x8001}, 0x1c) 20:46:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/145, 0x91, 0x40002122, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:55 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) r4 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x4e23, 0x7f, @mcast2, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5b2e1b", 0x3, 0x4000000, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffce, @mcast1, 0x8001}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r1, r2, 0x0) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) (async) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x4e23, 0x7f, @mcast2, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5b2e1b", 0x3, 0x4000000, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffce, @mcast1, 0x8001}, 0x1c) (async) 20:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f00000001c0)=""/145, 0x91, 0x40002122, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvfrom$inet6(r0, &(0x7f00000001c0)=""/145, 0x91, 0x40002122, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1f}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2463.471680][T12662] FAULT_INJECTION: forcing a failure. [ 2463.471680][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.562476][T12662] CPU: 1 PID: 12662 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2463.572619][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2463.582707][T12662] Call Trace: [ 2463.586013][T12662] [ 2463.588981][T12662] dump_stack_lvl+0xd1/0x138 [ 2463.593626][T12662] should_fail_ex.cold+0x5/0xa [ 2463.598460][T12662] should_failslab+0x9/0x20 [ 2463.603016][T12662] __kmem_cache_alloc_node+0x5b/0x430 [ 2463.608429][T12662] ? kvmalloc_node+0xa2/0x1a0 [ 2463.613163][T12662] ? kvmalloc_node+0xa2/0x1a0 [ 2463.617892][T12662] __kmalloc_node+0x4d/0xd0 [ 2463.622446][T12662] kvmalloc_node+0xa2/0x1a0 [ 2463.626985][T12662] alloc_fdtable+0x160/0x2a0 [ 2463.631592][T12662] dup_fd+0x722/0xcb0 [ 2463.635607][T12662] copy_process+0x24ea/0x7520 [ 2463.640490][T12662] ? find_held_lock+0x2d/0x110 [ 2463.645304][T12662] ? __cleanup_sighand+0xb0/0xb0 [ 2463.650278][T12662] kernel_clone+0xeb/0x990 [ 2463.654718][T12662] ? create_io_thread+0xf0/0xf0 [ 2463.659589][T12662] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2463.665267][T12662] ? wait_for_completion_io_timeout+0x20/0x20 [ 2463.671381][T12662] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2463.676948][T12662] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2463.682868][T12662] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2463.689476][T12662] ? lockdep_hardirqs_on+0x7d/0x100 [ 2463.694691][T12662] __do_fast_syscall_32+0x65/0xf0 [ 2463.699745][T12662] do_fast_syscall_32+0x33/0x70 [ 2463.704626][T12662] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2463.710977][T12662] RIP: 0023:0xf7f0f549 [ 2463.715057][T12662] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2463.734678][T12662] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2463.743109][T12662] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2463.751123][T12662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) r4 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x4e23, 0x7f, @mcast2, 0x5}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5b2e1b", 0x3, 0x4000000, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffce, @mcast1, 0x8001}, 0x1c) 20:46:56 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f00000000c0)={0x3c00, 0xfffffff9, {}, {0xffffffffffffffff}, 0xfff, 0x10000}) fchown(0xffffffffffffffff, r3, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r4, 0x0, 0x8000002b) fcntl$addseals(r0, 0x409, 0x2) dup(r1) [ 2463.759108][T12662] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2463.767088][T12662] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2463.775067][T12662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2463.783065][T12662] 20:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000800)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xa63a}, &(0x7f0000000280)=0x88) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4197c6ad7f96907bb612dd7dc507e9eaddfd9ec6d3a2d59a65488d5a5760b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537800005f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3838d000034f623d46a8a645a5aee90ab873d46b3f063dc75a215ac01b8fe35bf1fc6", 0xbe, 0x50, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000a0"]) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:56 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 20:46:56 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @remote, 0x987a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:56 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000800)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xa63a}, &(0x7f0000000280)=0x88) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4197c6ad7f96907bb612dd7dc507e9eaddfd9ec6d3a2d59a65488d5a5760b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537800005f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3838d000034f623d46a8a645a5aee90ab873d46b3f063dc75a215ac01b8fe35bf1fc6", 0xbe, 0x50, 0x0, 0x0) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000a0"]) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2464.021643][T12700] FAULT_INJECTION: forcing a failure. [ 2464.021643][T12700] name failslab, interval 1, probability 0, space 0, times 0 20:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @remote, 0x987a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2464.093552][T12700] CPU: 1 PID: 12700 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2464.102860][T12699] FAULT_INJECTION: forcing a failure. [ 2464.102860][T12699] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.103674][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2464.103695][T12700] Call Trace: [ 2464.103705][T12700] [ 2464.103717][T12700] dump_stack_lvl+0xd1/0x138 [ 2464.137331][T12700] should_fail_ex.cold+0x5/0xa [ 2464.142165][T12700] ? anon_vma_fork+0xe2/0x630 [ 2464.146907][T12700] should_failslab+0x9/0x20 [ 2464.151466][T12700] kmem_cache_alloc+0x5a/0x430 [ 2464.156274][T12700] anon_vma_fork+0xe2/0x630 [ 2464.160830][T12700] ? __vm_enough_memory+0x188/0x390 [ 2464.166085][T12700] dup_mmap+0xbb8/0x10b0 [ 2464.170388][T12700] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2464.175717][T12700] ? lock_downgrade+0x6e0/0x6e0 [ 2464.180620][T12700] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2464.186582][T12700] ? mm_init+0x8e0/0xc10 [ 2464.190870][T12700] copy_process+0x440f/0x7520 [ 2464.195589][T12700] ? find_held_lock+0x2d/0x110 [ 2464.200465][T12700] ? __cleanup_sighand+0xb0/0xb0 [ 2464.205453][T12700] kernel_clone+0xeb/0x990 [ 2464.209904][T12700] ? create_io_thread+0xf0/0xf0 [ 2464.214785][T12700] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2464.220458][T12700] ? wait_for_completion_io_timeout+0x20/0x20 [ 2464.226570][T12700] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2464.232135][T12700] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2464.238070][T12700] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2464.244682][T12700] ? lockdep_hardirqs_on+0x7d/0x100 [ 2464.249946][T12700] __do_fast_syscall_32+0x65/0xf0 [ 2464.255011][T12700] do_fast_syscall_32+0x33/0x70 [ 2464.259893][T12700] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2464.266249][T12700] RIP: 0023:0xf7f0f549 [ 2464.270337][T12700] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 20:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @remote, 0x987a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2464.289968][T12700] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2464.298402][T12700] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2464.306560][T12700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.314541][T12700] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2464.322525][T12700] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2464.330508][T12700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.338513][T12700] 20:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000800)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xa63a}, &(0x7f0000000280)=0x88) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4197c6ad7f96907bb612dd7dc507e9eaddfd9ec6d3a2d59a65488d5a5760b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537800005f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3838d000034f623d46a8a645a5aee90ab873d46b3f063dc75a215ac01b8fe35bf1fc6", 0xbe, 0x50, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000a0"]) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) (async) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000800)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e21, @multicast1}}, 0xa63a}, &(0x7f0000000280)=0x88) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="4197c6ad7f96907bb612dd7dc507e9eaddfd9ec6d3a2d59a65488d5a5760b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537800005f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3838d000034f623d46a8a645a5aee90ab873d46b3f063dc75a215ac01b8fe35bf1fc6", 0xbe, 0x50, 0x0, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000a0"]) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2464.354991][T12699] CPU: 1 PID: 12699 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2464.365137][T12699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2464.375245][T12699] Call Trace: [ 2464.378556][T12699] [ 2464.381519][T12699] dump_stack_lvl+0xd1/0x138 [ 2464.386169][T12699] should_fail_ex.cold+0x5/0xa [ 2464.390990][T12699] ? anon_vma_fork+0xe2/0x630 [ 2464.395723][T12699] should_failslab+0x9/0x20 [ 2464.400279][T12699] kmem_cache_alloc+0x5a/0x430 [ 2464.405094][T12699] anon_vma_fork+0xe2/0x630 [ 2464.409658][T12699] ? __vm_enough_memory+0x188/0x390 [ 2464.414914][T12699] dup_mmap+0xbb8/0x10b0 [ 2464.419213][T12699] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2464.424543][T12699] ? lock_downgrade+0x6e0/0x6e0 [ 2464.429446][T12699] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2464.435337][T12699] ? mm_init+0x8e0/0xc10 [ 2464.439639][T12699] copy_process+0x440f/0x7520 [ 2464.444365][T12699] ? find_held_lock+0x2d/0x110 [ 2464.449208][T12699] ? __cleanup_sighand+0xb0/0xb0 20:46:56 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1f, 0x7314) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}, 0x3800000}], 0x3, 0x0, 0x0) [ 2464.454236][T12699] kernel_clone+0xeb/0x990 [ 2464.454282][T12699] ? create_io_thread+0xf0/0xf0 [ 2464.454324][T12699] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2464.454378][T12699] ? wait_for_completion_io_timeout+0x20/0x20 [ 2464.454438][T12699] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2464.454473][T12699] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2464.454523][T12699] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2464.454560][T12699] ? lockdep_hardirqs_on+0x7d/0x100 [ 2464.454593][T12699] __do_fast_syscall_32+0x65/0xf0 20:46:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f00000000c0)={0x3c00, 0xfffffff9, {}, {0xffffffffffffffff}, 0xfff, 0x10000}) fchown(0xffffffffffffffff, r3, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r4, 0x0, 0x8000002b) fcntl$addseals(r0, 0x409, 0x2) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f00000000c0)={0x3c00, 0xfffffff9, {}, {0xffffffffffffffff}, 0xfff, 0x10000}) (async) fchown(0xffffffffffffffff, r3, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) fcntl$addseals(r0, 0x409, 0x2) (async) dup(r1) (async) [ 2464.454637][T12699] do_fast_syscall_32+0x33/0x70 [ 2464.454678][T12699] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2464.454715][T12699] RIP: 0023:0xf7f7c549 [ 2464.519369][T12699] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2464.539026][T12699] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2464.547491][T12699] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 20:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1f, 0x7314) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}, 0x3800000}], 0x3, 0x0, 0x0) [ 2464.555504][T12699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.563525][T12699] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2464.571538][T12699] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2464.579546][T12699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.587574][T12699] 20:46:57 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 2464.725402][T12742] FAULT_INJECTION: forcing a failure. [ 2464.725402][T12742] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.749956][T12742] CPU: 0 PID: 12742 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2464.760086][T12742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2464.770262][T12742] Call Trace: [ 2464.773566][T12742] [ 2464.776519][T12742] dump_stack_lvl+0xd1/0x138 [ 2464.781159][T12742] should_fail_ex.cold+0x5/0xa [ 2464.785979][T12742] ? copy_process+0x2655/0x7520 [ 2464.790874][T12742] should_failslab+0x9/0x20 [ 2464.795434][T12742] kmem_cache_alloc+0x5a/0x430 [ 2464.800237][T12742] ? _raw_spin_unlock+0x28/0x40 [ 2464.805139][T12742] copy_process+0x2655/0x7520 [ 2464.809856][T12742] ? find_held_lock+0x2d/0x110 [ 2464.814694][T12742] ? __cleanup_sighand+0xb0/0xb0 [ 2464.819687][T12742] kernel_clone+0xeb/0x990 [ 2464.824151][T12742] ? create_io_thread+0xf0/0xf0 [ 2464.829051][T12742] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2464.834745][T12742] ? wait_for_completion_io_timeout+0x20/0x20 [ 2464.840959][T12742] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2464.846544][T12742] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2464.852484][T12742] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2464.859123][T12742] ? lockdep_hardirqs_on+0x7d/0x100 [ 2464.864368][T12742] __do_fast_syscall_32+0x65/0xf0 [ 2464.869445][T12742] do_fast_syscall_32+0x33/0x70 20:46:57 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0226696c6500"/16]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/246, 0xf6, 0x1, &(0x7f0000000780)=""/50, 0x32}, &(0x7f0000000900)=0x40) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) sendto$inet6(r3, &(0x7f00000000c0)="dba4a0506fc67f667a5987e910fe78c78a8175bddf940b16fadd60344693602bf87e36ec9ae9142eb2571cae0d4e29e6de52ae511d71e6c7493d", 0x3a, 0x4000000, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x8000}, 0x1c) r5 = syz_io_uring_complete(0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r6, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000940), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r7 = dup3(r0, r0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x8, 0x4, @loopback, 0x6}, 0x1c) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)={'filter\x00', 0x0, [0x2, 0x2, 0x6, 0x7fffffff, 0x10001]}, &(0x7f00000006c0)=0x54) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000700)=""/109, 0x6d}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x4}, 0x8}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000500)=""/23, 0x17}], 0x5}, 0x5d}], 0x5, 0x2000, 0x0) 20:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x1f, 0x7314) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}, 0x3800000}], 0x3, 0x0, 0x0) 20:46:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f00000000c0)={0x3c00, 0xfffffff9, {}, {0xffffffffffffffff}, 0xfff, 0x10000}) fchown(0xffffffffffffffff, r3, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async, rerun: 32) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r4, 0x0, 0x8000002b) (async) fcntl$addseals(r0, 0x409, 0x2) dup(r1) [ 2464.874347][T12742] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2464.880728][T12742] RIP: 0023:0xf7f0f549 [ 2464.884832][T12742] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2464.904494][T12742] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2464.912961][T12742] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 20:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0226696c6500"/16]) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/246, 0xf6, 0x1, &(0x7f0000000780)=""/50, 0x32}, &(0x7f0000000900)=0x40) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) sendto$inet6(r3, &(0x7f00000000c0)="dba4a0506fc67f667a5987e910fe78c78a8175bddf940b16fadd60344693602bf87e36ec9ae9142eb2571cae0d4e29e6de52ae511d71e6c7493d", 0x3a, 0x4000000, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x8000}, 0x1c) r5 = syz_io_uring_complete(0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000280)) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (rerun: 64) read$rfkill(r6, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000940), 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) r7 = dup3(r0, r0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x8, 0x4, @loopback, 0x6}, 0x1c) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)={'filter\x00', 0x0, [0x2, 0x2, 0x6, 0x7fffffff, 0x10001]}, &(0x7f00000006c0)=0x54) (async) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000700)=""/109, 0x6d}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x4}, 0x8}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000500)=""/23, 0x17}], 0x5}, 0x5d}], 0x5, 0x2000, 0x0) [ 2464.920973][T12742] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2464.928982][T12742] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2464.937164][T12742] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2464.945159][T12742] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2464.953172][T12742] 20:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = signalfd4(r0, &(0x7f0000000100)={[0x8, 0xfffffc01]}, 0x8, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) [ 2465.032817][T12750] FAULT_INJECTION: forcing a failure. [ 2465.032817][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.060499][T12750] CPU: 0 PID: 12750 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2465.070632][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2465.080726][T12750] Call Trace: [ 2465.084033][T12750] [ 2465.086999][T12750] dump_stack_lvl+0xd1/0x138 [ 2465.091650][T12750] should_fail_ex.cold+0x5/0xa [ 2465.096477][T12750] ? anon_vma_fork+0x1f1/0x630 [ 2465.101296][T12750] should_failslab+0x9/0x20 [ 2465.105849][T12750] kmem_cache_alloc+0x5a/0x430 [ 2465.110659][T12750] anon_vma_fork+0x1f1/0x630 [ 2465.115311][T12750] dup_mmap+0xbb8/0x10b0 [ 2465.119617][T12750] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2465.124955][T12750] ? lock_downgrade+0x6e0/0x6e0 20:46:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = signalfd4(r0, &(0x7f0000000100)={[0x8, 0xfffffc01]}, 0x8, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) signalfd4(r0, &(0x7f0000000100)={[0x8, 0xfffffc01]}, 0x8, 0x80800) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r2, 0x0, 0xfffffe7e) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x2}) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) (async) [ 2465.129857][T12750] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2465.135735][T12750] ? mm_init+0x8e0/0xc10 [ 2465.140031][T12750] copy_process+0x440f/0x7520 [ 2465.144760][T12750] ? find_held_lock+0x2d/0x110 [ 2465.150569][T12750] ? __cleanup_sighand+0xb0/0xb0 [ 2465.155585][T12750] kernel_clone+0xeb/0x990 [ 2465.160052][T12750] ? create_io_thread+0xf0/0xf0 [ 2465.164957][T12750] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2465.170658][T12750] ? wait_for_completion_io_timeout+0x20/0x20 [ 2465.176789][T12750] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2465.182382][T12750] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2465.188336][T12750] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2465.194975][T12750] ? lockdep_hardirqs_on+0x7d/0x100 [ 2465.200217][T12750] __do_fast_syscall_32+0x65/0xf0 [ 2465.205390][T12750] do_fast_syscall_32+0x33/0x70 [ 2465.210295][T12750] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2465.216669][T12750] RIP: 0023:0xf7f7c549 20:46:57 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) [ 2465.220775][T12750] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2465.240428][T12750] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2465.248889][T12750] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2465.256895][T12750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2465.264904][T12750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2465.272911][T12750] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 20:46:57 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) [ 2465.280914][T12750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2465.288941][T12750] 20:46:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0226696c6500"/16]) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000880)={&(0x7f0000fed000/0x11000)=nil, 0x11000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/246, 0xf6, 0x1, &(0x7f0000000780)=""/50, 0x32}, &(0x7f0000000900)=0x40) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) sendto$inet6(r3, &(0x7f00000000c0)="dba4a0506fc67f667a5987e910fe78c78a8175bddf940b16fadd60344693602bf87e36ec9ae9142eb2571cae0d4e29e6de52ae511d71e6c7493d", 0x3a, 0x4000000, &(0x7f0000000240)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0x8000}, 0x1c) r5 = syz_io_uring_complete(0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000280)) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r6, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000940), 0x4) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r7 = dup3(r0, r0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x8, 0x4, @loopback, 0x6}, 0x1c) (async) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)={'filter\x00', 0x0, [0x2, 0x2, 0x6, 0x7fffffff, 0x10001]}, &(0x7f00000006c0)=0x54) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000700)=""/109, 0x6d}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)=@rc={0x1f, @none}, 0x80, &(0x7f00000000c0), 0x4}, 0x8}, {{&(0x7f0000000400)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000480)=""/3, 0x3}, {&(0x7f0000004140)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000500)=""/23, 0x17}], 0x5}, 0x5d}], 0x5, 0x2000, 0x0) [ 2465.431638][T12776] FAULT_INJECTION: forcing a failure. [ 2465.431638][T12776] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2465.471462][T12776] CPU: 0 PID: 12776 Comm: syz-executor.2 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2465.481574][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2465.491633][T12776] Call Trace: [ 2465.494905][T12776] [ 2465.497842][T12776] dump_stack_lvl+0xd1/0x138 [ 2465.502439][T12776] should_fail_ex.cold+0x5/0xa [ 2465.507209][T12776] prepare_alloc_pages+0x178/0x570 [ 2465.512337][T12776] __alloc_pages+0x149/0x5b0 [ 2465.516941][T12776] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2465.523707][T12776] ? find_held_lock+0x2d/0x110 20:46:58 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r1 = signalfd4(r0, &(0x7f0000000100)={[0x8, 0xfffffc01]}, 0x8, 0x80800) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x2}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) signalfd4(r0, &(0x7f0000000100)={[0x8, 0xfffffc01]}, 0x8, 0x80800) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r2, 0x0, 0xfffffe7e) (async) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'wlan0\x00', 0x2}) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) (async) 20:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private0, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000480)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/146, 0x92}], 0x2, &(0x7f0000000640)=""/102, 0x66}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f0000000980)=""/218, 0xda}], 0x4, &(0x7f0000000a80)=""/242, 0xf2}, 0x80000000}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000e80)=""/55, 0x37}, 0x2}, {{&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x2, &(0x7f0000000f80)=""/188, 0xbc}, 0x4}, {{&(0x7f0000001040)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000004140)=""/218, 0xda}, {&(0x7f0000004240)=""/145, 0x91}, {&(0x7f0000004300)=""/196, 0xc4}, {&(0x7f0000004400)=""/134, 0x86}, {&(0x7f00000044c0)=""/240, 0xf0}], 0x5, &(0x7f00000045c0)=""/218, 0xda}, 0x4}, {{&(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/111, 0x6f}, {&(0x7f00000047c0)=""/5, 0x5}], 0x2, &(0x7f0000004840)=""/49, 0x31}, 0x5}], 0x7, 0x40, &(0x7f0000004980)={0x0, 0x3938700}) [ 2465.528492][T12776] ? lock_downgrade+0x6e0/0x6e0 [ 2465.533354][T12776] ? do_raw_spin_lock+0x124/0x2b0 [ 2465.538401][T12776] alloc_pages+0x1aa/0x270 [ 2465.542839][T12776] __pmd_alloc+0x3f/0x5d0 [ 2465.547206][T12776] ? __pud_alloc+0xe4/0x180 [ 2465.551717][T12776] copy_page_range+0x2829/0x3b40 [ 2465.556688][T12776] ? mas_store+0x206/0x2e0 [ 2465.561134][T12776] ? handle_mm_fault+0x850/0x850 [ 2465.566113][T12776] ? anon_vma_fork+0xba/0x630 [ 2465.570817][T12776] dup_mmap+0xc10/0x10b0 [ 2465.575112][T12776] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2465.580447][T12776] ? lock_downgrade+0x6e0/0x6e0 [ 2465.585350][T12776] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2465.591237][T12776] ? mm_init+0x8e0/0xc10 [ 2465.595531][T12776] copy_process+0x440f/0x7520 [ 2465.600236][T12776] ? find_held_lock+0x2d/0x110 [ 2465.605017][T12776] ? __cleanup_sighand+0xb0/0xb0 [ 2465.609963][T12776] kernel_clone+0xeb/0x990 [ 2465.614379][T12776] ? create_io_thread+0xf0/0xf0 [ 2465.619321][T12776] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2465.624961][T12776] ? wait_for_completion_io_timeout+0x20/0x20 [ 2465.631037][T12776] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2465.636594][T12776] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2465.642489][T12776] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2465.649080][T12776] ? lockdep_hardirqs_on+0x7d/0x100 [ 2465.654277][T12776] __do_fast_syscall_32+0x65/0xf0 [ 2465.659304][T12776] do_fast_syscall_32+0x33/0x70 [ 2465.664155][T12776] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2465.670483][T12776] RIP: 0023:0xf7f0f549 [ 2465.674542][T12776] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2465.694155][T12776] RSP: 002b:00000000f7f0a57c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2465.702564][T12776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2465.710533][T12776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2465.718677][T12776] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2465.726638][T12776] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2465.734604][T12776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2465.742579][T12776] 20:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private0, 0x3}, 0x1c) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000480)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/146, 0x92}], 0x2, &(0x7f0000000640)=""/102, 0x66}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f0000000980)=""/218, 0xda}], 0x4, &(0x7f0000000a80)=""/242, 0xf2}, 0x80000000}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000e80)=""/55, 0x37}, 0x2}, {{&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x2, &(0x7f0000000f80)=""/188, 0xbc}, 0x4}, {{&(0x7f0000001040)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000004140)=""/218, 0xda}, {&(0x7f0000004240)=""/145, 0x91}, {&(0x7f0000004300)=""/196, 0xc4}, {&(0x7f0000004400)=""/134, 0x86}, {&(0x7f00000044c0)=""/240, 0xf0}], 0x5, &(0x7f00000045c0)=""/218, 0xda}, 0x4}, {{&(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/111, 0x6f}, {&(0x7f00000047c0)=""/5, 0x5}], 0x2, &(0x7f0000004840)=""/49, 0x31}, 0x5}], 0x7, 0x40, &(0x7f0000004980)={0x0, 0x3938700}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private0, 0x3}, 0x1c) (async) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000480)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/146, 0x92}], 0x2, &(0x7f0000000640)=""/102, 0x66}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f0000000980)=""/218, 0xda}], 0x4, &(0x7f0000000a80)=""/242, 0xf2}, 0x80000000}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000e80)=""/55, 0x37}, 0x2}, {{&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x2, &(0x7f0000000f80)=""/188, 0xbc}, 0x4}, {{&(0x7f0000001040)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000004140)=""/218, 0xda}, {&(0x7f0000004240)=""/145, 0x91}, {&(0x7f0000004300)=""/196, 0xc4}, {&(0x7f0000004400)=""/134, 0x86}, {&(0x7f00000044c0)=""/240, 0xf0}], 0x5, &(0x7f00000045c0)=""/218, 0xda}, 0x4}, {{&(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/111, 0x6f}, {&(0x7f00000047c0)=""/5, 0x5}], 0x2, &(0x7f0000004840)=""/49, 0x31}, 0x5}], 0x7, 0x40, &(0x7f0000004980)={0x0, 0x3938700}) (async) 20:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = dup(r0) r2 = accept4$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x1000) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, 0x9, 0x100000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "382c912d5ebd83d6", "d9dc16573f180d382d6ae8a59dabba21", "b0695bc5", "ea7e9e605c85ec97"}, 0x28) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) 20:46:58 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @private0, 0x3}, 0x1c) (async) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000003c0)=""/140, 0x8c}, 0x9}, {{&(0x7f0000000480)=@ethernet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/146, 0x92}], 0x2, &(0x7f0000000640)=""/102, 0x66}, 0x5}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/10, 0xa}, {&(0x7f0000000780)=""/1, 0x1}, {&(0x7f0000000980)=""/218, 0xda}], 0x4, &(0x7f0000000a80)=""/242, 0xf2}, 0x80000000}, {{&(0x7f0000000b80)=@tipc=@id, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/117, 0x75}, {&(0x7f0000000c80)=""/242, 0xf2}, {&(0x7f0000000e00)}], 0x3, &(0x7f0000000e80)=""/55, 0x37}, 0x2}, {{&(0x7f0000000ec0)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x2, &(0x7f0000000f80)=""/188, 0xbc}, 0x4}, {{&(0x7f0000001040)=@in={0x2, 0x0, @private}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000004140)=""/218, 0xda}, {&(0x7f0000004240)=""/145, 0x91}, {&(0x7f0000004300)=""/196, 0xc4}, {&(0x7f0000004400)=""/134, 0x86}, {&(0x7f00000044c0)=""/240, 0xf0}], 0x5, &(0x7f00000045c0)=""/218, 0xda}, 0x4}, {{&(0x7f00000046c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004800)=[{&(0x7f0000004740)=""/111, 0x6f}, {&(0x7f00000047c0)=""/5, 0x5}], 0x2, &(0x7f0000004840)=""/49, 0x31}, 0x5}], 0x7, 0x40, &(0x7f0000004980)={0x0, 0x3938700}) [ 2465.919478][T12805] FAULT_INJECTION: forcing a failure. [ 2465.919478][T12805] name failslab, interval 1, probability 0, space 0, times 0 20:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (rerun: 64) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = dup(r0) r2 = accept4$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x1000) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, 0x9, 0x100000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "382c912d5ebd83d6", "d9dc16573f180d382d6ae8a59dabba21", "b0695bc5", "ea7e9e605c85ec97"}, 0x28) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) (async, rerun: 64) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (rerun: 64) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) [ 2466.014560][T12805] CPU: 1 PID: 12805 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2466.024692][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2466.034752][T12805] Call Trace: [ 2466.038029][T12805] [ 2466.040957][T12805] dump_stack_lvl+0xd1/0x138 [ 2466.045552][T12805] should_fail_ex.cold+0x5/0xa [ 2466.050325][T12805] should_failslab+0x9/0x20 [ 2466.054845][T12805] __kmem_cache_alloc_node+0x5b/0x430 [ 2466.060248][T12805] ? kvmalloc_node+0xa2/0x1a0 [ 2466.064929][T12805] ? kvmalloc_node+0xa2/0x1a0 [ 2466.069614][T12805] __kmalloc_node+0x4d/0xd0 [ 2466.074124][T12805] kvmalloc_node+0xa2/0x1a0 [ 2466.078625][T12805] alloc_fdtable+0x160/0x2a0 [ 2466.083211][T12805] dup_fd+0x722/0xcb0 [ 2466.087193][T12805] copy_process+0x24ea/0x7520 [ 2466.091875][T12805] ? find_held_lock+0x2d/0x110 [ 2466.096650][T12805] ? __cleanup_sighand+0xb0/0xb0 [ 2466.101593][T12805] kernel_clone+0xeb/0x990 [ 2466.106021][T12805] ? create_io_thread+0xf0/0xf0 [ 2466.110877][T12805] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2466.116520][T12805] ? wait_for_completion_io_timeout+0x20/0x20 [ 2466.122619][T12805] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2466.128201][T12805] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2466.134130][T12805] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2466.140746][T12805] ? lockdep_hardirqs_on+0x7d/0x100 [ 2466.145970][T12805] __do_fast_syscall_32+0x65/0xf0 [ 2466.151024][T12805] do_fast_syscall_32+0x33/0x70 [ 2466.155903][T12805] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2466.162257][T12805] RIP: 0023:0xf7f7c549 [ 2466.166342][T12805] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2466.185965][T12805] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2466.194402][T12805] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2466.202383][T12805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:46:58 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2466.210363][T12805] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2466.218342][T12805] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2466.226321][T12805] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2466.234341][T12805] 20:46:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000005380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000005300)=""/10, 0xa, 0x1, &(0x7f0000005340)=""/11, 0xb}, &(0x7f00000053c0)=0x40) sendto$inet6(r0, &(0x7f0000005280)="986ce0260a6dad9fefbfd3beb82d0c996242", 0x12, 0x20008044, &(0x7f00000052c0)={0xa, 0x4e21, 0x5, @empty, 0x101}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r4, 0x0, 0xfffffe7e) recvmmsg(r4, &(0x7f00000051c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/60, 0x3c}], 0x3, &(0x7f0000000300)=""/252, 0xfc}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/122, 0x7a}], 0x3, &(0x7f0000000680)=""/70, 0x46}, 0x9}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/66, 0x42}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/243, 0xf3}], 0x6, &(0x7f0000000b80)=""/34, 0x22}, 0x3ff}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005140)=[{&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/214, 0xd6}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000f40)=""/208, 0xd0}, {&(0x7f0000001040)=""/135, 0x87}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x9}}], 0x5, 0x0, 0x0) 20:46:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) (async) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, r5) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) (async) 20:46:58 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = dup(r0) r2 = accept4$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x1000) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, 0x9, 0x100000) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "382c912d5ebd83d6", "d9dc16573f180d382d6ae8a59dabba21", "b0695bc5", "ea7e9e605c85ec97"}, 0x28) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) dup(r0) (async) accept4$unix(r1, &(0x7f0000000100), &(0x7f00000001c0)=0x6e, 0x1000) (async) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000200)=""/195, 0xc3}], 0x1, 0x9, 0x100000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x303}, "382c912d5ebd83d6", "d9dc16573f180d382d6ae8a59dabba21", "b0695bc5", "ea7e9e605c85ec97"}, 0x28) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e20, 0x1, @mcast2, 0x4}, 0x1c) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r3, r4, 0x0) (async) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) (async) 20:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 32) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000005380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000005300)=""/10, 0xa, 0x1, &(0x7f0000005340)=""/11, 0xb}, &(0x7f00000053c0)=0x40) sendto$inet6(r0, &(0x7f0000005280)="986ce0260a6dad9fefbfd3beb82d0c996242", 0x12, 0x20008044, &(0x7f00000052c0)={0xa, 0x4e21, 0x5, @empty, 0x101}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r4, 0x0, 0xfffffe7e) recvmmsg(r4, &(0x7f00000051c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/60, 0x3c}], 0x3, &(0x7f0000000300)=""/252, 0xfc}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/122, 0x7a}], 0x3, &(0x7f0000000680)=""/70, 0x46}, 0x9}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/66, 0x42}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/243, 0xf3}], 0x6, &(0x7f0000000b80)=""/34, 0x22}, 0x3ff}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005140)=[{&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/214, 0xd6}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000f40)=""/208, 0xd0}, {&(0x7f0000001040)=""/135, 0x87}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x9}}], 0x5, 0x0, 0x0) 20:46:59 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:46:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x8300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001300000229bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000000000000200140035006261020000005f736c6176e15f30000008001e00ff07000004003480"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f00000000c0)="8301db0d8cccfb317681fc7c2b7f9a4ed0e0257d42ce058686cb5c00000000d6339035388322a2e26379e8e89b7327f0eeebf50e6cb057b9ea6489a074bab8d52b5da479f6810d635a4e322124a117d248909ef66a29f424fa16ae8fade848f1f50a48711d2fb241d3db83ae282d6a50e6afe7ef3c9266508455b27897c808f3217e4d145c3e4b00ca28e97c5c490d566d57ec6b06820b64a3256384e774855f49680a24224348aac9452647f0c4ad7392c41dcb03cd745f7fc4a6f8b05907e73351f89e83688dd041bc15f343e8", 0x4e, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:59 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x8300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001300000229bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000000000000200140035006261020000005f736c6176e15f30000008001e00ff07000004003480"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f00000000c0)="8301db0d8cccfb317681fc7c2b7f9a4ed0e0257d42ce058686cb5c00000000d6339035388322a2e26379e8e89b7327f0eeebf50e6cb057b9ea6489a074bab8d52b5da479f6810d635a4e322124a117d248909ef66a29f424fa16ae8fade848f1f50a48711d2fb241d3db83ae282d6a50e6afe7ef3c9266508455b27897c808f3217e4d145c3e4b00ca28e97c5c490d566d57ec6b06820b64a3256384e774855f49680a24224348aac9452647f0c4ad7392c41dcb03cd745f7fc4a6f8b05907e73351f89e83688dd041bc15f343e8", 0x4e, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x8300, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001300000229bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000000000000200140035006261020000005f736c6176e15f30000008001e00ff07000004003480"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="8301db0d8cccfb317681fc7c2b7f9a4ed0e0257d42ce058686cb5c00000000d6339035388322a2e26379e8e89b7327f0eeebf50e6cb057b9ea6489a074bab8d52b5da479f6810d635a4e322124a117d248909ef66a29f424fa16ae8fade848f1f50a48711d2fb241d3db83ae282d6a50e6afe7ef3c9266508455b27897c808f3217e4d145c3e4b00ca28e97c5c490d566d57ec6b06820b64a3256384e774855f49680a24224348aac9452647f0c4ad7392c41dcb03cd745f7fc4a6f8b05907e73351f89e83688dd041bc15f343e8", 0x4e, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000005380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000005300)=""/10, 0xa, 0x1, &(0x7f0000005340)=""/11, 0xb}, &(0x7f00000053c0)=0x40) sendto$inet6(r0, &(0x7f0000005280)="986ce0260a6dad9fefbfd3beb82d0c996242", 0x12, 0x20008044, &(0x7f00000052c0)={0xa, 0x4e21, 0x5, @empty, 0x101}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r4, 0x0, 0xfffffe7e) recvmmsg(r4, &(0x7f00000051c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/60, 0x3c}], 0x3, &(0x7f0000000300)=""/252, 0xfc}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/122, 0x7a}], 0x3, &(0x7f0000000680)=""/70, 0x46}, 0x9}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/66, 0x42}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/243, 0xf3}], 0x6, &(0x7f0000000b80)=""/34, 0x22}, 0x3ff}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005140)=[{&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/214, 0xd6}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000f40)=""/208, 0xd0}, {&(0x7f0000001040)=""/135, 0x87}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x9}}], 0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r1, r2, 0x0) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000005380)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000005300)=""/10, 0xa, 0x1, &(0x7f0000005340)=""/11, 0xb}, &(0x7f00000053c0)=0x40) (async) sendto$inet6(r0, &(0x7f0000005280)="986ce0260a6dad9fefbfd3beb82d0c996242", 0x12, 0x20008044, &(0x7f00000052c0)={0xa, 0x4e21, 0x5, @empty, 0x101}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r4, 0x0, 0xfffffe7e) (async) recvmmsg(r4, &(0x7f00000051c0)=[{{&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000200)=""/72, 0x48}, {&(0x7f0000000280)=""/60, 0x3c}], 0x3, &(0x7f0000000300)=""/252, 0xfc}, 0x5}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/1, 0x1}, {&(0x7f00000005c0)=""/122, 0x7a}], 0x3, &(0x7f0000000680)=""/70, 0x46}, 0x9}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/66, 0x42}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)=""/78, 0x4e}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000980)=""/161, 0xa1}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/243, 0xf3}], 0x6, &(0x7f0000000b80)=""/34, 0x22}, 0x3ff}, {{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000005140)=[{&(0x7f0000000c40)=""/107, 0x6b}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/101, 0x65}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/214, 0xd6}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000f40)=""/208, 0xd0}, {&(0x7f0000001040)=""/135, 0x87}, {&(0x7f0000004140)=""/4096, 0x1000}], 0x9}}], 0x5, 0x0, 0x0) (async) 20:46:59 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000280)=""/217, 0xd9}], 0x1, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0xe3}], 0x1, 0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, r5) (async, rerun: 32) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:46:59 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x8300, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x7}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001300000229bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="8000000000000200140035006261020000005f736c6176e15f30000008001e00ff07000004003480"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000000c0)="8301db0d8cccfb317681fc7c2b7f9a4ed0e0257d42ce058686cb5c00000000d6339035388322a2e26379e8e89b7327f0eeebf50e6cb057b9ea6489a074bab8d52b5da479f6810d635a4e322124a117d248909ef66a29f424fa16ae8fade848f1f50a48711d2fb241d3db83ae282d6a50e6afe7ef3c9266508455b27897c808f3217e4d145c3e4b00ca28e97c5c490d566d57ec6b06820b64a3256384e774855f49680a24224348aac9452647f0c4ad7392c41dcb03cd745f7fc4a6f8b05907e73351f89e83688dd041bc15f343e8", 0x4e, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0xfd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x983a}, 0x1c) (rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:46:59 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0) 20:46:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000380)="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", 0x22b, 0x20000004, &(0x7f0000000340)={0xa, 0x4e24, 0x18115, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000983a}, 0x1c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/23, 0x17, 0x0, &(0x7f0000000600)=""/133, 0x85}, &(0x7f0000000700)=0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0xffffffffffffffdd, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000001140)=""/4094, 0xffe}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000000)=""/35, 0x23}], 0x6, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0) 20:46:59 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2467.125839][T12886] FAULT_INJECTION: forcing a failure. [ 2467.125839][T12886] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.157547][T12886] CPU: 0 PID: 12886 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2467.167764][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2467.177832][T12886] Call Trace: [ 2467.181114][T12886] [ 2467.184058][T12886] dump_stack_lvl+0xd1/0x138 [ 2467.188658][T12886] should_fail_ex.cold+0x5/0xa [ 2467.193536][T12886] ? copy_fs_struct+0x49/0x340 [ 2467.198338][T12886] should_failslab+0x9/0x20 [ 2467.202955][T12886] kmem_cache_alloc+0x5a/0x430 [ 2467.207743][T12886] copy_fs_struct+0x49/0x340 [ 2467.212359][T12886] copy_process+0x37c9/0x7520 [ 2467.217059][T12886] ? find_held_lock+0x2d/0x110 [ 2467.221866][T12886] ? __cleanup_sighand+0xb0/0xb0 [ 2467.226839][T12886] kernel_clone+0xeb/0x990 [ 2467.231283][T12886] ? create_io_thread+0xf0/0xf0 [ 2467.236157][T12886] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2467.241843][T12886] ? wait_for_completion_io_timeout+0x20/0x20 [ 2467.247964][T12886] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2467.253594][T12886] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2467.259533][T12886] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2467.266155][T12886] ? lockdep_hardirqs_on+0x7d/0x100 [ 2467.271380][T12886] __do_fast_syscall_32+0x65/0xf0 [ 2467.276443][T12886] do_fast_syscall_32+0x33/0x70 [ 2467.281326][T12886] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2467.287712][T12886] RIP: 0023:0xf7f7c549 [ 2467.291801][T12886] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2467.311430][T12886] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2467.319863][T12886] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2467.327846][T12886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2467.335849][T12886] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2467.343831][T12886] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2467.351816][T12886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2467.359815][T12886] [ 2467.460052][ T1206] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.468237][ T1206] ieee802154 phy1 wpan1: encryption failed: -22 20:47:00 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xcc6, 0x4) 20:47:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000380)="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", 0x22b, 0x20000004, &(0x7f0000000340)={0xa, 0x4e24, 0x18115, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000983a}, 0x1c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/23, 0x17, 0x0, &(0x7f0000000600)=""/133, 0x85}, &(0x7f0000000700)=0x40) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0xffffffffffffffdd, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000001140)=""/4094, 0xffe}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000000)=""/35, 0x23}], 0x6, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0) 20:47:00 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) landlock_restrict_self(r1, 0x0) dup(r1) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0x3, "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"}) 20:47:00 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x4, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000380)="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", 0x22b, 0x20000004, &(0x7f0000000340)={0xa, 0x4e24, 0x18115, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000983a}, 0x1c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/23, 0x17, 0x0, &(0x7f0000000600)=""/133, 0x85}, &(0x7f0000000700)=0x40) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0xffffffffffffffdd, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000001140)=""/4094, 0xffe}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000000)=""/35, 0x23}], 0x6, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000000380)="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", 0x22b, 0x20000004, &(0x7f0000000340)={0xa, 0x4e24, 0x18115, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000983a}, 0x1c) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/23, 0x17, 0x0, &(0x7f0000000600)=""/133, 0x85}, &(0x7f0000000700)=0x40) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0xffffffffffffffdd, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000001140)=""/4094, 0xffe}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000240)=""/230, 0xe6}, {&(0x7f0000000000)=""/35, 0x23}], 0x6, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000000, 0x0) (async) 20:47:00 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xcc6, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xcc6, 0x4) (async) 20:47:00 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x8000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @mcast2, 0xffffff80}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2467.961944][T12908] FAULT_INJECTION: forcing a failure. [ 2467.961944][T12908] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.997405][T12908] CPU: 0 PID: 12908 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2468.007541][T12908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2468.017633][T12908] Call Trace: [ 2468.020925][T12908] [ 2468.023852][T12908] dump_stack_lvl+0xd1/0x138 [ 2468.028470][T12908] should_fail_ex.cold+0x5/0xa [ 2468.033291][T12908] ? __pmd_alloc+0xc3/0x5d0 [ 2468.037843][T12908] should_failslab+0x9/0x20 [ 2468.042378][T12908] kmem_cache_alloc+0x5a/0x430 [ 2468.047144][T12908] __pmd_alloc+0xc3/0x5d0 [ 2468.051490][T12908] ? __pud_alloc+0xe4/0x180 [ 2468.056023][T12908] copy_page_range+0x2829/0x3b40 [ 2468.061075][T12908] ? mas_store+0x206/0x2e0 [ 2468.065489][T12908] ? handle_mm_fault+0x850/0x850 [ 2468.070441][T12908] ? anon_vma_fork+0xba/0x630 [ 2468.075124][T12908] dup_mmap+0xc10/0x10b0 [ 2468.079375][T12908] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2468.084662][T12908] ? lock_downgrade+0x6e0/0x6e0 [ 2468.089528][T12908] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2468.095348][T12908] ? mm_init+0x8e0/0xc10 [ 2468.099610][T12908] copy_process+0x440f/0x7520 [ 2468.104292][T12908] ? find_held_lock+0x2d/0x110 [ 2468.109088][T12908] ? __cleanup_sighand+0xb0/0xb0 [ 2468.114040][T12908] kernel_clone+0xeb/0x990 [ 2468.118459][T12908] ? create_io_thread+0xf0/0xf0 [ 2468.123323][T12908] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2468.128999][T12908] ? wait_for_completion_io_timeout+0x20/0x20 [ 2468.135086][T12908] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2468.140642][T12908] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2468.146565][T12908] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2468.153157][T12908] ? lockdep_hardirqs_on+0x7d/0x100 [ 2468.158354][T12908] __do_fast_syscall_32+0x65/0xf0 [ 2468.163382][T12908] do_fast_syscall_32+0x33/0x70 [ 2468.168233][T12908] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2468.174601][T12908] RIP: 0023:0xf7f7c549 [ 2468.178680][T12908] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2468.198398][T12908] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2468.206903][T12908] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2468.214877][T12908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2468.222847][T12908] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2468.230817][T12908] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2468.238786][T12908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2468.246767][T12908] 20:47:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x8000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @mcast2, 0xffffff80}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:00 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0xcc6, 0x4) 20:47:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x8000) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @mcast2, 0xffffff80}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) syz_open_dev$vcsn(&(0x7f00000000c0), 0x9, 0x8000) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80, @mcast2, 0xffffff80}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:47:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1fffefff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2468.662312][T12946] FAULT_INJECTION: forcing a failure. [ 2468.662312][T12946] name failslab, interval 1, probability 0, space 0, times 0 [ 2468.732845][T12946] CPU: 1 PID: 12946 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2468.742987][T12946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2468.753171][T12946] Call Trace: [ 2468.756480][T12946] [ 2468.759444][T12946] dump_stack_lvl+0xd1/0x138 [ 2468.764088][T12946] should_fail_ex.cold+0x5/0xa [ 2468.768920][T12946] ? __pmd_alloc+0xc3/0x5d0 [ 2468.773475][T12946] should_failslab+0x9/0x20 [ 2468.778038][T12946] kmem_cache_alloc+0x5a/0x430 [ 2468.782849][T12946] __pmd_alloc+0xc3/0x5d0 [ 2468.787185][T12946] ? __pud_alloc+0xe4/0x180 [ 2468.791731][T12946] copy_page_range+0x2829/0x3b40 [ 2468.796761][T12946] ? mas_store+0x206/0x2e0 [ 2468.801200][T12946] ? handle_mm_fault+0x850/0x850 [ 2468.806164][T12946] ? anon_vma_fork+0xba/0x630 [ 2468.810849][T12946] dup_mmap+0xc10/0x10b0 [ 2468.815099][T12946] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2468.820386][T12946] ? lock_downgrade+0x6e0/0x6e0 [ 2468.825240][T12946] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2468.831058][T12946] ? mm_init+0x8e0/0xc10 [ 2468.835304][T12946] copy_process+0x440f/0x7520 [ 2468.839999][T12946] ? find_held_lock+0x2d/0x110 [ 2468.844806][T12946] ? __cleanup_sighand+0xb0/0xb0 [ 2468.849750][T12946] kernel_clone+0xeb/0x990 [ 2468.854164][T12946] ? create_io_thread+0xf0/0xf0 [ 2468.859031][T12946] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2468.864688][T12946] ? wait_for_completion_io_timeout+0x20/0x20 [ 2468.870764][T12946] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2468.876312][T12946] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2468.882208][T12946] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2468.888793][T12946] ? lockdep_hardirqs_on+0x7d/0x100 [ 2468.893988][T12946] __do_fast_syscall_32+0x65/0xf0 [ 2468.899049][T12946] do_fast_syscall_32+0x33/0x70 [ 2468.903939][T12946] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2468.910316][T12946] RIP: 0023:0xf7f7c549 [ 2468.914404][T12946] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2468.934016][T12946] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2468.942433][T12946] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2468.950401][T12946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2468.958373][T12946] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2468.966340][T12946] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2468.974304][T12946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2468.982283][T12946] 20:47:01 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) landlock_restrict_self(r1, 0x0) dup(r1) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0x3, "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"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) landlock_restrict_self(r1, 0x0) (async) dup(r1) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0x3, "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"}) (async) 20:47:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x20ffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/244, 0xf4}], 0xa, &(0x7f0000000a00)=""/252, 0xfc}, 0x5}], 0x1, 0x2bf3701876efae37, &(0x7f0000000b40)={r3, r4+10000000}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:01 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000004a40)="0b35559d3369dca6522c1bec68172e4c4c08b9f609de02deebae0699687c3b0ab7c3952c33b8330c5c14638f4f10b11a6b7084a591ea8ad88abb0dd03b1d4cc7cb334d3d51d248e37541560ec0aa3694ff26fed16221bd4757c21120dc76f7445f8b8e5c035f8593e1798ba3bf2d7c8145870f705aaf4c3d9516615b92c65660f92011", 0x83, 0x20008000, &(0x7f00000049c0)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5525}, 0x1c) pipe2$watch_queue(&(0x7f0000004900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat2(0xffffffffffffff9c, &(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)={0x20080, 0x11c, 0x4}, 0x18) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f0000004b80)) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000004940)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000004a00)='net/ip_vs\x00') read$rfkill(r3, 0x0, 0xfffffe7e) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000004980)={0x5, 0x1, 0x3f, 0x3f, 0x4, "f2dba17dfb6f47b9"}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r4, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @null, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000004880)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/30, 0x1e}, 0x1}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5, &(0x7f0000000480)=""/180, 0xb4}, 0x15f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/57, 0x39}], 0x6, &(0x7f00000007c0)=""/121, 0x79}, 0x4}, {{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/180, 0xb4}], 0x3, &(0x7f0000000ac0)=""/190, 0xbe}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/44, 0x2c}, {&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/239, 0xef}], 0x6, &(0x7f0000003140)=""/217, 0xd9}, 0x4}, {{&(0x7f0000003240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/155, 0x9b}, {&(0x7f0000004380)=""/206, 0xce}, {&(0x7f0000004480)=""/82, 0x52}, {&(0x7f00000010c0)=""/3, 0x3}, {&(0x7f0000004500)=""/179, 0xb3}, {&(0x7f00000045c0)=""/76, 0x4c}, {&(0x7f0000004640)=""/76, 0x4c}], 0x8, &(0x7f0000004700)=""/139, 0x8b}, 0xffff}], 0x6, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x100000) connect$inet6(r5, &(0x7f00000048c0)={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x1c) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) r7 = pidfd_getfd(r1, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xd6) 20:47:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f0000004a40)="0b35559d3369dca6522c1bec68172e4c4c08b9f609de02deebae0699687c3b0ab7c3952c33b8330c5c14638f4f10b11a6b7084a591ea8ad88abb0dd03b1d4cc7cb334d3d51d248e37541560ec0aa3694ff26fed16221bd4757c21120dc76f7445f8b8e5c035f8593e1798ba3bf2d7c8145870f705aaf4c3d9516615b92c65660f92011", 0x83, 0x20008000, &(0x7f00000049c0)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5525}, 0x1c) (async) pipe2$watch_queue(&(0x7f0000004900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) r2 = openat2(0xffffffffffffff9c, &(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)={0x20080, 0x11c, 0x4}, 0x18) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f0000004b80)) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000004940)=0x7, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) r3 = syz_open_procfs(0x0, &(0x7f0000004a00)='net/ip_vs\x00') read$rfkill(r3, 0x0, 0xfffffe7e) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000004980)={0x5, 0x1, 0x3f, 0x3f, 0x4, "f2dba17dfb6f47b9"}) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r4, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @null, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000004880)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/30, 0x1e}, 0x1}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5, &(0x7f0000000480)=""/180, 0xb4}, 0x15f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/57, 0x39}], 0x6, &(0x7f00000007c0)=""/121, 0x79}, 0x4}, {{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/180, 0xb4}], 0x3, &(0x7f0000000ac0)=""/190, 0xbe}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/44, 0x2c}, {&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/239, 0xef}], 0x6, &(0x7f0000003140)=""/217, 0xd9}, 0x4}, {{&(0x7f0000003240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/155, 0x9b}, {&(0x7f0000004380)=""/206, 0xce}, {&(0x7f0000004480)=""/82, 0x52}, {&(0x7f00000010c0)=""/3, 0x3}, {&(0x7f0000004500)=""/179, 0xb3}, {&(0x7f00000045c0)=""/76, 0x4c}, {&(0x7f0000004640)=""/76, 0x4c}], 0x8, &(0x7f0000004700)=""/139, 0x8b}, 0xffff}], 0x6, 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x100000) connect$inet6(r5, &(0x7f00000048c0)={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x1c) (async) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) (async) r7 = pidfd_getfd(r1, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xd6) 20:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/244, 0xf4}], 0xa, &(0x7f0000000a00)=""/252, 0xfc}, 0x5}], 0x1, 0x2bf3701876efae37, &(0x7f0000000b40)={r3, r4+10000000}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) (async) clock_gettime(0x0, &(0x7f0000000b00)) (async) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/244, 0xf4}], 0xa, &(0x7f0000000a00)=""/252, 0xfc}, 0x5}], 0x1, 0x2bf3701876efae37, &(0x7f0000000b40)={r3, r4+10000000}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:47:01 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:01 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x360e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f0000004a40)="0b35559d3369dca6522c1bec68172e4c4c08b9f609de02deebae0699687c3b0ab7c3952c33b8330c5c14638f4f10b11a6b7084a591ea8ad88abb0dd03b1d4cc7cb334d3d51d248e37541560ec0aa3694ff26fed16221bd4757c21120dc76f7445f8b8e5c035f8593e1798ba3bf2d7c8145870f705aaf4c3d9516615b92c65660f92011", 0x83, 0x20008000, &(0x7f00000049c0)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5525}, 0x1c) pipe2$watch_queue(&(0x7f0000004900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async, rerun: 64) r2 = openat2(0xffffffffffffff9c, &(0x7f0000004b00)='./file0\x00', &(0x7f0000004b40)={0x20080, 0x11c, 0x4}, 0x18) (rerun: 64) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f0000004b80)) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000004940)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) r3 = syz_open_procfs(0x0, &(0x7f0000004a00)='net/ip_vs\x00') read$rfkill(r3, 0x0, 0xfffffe7e) (async, rerun: 32) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000004980)={0x5, 0x1, 0x3f, 0x3f, 0x4, "f2dba17dfb6f47b9"}) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async, rerun: 32) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) recvmmsg(r4, &(0x7f00000047c0)=[{{&(0x7f0000000080)=@ax25={{0x3, @netrom}, [@remote, @netrom, @remote, @null, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000004880)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, &(0x7f00000001c0)=""/30, 0x1e}, 0x1}, {{&(0x7f0000000200)=@xdp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/131, 0x83}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/112, 0x70}], 0x5, &(0x7f0000000480)=""/180, 0xb4}, 0x15f}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000005c0)=""/122, 0x7a}, {&(0x7f0000000640)=""/99, 0x63}, {&(0x7f00000006c0)=""/33, 0x21}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/57, 0x39}], 0x6, &(0x7f00000007c0)=""/121, 0x79}, 0x4}, {{&(0x7f0000000840)=@tipc=@id, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/49, 0x31}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/180, 0xb4}], 0x3, &(0x7f0000000ac0)=""/190, 0xbe}}, {{&(0x7f0000000b80)=@generic, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c00)=""/161, 0xa1}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/44, 0x2c}, {&(0x7f0000000dc0)=""/172, 0xac}, {&(0x7f0000000e80)=""/220, 0xdc}, {&(0x7f0000000f80)=""/239, 0xef}], 0x6, &(0x7f0000003140)=""/217, 0xd9}, 0x4}, {{&(0x7f0000003240)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/155, 0x9b}, {&(0x7f0000004380)=""/206, 0xce}, {&(0x7f0000004480)=""/82, 0x52}, {&(0x7f00000010c0)=""/3, 0x3}, {&(0x7f0000004500)=""/179, 0xb3}, {&(0x7f00000045c0)=""/76, 0x4c}, {&(0x7f0000004640)=""/76, 0x4c}], 0x8, &(0x7f0000004700)=""/139, 0x8b}, 0xffff}], 0x6, 0x0, 0x0) (async, rerun: 32) r5 = syz_open_dev$audion(&(0x7f0000000000), 0x8, 0x100000) (rerun: 32) connect$inet6(r5, &(0x7f00000048c0)={0xa, 0x4e23, 0x0, @private1, 0x1}, 0x1c) (async) r6 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r6}) r7 = pidfd_getfd(r1, r3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0xd6) 20:47:01 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xd0f, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:01 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) (async) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffffffff}, 0x1c) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000880)=[{{&(0x7f0000000140)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/61, 0x3d}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000500)=""/246, 0xf6}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/244, 0xf4}], 0xa, &(0x7f0000000a00)=""/252, 0xfc}, 0x5}], 0x1, 0x2bf3701876efae37, &(0x7f0000000b40)={r3, r4+10000000}) (async) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async, rerun: 64) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 32) landlock_restrict_self(r1, 0x0) (async) dup(r1) (async) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000001c0)={0x3, "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"}) 20:47:02 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xe8d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000)="f48f6663a30000000000000008da942554a0a1efd4fa7420014a6784c3f4edb58bd03dd02e06164c58f7d421ffd1ca06c85e68c85918faee7d0c24f2", 0x3c, 0x8, &(0x7f0000b63fe4)={0xa, 0x4e23, 0xffffffc0, @rand_addr, 0x9838}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="b88cfd547ec5693b28d4ef89ebea4451649cb4886b62d61aa8d540b877ca0aa37a8718d672e0b42b30d2d750602a0102c069c0ee36fdf807b1be6da71ba7d1263b", 0x41, 0x5, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) 20:47:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x490e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000000)="f48f6663a30000000000000008da942554a0a1efd4fa7420014a6784c3f4edb58bd03dd02e06164c58f7d421ffd1ca06c85e68c85918faee7d0c24f2", 0x3c, 0x8, &(0x7f0000b63fe4)={0xa, 0x4e23, 0xffffffc0, @rand_addr, 0x9838}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 32) sendto$inet6(r0, &(0x7f00000001c0)="b88cfd547ec5693b28d4ef89ebea4451649cb4886b62d61aa8d540b877ca0aa37a8718d672e0b42b30d2d750602a0102c069c0ee36fdf807b1be6da71ba7d1263b", 0x41, 0x5, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (rerun: 32) [ 2469.607239][T12991] FAULT_INJECTION: forcing a failure. [ 2469.607239][T12991] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.659104][T12991] CPU: 0 PID: 12991 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2469.669256][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2469.679346][T12991] Call Trace: [ 2469.682652][T12991] [ 2469.685613][T12991] dump_stack_lvl+0xd1/0x138 [ 2469.690260][T12991] should_fail_ex.cold+0x5/0xa [ 2469.695084][T12991] ? copy_process+0x43a0/0x7520 [ 2469.699981][T12991] should_failslab+0x9/0x20 [ 2469.704535][T12991] kmem_cache_alloc+0x5a/0x430 [ 2469.709337][T12991] copy_process+0x43a0/0x7520 [ 2469.714045][T12991] ? find_held_lock+0x2d/0x110 [ 2469.718857][T12991] ? __cleanup_sighand+0xb0/0xb0 [ 2469.723829][T12991] kernel_clone+0xeb/0x990 [ 2469.728269][T12991] ? create_io_thread+0xf0/0xf0 [ 2469.733141][T12991] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2469.738810][T12991] ? wait_for_completion_io_timeout+0x20/0x20 [ 2469.744922][T12991] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2469.750758][T12991] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2469.756682][T12991] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2469.763297][T12991] ? lockdep_hardirqs_on+0x7d/0x100 [ 2469.768520][T12991] __do_fast_syscall_32+0x65/0xf0 [ 2469.773578][T12991] do_fast_syscall_32+0x33/0x70 [ 2469.778455][T12991] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2469.784805][T12991] RIP: 0023:0xf7f7c549 [ 2469.788886][T12991] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2469.808509][T12991] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2469.816938][T12991] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2469.824920][T12991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2469.832902][T12991] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2469.840883][T12991] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2469.848864][T12991] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2469.856860][T12991] 20:47:02 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:02 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xecd, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000000000)="f48f6663a30000000000000008da942554a0a1efd4fa7420014a6784c3f4edb58bd03dd02e06164c58f7d421ffd1ca06c85e68c85918faee7d0c24f2", 0x3c, 0x8, &(0x7f0000b63fe4)={0xa, 0x4e23, 0xffffffc0, @rand_addr, 0x9838}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000001c0)="b88cfd547ec5693b28d4ef89ebea4451649cb4886b62d61aa8d540b877ca0aa37a8718d672e0b42b30d2d750602a0102c069c0ee36fdf807b1be6da71ba7d1263b", 0x41, 0x5, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (rerun: 64) 20:47:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8c030000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000a3e009ae4ca38d2ba6bba69d1a491e0675069edf1903cd9e266330767122be104db0fc433084efad4213f8fde8428163708444177039a4e54f3f66f8c8ed3c5eb5fe2537272b0152e80d3f544f985189e4e53d03497620a1ec84483bd9cf4db02cdda25d9c2562e2ca", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, r6}) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) 20:47:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x1c00000}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/219, 0xdb}], 0x9, 0x1ff, 0x4) r1 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x0, 0x46, 0x0, "b93047b170c839b6220a70bc9b5c82f5361724d2b8370bfc96a41fe94d7d6ef790f937e814f3e474a1502e58c938045d7e838f6f42c00b72ec8fcba44f1e9102ceb0e5466b6ef27cea2e29abf90e193c"}, 0xd8) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffff3, 0x20000004, &(0x7f0000000000)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x1c}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4) 20:47:02 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xf0d, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xa80d0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4) 20:47:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async, rerun: 32) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000a3e009ae4ca38d2ba6bba69d1a491e0675069edf1903cd9e266330767122be104db0fc433084efad4213f8fde8428163708444177039a4e54f3f66f8c8ed3c5eb5fe2537272b0152e80d3f544f985189e4e53d03497620a1ec84483bd9cf4db02cdda25d9c2562e2ca", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, r6}) (async, rerun: 32) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 32) dup(r1) [ 2470.343416][T13037] FAULT_INJECTION: forcing a failure. [ 2470.343416][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.432817][T13037] CPU: 1 PID: 13037 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2470.442970][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2470.453147][T13037] Call Trace: [ 2470.456455][T13037] [ 2470.459433][T13037] dump_stack_lvl+0xd1/0x138 [ 2470.464085][T13037] should_fail_ex.cold+0x5/0xa [ 2470.468912][T13037] ? __khugepaged_enter+0x38/0x3a0 [ 2470.474087][T13037] should_failslab+0x9/0x20 [ 2470.478647][T13037] kmem_cache_alloc+0x5a/0x430 [ 2470.483461][T13037] __khugepaged_enter+0x38/0x3a0 [ 2470.488458][T13037] dup_mmap+0xcdf/0x10b0 [ 2470.492742][T13037] ? find_held_lock+0x2d/0x110 [ 2470.497569][T13037] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2470.502898][T13037] ? lock_downgrade+0x6e0/0x6e0 [ 2470.507815][T13037] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2470.513694][T13037] ? mm_init+0x8e0/0xc10 [ 2470.517992][T13037] copy_process+0x440f/0x7520 [ 2470.522716][T13037] ? find_held_lock+0x2d/0x110 [ 2470.527565][T13037] ? __cleanup_sighand+0xb0/0xb0 [ 2470.532574][T13037] kernel_clone+0xeb/0x990 [ 2470.537132][T13037] ? create_io_thread+0xf0/0xf0 [ 2470.542030][T13037] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2470.547704][T13037] ? wait_for_completion_io_timeout+0x20/0x20 [ 2470.553814][T13037] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2470.559381][T13037] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2470.565308][T13037] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2470.571926][T13037] ? lockdep_hardirqs_on+0x7d/0x100 [ 2470.577150][T13037] __do_fast_syscall_32+0x65/0xf0 [ 2470.582203][T13037] do_fast_syscall_32+0x33/0x70 [ 2470.587083][T13037] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2470.593434][T13037] RIP: 0023:0xf7f7c549 [ 2470.597513][T13037] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2470.617139][T13037] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2470.625666][T13037] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2470.633650][T13037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2470.641720][T13037] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2470.649701][T13037] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2470.657682][T13037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2470.665684][T13037] 20:47:03 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:03 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xd40d0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4) (rerun: 64) 20:47:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x1c00000}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/219, 0xdb}], 0x9, 0x1ff, 0x4) r1 = socket$inet6(0xa, 0x800, 0x0) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x0, 0x46, 0x0, "b93047b170c839b6220a70bc9b5c82f5361724d2b8370bfc96a41fe94d7d6ef790f937e814f3e474a1502e58c938045d7e838f6f42c00b72ec8fcba44f1e9102ceb0e5466b6ef27cea2e29abf90e193c"}, 0xd8) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffff3, 0x20000004, &(0x7f0000000000)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x1c}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001000000a3e009ae4ca38d2ba6bba69d1a491e0675069edf1903cd9e266330767122be104db0fc433084efad4213f8fde8428163708444177039a4e54f3f66f8c8ed3c5eb5fe2537272b0152e80d3f544f985189e4e53d03497620a1ec84483bd9cf4db02cdda25d9c2562e2ca", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r5, 0x4068aea3, &(0x7f00000001c0)={0xc5, 0x0, r6}) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:47:03 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x1000, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="307049fb5537e23adf39ca9866de87116826208f26f49c02c7ff8cfea470339a40746275fe27c825f6026c3dcd4bd7685648736dae16a90a98df13a7fa936a7898f73b22914c74c9e7ecb3534ffef3", 0x4f, 0x840, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x4}, 0x1c) 20:47:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x1c00000}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/219, 0xdb}], 0x9, 0x1ff, 0x4) r1 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x0, 0x46, 0x0, "b93047b170c839b6220a70bc9b5c82f5361724d2b8370bfc96a41fe94d7d6ef790f937e814f3e474a1502e58c938045d7e838f6f42c00b72ec8fcba44f1e9102ceb0e5466b6ef27cea2e29abf90e193c"}, 0xd8) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffff3, 0x20000004, &(0x7f0000000000)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x1c}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr, 0x1c00000}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000002c0)=""/238, 0xee}, {&(0x7f00000003c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/249, 0xf9}, {&(0x7f0000000980)=""/194, 0xc2}, {&(0x7f0000000a80)=""/219, 0xdb}], 0x9, 0x1ff, 0x4) (async) socket$inet6(0xa, 0x800, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x0, 0x0, 0x46, 0x0, "b93047b170c839b6220a70bc9b5c82f5361724d2b8370bfc96a41fe94d7d6ef790f937e814f3e474a1502e58c938045d7e838f6f42c00b72ec8fcba44f1e9102ceb0e5466b6ef27cea2e29abf90e193c"}, 0xd8) (async) sendto$inet6(r1, &(0x7f0000000000), 0xfffffffffffffff3, 0x20000004, &(0x7f0000000000)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x1c}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:47:03 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xdd0d0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:03 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) [ 2470.982999][T13083] FAULT_INJECTION: forcing a failure. [ 2470.982999][T13083] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:47:03 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2471.085780][T13083] CPU: 0 PID: 13083 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2471.095935][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2471.106035][T13083] Call Trace: [ 2471.109346][T13083] [ 2471.112318][T13083] dump_stack_lvl+0xd1/0x138 [ 2471.116975][T13083] should_fail_ex.cold+0x5/0xa [ 2471.121801][T13083] prepare_alloc_pages+0x178/0x570 [ 2471.126970][T13083] ? page_remove_rmap+0x32a/0x1210 20:47:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f00070000000000"]) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r2, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) [ 2471.132153][T13083] __alloc_pages+0x149/0x5b0 [ 2471.136799][T13083] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2471.143629][T13083] ? static_obj+0x11/0xc0 [ 2471.148024][T13083] ? __split_huge_pud+0x4f0/0x4f0 [ 2471.153096][T13083] ? lock_downgrade+0x6e0/0x6e0 [ 2471.157993][T13083] ? __drain_all_pages+0x540/0x540 [ 2471.163163][T13083] alloc_pages+0x1aa/0x270 [ 2471.167628][T13083] pte_alloc_one+0x1a/0x230 [ 2471.172183][T13083] __pte_alloc+0x6d/0x260 [ 2471.176563][T13083] ? pmd_install+0x160/0x160 [ 2471.181216][T13083] copy_page_range+0x17a8/0x3b40 [ 2471.186250][T13083] ? mas_store+0x206/0x2e0 [ 2471.190713][T13083] ? handle_mm_fault+0x850/0x850 [ 2471.195724][T13083] ? anon_vma_fork+0xba/0x630 [ 2471.200465][T13083] dup_mmap+0xc10/0x10b0 [ 2471.204763][T13083] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2471.210099][T13083] ? lock_downgrade+0x6e0/0x6e0 [ 2471.215005][T13083] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2471.220877][T13083] ? mm_init+0x8e0/0xc10 [ 2471.225181][T13083] copy_process+0x440f/0x7520 [ 2471.229908][T13083] ? find_held_lock+0x2d/0x110 [ 2471.234747][T13083] ? __cleanup_sighand+0xb0/0xb0 [ 2471.239757][T13083] kernel_clone+0xeb/0x990 [ 2471.244227][T13083] ? create_io_thread+0xf0/0xf0 [ 2471.249145][T13083] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2471.254850][T13083] ? wait_for_completion_io_timeout+0x20/0x20 [ 2471.261002][T13083] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2471.266594][T13083] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2471.272556][T13083] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2471.279187][T13083] ? lockdep_hardirqs_on+0x7d/0x100 [ 2471.284434][T13083] __do_fast_syscall_32+0x65/0xf0 [ 2471.289516][T13083] do_fast_syscall_32+0x33/0x70 [ 2471.294426][T13083] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.300885][T13083] RIP: 0023:0xf7f7c549 [ 2471.304980][T13083] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2471.324624][T13083] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2471.333081][T13083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2471.341088][T13083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2471.349103][T13083] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2471.357102][T13083] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2471.365096][T13083] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2471.373105][T13083] 20:47:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xde0d0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (rerun: 64) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x1000, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000000c0)="307049fb5537e23adf39ca9866de87116826208f26f49c02c7ff8cfea470339a40746275fe27c825f6026c3dcd4bd7685648736dae16a90a98df13a7fa936a7898f73b22914c74c9e7ecb3534ffef3", 0x4f, 0x840, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x4}, 0x1c) 20:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f00070000000000"]) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) dup3(r2, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f00070000000000"]) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) (async) dup3(r2, r3, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) (async) 20:47:04 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 32) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendto$inet6(r1, &(0x7f0000f6f000), 0x0, 0x20000005, &(0x7f0000b63fe4)={0xa, 0x2, 0x1000, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="307049fb5537e23adf39ca9866de87116826208f26f49c02c7ff8cfea470339a40746275fe27c825f6026c3dcd4bd7685648736dae16a90a98df13a7fa936a7898f73b22914c74c9e7ecb3534ffef3", 0x4f, 0x840, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @empty, 0x4}, 0x1c) 20:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async, rerun: 64) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="ff7f00070000000000"]) (async) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x200000077, 0xc63b420dc510094c) (rerun: 32) dup3(r2, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c) 20:47:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xe10d0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="5cbda4af2f7def5ba2d8fb07bfd567d8601df12b8ade3990a599fd3eaaebc64116d89321a8b44461e18887f93e26a57cb04fb86fd9169d9c62a995dd87c8f663be0c29ea319c1854d5507545379bd3cc21f437a1eb730a19ebd9ebe1a7608eeaa6f9c7fd0ea76713cc4c5a101d2f958452e8eeb9323a", 0x76, 0x10010, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:47:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xf60d0000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2471.747702][T13123] FAULT_INJECTION: forcing a failure. [ 2471.747702][T13123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000)=0x7, 0x4) [ 2471.804097][T13123] CPU: 0 PID: 13123 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2471.814244][T13123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2471.824325][T13123] Call Trace: [ 2471.827607][T13123] [ 2471.830535][T13123] dump_stack_lvl+0xd1/0x138 [ 2471.835135][T13123] should_fail_ex.cold+0x5/0xa [ 2471.839999][T13123] prepare_alloc_pages+0x178/0x570 [ 2471.845117][T13123] __alloc_pages+0x149/0x5b0 [ 2471.849713][T13123] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2471.856561][T13123] ? find_held_lock+0x2d/0x110 [ 2471.861337][T13123] ? find_held_lock+0x2d/0x110 [ 2471.866109][T13123] __folio_alloc+0x16/0x40 [ 2471.870554][T13123] vma_alloc_folio+0x155/0x870 [ 2471.875317][T13123] ? policy_nodemask+0x1c0/0x1c0 [ 2471.880260][T13123] copy_page_range+0x22f6/0x3b40 [ 2471.885258][T13123] ? mas_store+0x206/0x2e0 [ 2471.889698][T13123] ? handle_mm_fault+0x850/0x850 [ 2471.894650][T13123] ? anon_vma_fork+0xba/0x630 [ 2471.899352][T13123] dup_mmap+0xc10/0x10b0 [ 2471.903625][T13123] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2471.908906][T13123] ? lock_downgrade+0x6e0/0x6e0 [ 2471.913756][T13123] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2471.919592][T13123] ? mm_init+0x8e0/0xc10 [ 2471.923882][T13123] copy_process+0x440f/0x7520 [ 2471.928587][T13123] ? find_held_lock+0x2d/0x110 [ 2471.933365][T13123] ? __cleanup_sighand+0xb0/0xb0 [ 2471.938315][T13123] kernel_clone+0xeb/0x990 [ 2471.942732][T13123] ? create_io_thread+0xf0/0xf0 [ 2471.947598][T13123] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2471.953255][T13123] ? wait_for_completion_io_timeout+0x20/0x20 [ 2471.959328][T13123] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2471.964875][T13123] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2471.970772][T13123] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2471.977368][T13123] ? lockdep_hardirqs_on+0x7d/0x100 [ 2471.982562][T13123] __do_fast_syscall_32+0x65/0xf0 [ 2471.987592][T13123] do_fast_syscall_32+0x33/0x70 [ 2471.992445][T13123] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2471.998791][T13123] RIP: 0023:0xf7f7c549 [ 2472.002888][T13123] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.022521][T13123] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2472.030938][T13123] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2472.038917][T13123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2472.046909][T13123] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2472.054961][T13123] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.062931][T13123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.070912][T13123] 20:47:04 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:04 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8d0e, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xffefff1f, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000)=0x7, 0x4) 20:47:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async, rerun: 32) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="5cbda4af2f7def5ba2d8fb07bfd567d8601df12b8ade3990a599fd3eaaebc64116d89321a8b44461e18887f93e26a57cb04fb86fd9169d9c62a995dd87c8f663be0c29ea319c1854d5507545379bd3cc21f437a1eb730a19ebd9ebe1a7608eeaa6f9c7fd0ea76713cc4c5a101d2f958452e8eeb9323a", 0x76, 0x10010, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:04 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async, rerun: 64) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="5cbda4af2f7def5ba2d8fb07bfd567d8601df12b8ade3990a599fd3eaaebc64116d89321a8b44461e18887f93e26a57cb04fb86fd9169d9c62a995dd87c8f663be0c29ea319c1854d5507545379bd3cc21f437a1eb730a19ebd9ebe1a7608eeaa6f9c7fd0ea76713cc4c5a101d2f958452e8eeb9323a", 0x76, 0x10010, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:04 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xcd0e, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000000)=0x7, 0x4) 20:47:04 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xffffff20, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioprio_get$pid(0x1, 0x0) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x80000, 0x1, {0x0, r2}}, 0x6) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) dup(r1) 20:47:04 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x20010, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2472.440048][T13169] FAULT_INJECTION: forcing a failure. [ 2472.440048][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 2472.520059][T13169] CPU: 0 PID: 13169 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2472.530285][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2472.540358][T13169] Call Trace: [ 2472.543649][T13169] [ 2472.546596][T13169] dump_stack_lvl+0xd1/0x138 [ 2472.551318][T13169] should_fail_ex.cold+0x5/0xa [ 2472.556124][T13169] ? vm_area_dup+0x7d/0x380 [ 2472.560653][T13169] should_failslab+0x9/0x20 [ 2472.565184][T13169] kmem_cache_alloc+0x5a/0x430 [ 2472.569977][T13169] vm_area_dup+0x7d/0x380 [ 2472.574332][T13169] ? find_held_lock+0x2d/0x110 [ 2472.579230][T13169] ? kmem_cache_alloc_bulk+0x38e/0x840 [ 2472.584737][T13169] ? mas_next_nentry+0x610/0xab0 [ 2472.589831][T13169] ? vm_area_alloc+0x100/0x100 [ 2472.594717][T13169] ? mas_find+0x211/0xd10 [ 2472.599082][T13169] dup_mmap+0x655/0x10b0 [ 2472.603352][T13169] ? find_held_lock+0x2d/0x110 [ 2472.608159][T13169] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2472.613470][T13169] ? lock_downgrade+0x6e0/0x6e0 [ 2472.618439][T13169] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2472.624291][T13169] ? mm_init+0x8e0/0xc10 [ 2472.628563][T13169] copy_process+0x440f/0x7520 [ 2472.633275][T13169] ? find_held_lock+0x2d/0x110 [ 2472.638111][T13169] ? __cleanup_sighand+0xb0/0xb0 [ 2472.643114][T13169] kernel_clone+0xeb/0x990 [ 2472.647562][T13169] ? create_io_thread+0xf0/0xf0 [ 2472.652481][T13169] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2472.658152][T13169] ? wait_for_completion_io_timeout+0x20/0x20 [ 2472.664263][T13169] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2472.669835][T13169] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2472.675765][T13169] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2472.682400][T13169] ? lockdep_hardirqs_on+0x7d/0x100 [ 2472.687708][T13169] __do_fast_syscall_32+0x65/0xf0 [ 2472.692766][T13169] do_fast_syscall_32+0x33/0x70 [ 2472.697648][T13169] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2472.704004][T13169] RIP: 0023:0xf7f7c549 [ 2472.708090][T13169] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2472.727980][T13169] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2472.736429][T13169] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2472.744418][T13169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2472.752401][T13169] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2472.760408][T13169] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2472.768395][T13169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2472.776401][T13169] 20:47:05 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r2 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, 0x59a}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x0, 0x30}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:05 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:05 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x20200, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioprio_get$pid(0x1, 0x0) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x80000, 0x1, {0x0, r2}}, 0x6) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) ioprio_get$pid(0x1, 0x0) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x80000, 0x1, {0x0, r2}}, 0x6) (async) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r3, r4, 0x0, 0x8000002b) (async) dup(r1) (async) 20:47:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x0, 0x30}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:05 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2473.316135][T13210] FAULT_INJECTION: forcing a failure. [ 2473.316135][T13210] name failslab, interval 1, probability 0, space 0, times 0 20:47:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x0, 0x30}, &(0x7f0000000140)=0xc) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r1, r2, 0x0) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={r4, 0x0, 0x30}, &(0x7f0000000140)=0xc) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:47:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioprio_get$pid(0x1, 0x0) (async) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x0, 0x80000, 0x1, {0x0, r2}}, 0x6) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r3, r4, 0x0, 0x8000002b) (async) dup(r1) 20:47:05 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x2, 0x0, 0x0, 0x0) [ 2473.538563][T13210] CPU: 0 PID: 13210 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2473.548710][T13210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2473.558924][T13210] Call Trace: [ 2473.562235][T13210] [ 2473.565200][T13210] dump_stack_lvl+0xd1/0x138 [ 2473.569845][T13210] should_fail_ex.cold+0x5/0xa [ 2473.574678][T13210] ? vm_area_dup+0x7d/0x380 [ 2473.579232][T13210] should_failslab+0x9/0x20 [ 2473.583796][T13210] kmem_cache_alloc+0x5a/0x430 [ 2473.588643][T13210] vm_area_dup+0x7d/0x380 [ 2473.593047][T13210] ? copy_page_range+0x1dfe/0x3b40 [ 2473.598229][T13210] ? mas_node_count_gfp+0x88/0x140 [ 2473.603426][T13210] ? mas_next_nentry+0x610/0xab0 [ 2473.608430][T13210] ? vm_area_alloc+0x100/0x100 [ 2473.613262][T13210] ? percpu_counter_add_batch+0xc1/0x180 [ 2473.619038][T13210] ? __vm_enough_memory+0x188/0x390 [ 2473.624291][T13210] ? security_vm_enough_memory_mm+0x89/0xb0 [ 2473.630241][T13210] dup_mmap+0x655/0x10b0 20:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) r4 = fsmount(r3, 0x0, 0x8) sendto$inet6(r4, &(0x7f0000001140)="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", 0x1000, 0x400c0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @private1}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0xffffffffffffffd1) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x64}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2473.634540][T13210] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2473.639875][T13210] ? lock_downgrade+0x6e0/0x6e0 [ 2473.644783][T13210] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2473.650665][T13210] ? mm_init+0x8e0/0xc10 [ 2473.654991][T13210] copy_process+0x440f/0x7520 [ 2473.659716][T13210] ? find_held_lock+0x2d/0x110 [ 2473.664554][T13210] ? __cleanup_sighand+0xb0/0xb0 [ 2473.669564][T13210] kernel_clone+0xeb/0x990 [ 2473.674039][T13210] ? create_io_thread+0xf0/0xf0 [ 2473.678948][T13210] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2473.684649][T13210] ? wait_for_completion_io_timeout+0x20/0x20 [ 2473.690787][T13210] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2473.696375][T13210] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2473.702329][T13210] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2473.708967][T13210] ? lockdep_hardirqs_on+0x7d/0x100 [ 2473.714207][T13210] __do_fast_syscall_32+0x65/0xf0 [ 2473.719296][T13210] do_fast_syscall_32+0x33/0x70 [ 2473.724194][T13210] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2473.730567][T13210] RIP: 0023:0xf7f7c549 [ 2473.734672][T13210] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2473.754319][T13210] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2473.762785][T13210] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2473.770799][T13210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2473.778807][T13210] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2473.786811][T13210] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2473.794815][T13210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2473.802843][T13210] 20:47:06 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) r1 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) dup(r1) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) r2 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, 0x59a}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) r4 = fsmount(r3, 0x0, 0x8) sendto$inet6(r4, &(0x7f0000001140)="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", 0x1000, 0x400c0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @private1}, 0x1c) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0xffffffffffffffd1) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x64}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:06 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x101000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:06 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x4, 0x0, 0x0, 0x0) 20:47:06 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r2, r3, 0x0, 0x8000002b) syz_clone(0x234400, &(0x7f0000000400)="66d056bf2abc5de60bb3755b2715488fbc6fe458b025e3c97f1ca312ec884bb678ec0dd8d0a18395f10fc509d67f1f998b63778f9862b5a5d91ed8a796fced713373f92a6e482d4c45b6e55bece3bfa2d547916d2f587c608b2a7e0877346958e2e9ab104f614214a9bef295d7756adb756b78b72005d180f79d5721276861bd25c69a5805b3db14599241fc002fda96a1e49797ababc1232f9c2a0195c969844b15f4bd07d7a6508be68d21e26711d72faa2dd71d8fc351e685e15e98b7c62fe3ac07fc5f5df9037622e65d37b0bd41a997476e33bc53316e17d724bfa6c6f54d936ef44e6b5d80b7033e1487384087d895106d87c8", 0xf6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000500)="45cf49362a4b6ee01c49af759bd953eccd07c08248c405f6baf0a02d7fa41b0025576b46cc7f69b1f851ad0d264ae28c275703f8845b5e3b4c3fc86971d250c5c42e0ea74a9add4c85ceecb24ef76302bde59a466391d45f7e73aa21fc9af6e3c3fe4980e404b7113af1a60d4d92ff1f80b2f9b624ba4b9a272994c46ec961c2a146a31706c5dd6c4c8895748af741eb36c573675dbde20155f5b00185b87af9aa9786169ece6aef79ae16842184af3f7ba23aefaf42c552e173f8bc") dup(r1) 20:47:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) r4 = fsmount(r3, 0x0, 0x8) sendto$inet6(r4, &(0x7f0000001140)="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", 0x1000, 0x400c0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @private1}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r5, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0xffffffffffffffd1) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x64}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) dup(r1) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r2 = socket$inet6(0xa, 0x2, 0x1) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r3 = openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, 0x59a}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x400, 0x0) (async) dup(r1) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) socket$inet6(0xa, 0x2, 0x1) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) openat$pfkey(0xffffff9c, &(0x7f0000000000), 0x40100, 0x0) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x50, @private1={0xfc, 0x1, '\x00', 0x1}, 0x59a}, 0x1c) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2474.221973][T13257] FAULT_INJECTION: forcing a failure. [ 2474.221973][T13257] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2474.356910][T13257] CPU: 0 PID: 13257 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2474.367068][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2474.377147][T13257] Call Trace: [ 2474.380617][T13257] [ 2474.383581][T13257] dump_stack_lvl+0xd1/0x138 [ 2474.388209][T13257] should_fail_ex.cold+0x5/0xa [ 2474.393019][T13257] prepare_alloc_pages+0x178/0x570 [ 2474.398161][T13257] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2474.404256][T13257] __alloc_pages+0x149/0x5b0 [ 2474.408875][T13257] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2474.415684][T13257] ? find_held_lock+0x2d/0x110 [ 2474.420487][T13257] __folio_alloc+0x16/0x40 [ 2474.424932][T13257] vma_alloc_folio+0x155/0x870 [ 2474.429739][T13257] ? policy_nodemask+0x1c0/0x1c0 [ 2474.434730][T13257] copy_page_range+0x22f6/0x3b40 [ 2474.439745][T13257] ? mas_store+0x206/0x2e0 [ 2474.444189][T13257] ? handle_mm_fault+0x850/0x850 [ 2474.449171][T13257] ? anon_vma_fork+0xba/0x630 [ 2474.453973][T13257] dup_mmap+0xc10/0x10b0 [ 2474.458253][T13257] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2474.463566][T13257] ? lock_downgrade+0x6e0/0x6e0 [ 2474.468448][T13257] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2474.474294][T13257] ? mm_init+0x8e0/0xc10 [ 2474.478567][T13257] copy_process+0x440f/0x7520 [ 2474.483268][T13257] ? find_held_lock+0x2d/0x110 [ 2474.488083][T13257] ? __cleanup_sighand+0xb0/0xb0 [ 2474.493066][T13257] kernel_clone+0xeb/0x990 [ 2474.497510][T13257] ? create_io_thread+0xf0/0xf0 [ 2474.502394][T13257] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2474.508067][T13257] ? wait_for_completion_io_timeout+0x20/0x20 [ 2474.514178][T13257] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2474.519762][T13257] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2474.525690][T13257] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2474.532306][T13257] ? lockdep_hardirqs_on+0x7d/0x100 [ 2474.537525][T13257] __do_fast_syscall_32+0x65/0xf0 [ 2474.542763][T13257] do_fast_syscall_32+0x33/0x70 [ 2474.547650][T13257] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2474.554005][T13257] RIP: 0023:0xf7f7c549 [ 2474.558090][T13257] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2474.578065][T13257] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2474.587282][T13257] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2474.595269][T13257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2474.603253][T13257] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2474.611237][T13257] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2474.619223][T13257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2474.627315][T13257] 20:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x15, @private2, 0x3}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) sendto$inet6(r2, &(0x7f0000000680)="300d4592d4a2f6130dde44e1f490341269680a9826f0ac374aa59172ed9d9cae0d2fa060c86b048b4ea27f7f63767b4aea338b5a0ef092f1bd91f3667f9a02fc0e789521ec9d81a4f4860a8454fb9834b2fa1335dbfe70bf88cd1f2da26a41f499ef96b26296c210cd593f02de5d5f902e5b134a48a520d33a6fc1c7bd5d70f61d0e3d8faf5941db2c086244f224c46f4e147c345ba26d795355afeb66db95f55dff75c0657fc7f49a2558829f882eb622bd81adee648f", 0xb7, 0x10, &(0x7f0000000340)={0xa, 0x4e24, 0x8232, @mcast2, 0x6}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) close(r4) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/169, 0xa9}], 0x4, &(0x7f0000000480)=""/249, 0xf9}, 0xffc}], 0x1, 0x141, 0x0) 20:47:07 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:07 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x15, @private2, 0x3}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:07 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x8, 0x0, 0x0, 0x0) 20:47:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) (async) sendto$inet6(r2, &(0x7f0000000680)="300d4592d4a2f6130dde44e1f490341269680a9826f0ac374aa59172ed9d9cae0d2fa060c86b048b4ea27f7f63767b4aea338b5a0ef092f1bd91f3667f9a02fc0e789521ec9d81a4f4860a8454fb9834b2fa1335dbfe70bf88cd1f2da26a41f499ef96b26296c210cd593f02de5d5f902e5b134a48a520d33a6fc1c7bd5d70f61d0e3d8faf5941db2c086244f224c46f4e147c345ba26d795355afeb66db95f55dff75c0657fc7f49a2558829f882eb622bd81adee648f", 0xb7, 0x10, &(0x7f0000000340)={0xa, 0x4e24, 0x8232, @mcast2, 0x6}, 0x1c) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (rerun: 32) r4 = dup3(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) close(r4) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/169, 0xa9}], 0x4, &(0x7f0000000480)=""/249, 0xf9}, 0xffc}], 0x1, 0x141, 0x0) 20:47:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r2, r3, 0x0, 0x8000002b) syz_clone(0x234400, &(0x7f0000000400)="66d056bf2abc5de60bb3755b2715488fbc6fe458b025e3c97f1ca312ec884bb678ec0dd8d0a18395f10fc509d67f1f998b63778f9862b5a5d91ed8a796fced713373f92a6e482d4c45b6e55bece3bfa2d547916d2f587c608b2a7e0877346958e2e9ab104f614214a9bef295d7756adb756b78b72005d180f79d5721276861bd25c69a5805b3db14599241fc002fda96a1e49797ababc1232f9c2a0195c969844b15f4bd07d7a6508be68d21e26711d72faa2dd71d8fc351e685e15e98b7c62fe3ac07fc5f5df9037622e65d37b0bd41a997476e33bc53316e17d724bfa6c6f54d936ef44e6b5d80b7033e1487384087d895106d87c8", 0xf6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000500)="45cf49362a4b6ee01c49af759bd953eccd07c08248c405f6baf0a02d7fa41b0025576b46cc7f69b1f851ad0d264ae28c275703f8845b5e3b4c3fc86971d250c5c42e0ea74a9add4c85ceecb24ef76302bde59a466391d45f7e73aa21fc9af6e3c3fe4980e404b7113af1a60d4d92ff1f80b2f9b624ba4b9a272994c46ec961c2a146a31706c5dd6c4c8895748af741eb36c573675dbde20155f5b00185b87af9aa9786169ece6aef79ae16842184af3f7ba23aefaf42c552e173f8bc") dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) syz_clone(0x234400, &(0x7f0000000400)="66d056bf2abc5de60bb3755b2715488fbc6fe458b025e3c97f1ca312ec884bb678ec0dd8d0a18395f10fc509d67f1f998b63778f9862b5a5d91ed8a796fced713373f92a6e482d4c45b6e55bece3bfa2d547916d2f587c608b2a7e0877346958e2e9ab104f614214a9bef295d7756adb756b78b72005d180f79d5721276861bd25c69a5805b3db14599241fc002fda96a1e49797ababc1232f9c2a0195c969844b15f4bd07d7a6508be68d21e26711d72faa2dd71d8fc351e685e15e98b7c62fe3ac07fc5f5df9037622e65d37b0bd41a997476e33bc53316e17d724bfa6c6f54d936ef44e6b5d80b7033e1487384087d895106d87c8", 0xf6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000500)="45cf49362a4b6ee01c49af759bd953eccd07c08248c405f6baf0a02d7fa41b0025576b46cc7f69b1f851ad0d264ae28c275703f8845b5e3b4c3fc86971d250c5c42e0ea74a9add4c85ceecb24ef76302bde59a466391d45f7e73aa21fc9af6e3c3fe4980e404b7113af1a60d4d92ff1f80b2f9b624ba4b9a272994c46ec961c2a146a31706c5dd6c4c8895748af741eb36c573675dbde20155f5b00185b87af9aa9786169ece6aef79ae16842184af3f7ba23aefaf42c552e173f8bc") (async) dup(r1) (async) 20:47:07 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x15, @private2, 0x3}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (rerun: 64) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r2, 0x0, 0xfffffe7e) sendto$inet6(r2, &(0x7f0000000680)="300d4592d4a2f6130dde44e1f490341269680a9826f0ac374aa59172ed9d9cae0d2fa060c86b048b4ea27f7f63767b4aea338b5a0ef092f1bd91f3667f9a02fc0e789521ec9d81a4f4860a8454fb9834b2fa1335dbfe70bf88cd1f2da26a41f499ef96b26296c210cd593f02de5d5f902e5b134a48a520d33a6fc1c7bd5d70f61d0e3d8faf5941db2c086244f224c46f4e147c345ba26d795355afeb66db95f55dff75c0657fc7f49a2558829f882eb622bd81adee648f", 0xb7, 0x10, &(0x7f0000000340)={0xa, 0x4e24, 0x8232, @mcast2, 0x6}, 0x1c) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) close(r4) (async, rerun: 32) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/205, 0xcd}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000380)=""/169, 0xa9}], 0x4, &(0x7f0000000480)=""/249, 0xf9}, 0xffc}], 0x1, 0x141, 0x0) 20:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfff, 0x1, 0x1, 0x9, 0x1, 0x4}, 0x20) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000100), 0x4) read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "731d480b8e083345", "2017de78218e7e0c6b8301ab17ba0bf0", "48273faf", "f710d63f2172de18"}, 0x28) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x2820c2) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000001c0), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:07 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x11, 0x0, 0x0, 0x0) 20:47:07 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendfile(r2, r3, 0x0, 0x8000002b) syz_clone(0x234400, &(0x7f0000000400)="66d056bf2abc5de60bb3755b2715488fbc6fe458b025e3c97f1ca312ec884bb678ec0dd8d0a18395f10fc509d67f1f998b63778f9862b5a5d91ed8a796fced713373f92a6e482d4c45b6e55bece3bfa2d547916d2f587c608b2a7e0877346958e2e9ab104f614214a9bef295d7756adb756b78b72005d180f79d5721276861bd25c69a5805b3db14599241fc002fda96a1e49797ababc1232f9c2a0195c969844b15f4bd07d7a6508be68d21e26711d72faa2dd71d8fc351e685e15e98b7c62fe3ac07fc5f5df9037622e65d37b0bd41a997476e33bc53316e17d724bfa6c6f54d936ef44e6b5d80b7033e1487384087d895106d87c8", 0xf6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000500)="45cf49362a4b6ee01c49af759bd953eccd07c08248c405f6baf0a02d7fa41b0025576b46cc7f69b1f851ad0d264ae28c275703f8845b5e3b4c3fc86971d250c5c42e0ea74a9add4c85ceecb24ef76302bde59a466391d45f7e73aa21fc9af6e3c3fe4980e404b7113af1a60d4d92ff1f80b2f9b624ba4b9a272994c46ec961c2a146a31706c5dd6c4c8895748af741eb36c573675dbde20155f5b00185b87af9aa9786169ece6aef79ae16842184af3f7ba23aefaf42c552e173f8bc") dup(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82187202, &(0x7f00000001c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) syz_clone(0x234400, &(0x7f0000000400)="66d056bf2abc5de60bb3755b2715488fbc6fe458b025e3c97f1ca312ec884bb678ec0dd8d0a18395f10fc509d67f1f998b63778f9862b5a5d91ed8a796fced713373f92a6e482d4c45b6e55bece3bfa2d547916d2f587c608b2a7e0877346958e2e9ab104f614214a9bef295d7756adb756b78b72005d180f79d5721276861bd25c69a5805b3db14599241fc002fda96a1e49797ababc1232f9c2a0195c969844b15f4bd07d7a6508be68d21e26711d72faa2dd71d8fc351e685e15e98b7c62fe3ac07fc5f5df9037622e65d37b0bd41a997476e33bc53316e17d724bfa6c6f54d936ef44e6b5d80b7033e1487384087d895106d87c8", 0xf6, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000500)="45cf49362a4b6ee01c49af759bd953eccd07c08248c405f6baf0a02d7fa41b0025576b46cc7f69b1f851ad0d264ae28c275703f8845b5e3b4c3fc86971d250c5c42e0ea74a9add4c85ceecb24ef76302bde59a466391d45f7e73aa21fc9af6e3c3fe4980e404b7113af1a60d4d92ff1f80b2f9b624ba4b9a272994c46ec961c2a146a31706c5dd6c4c8895748af741eb36c573675dbde20155f5b00185b87af9aa9786169ece6aef79ae16842184af3f7ba23aefaf42c552e173f8bc") (async) dup(r1) (async) 20:47:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:07 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:07 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfff, 0x1, 0x1, 0x9, 0x1, 0x4}, 0x20) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000100), 0x4) (async) read$rfkill(r1, 0x0, 0xfffffe7e) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "731d480b8e083345", "2017de78218e7e0c6b8301ab17ba0bf0", "48273faf", "f710d63f2172de18"}, 0x28) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x2820c2) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0xfff, 0x1, 0x1, 0x9, 0x1, 0x4}, 0x20) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x6, &(0x7f0000000100), 0x4) read$rfkill(r1, 0x0, 0xfffffe7e) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "731d480b8e083345", "2017de78218e7e0c6b8301ab17ba0bf0", "48273faf", "f710d63f2172de18"}, 0x28) (async) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x2820c2) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000001c0), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) [ 2475.634867][T13347] FAULT_INJECTION: forcing a failure. [ 2475.634867][T13347] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2475.675790][T13347] CPU: 0 PID: 13347 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2475.686415][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2475.696499][T13347] Call Trace: [ 2475.699813][T13347] [ 2475.702741][T13347] dump_stack_lvl+0xd1/0x138 [ 2475.707340][T13347] should_fail_ex.cold+0x5/0xa [ 2475.712117][T13347] prepare_alloc_pages+0x178/0x570 [ 2475.717298][T13347] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2475.723370][T13347] __alloc_pages+0x149/0x5b0 [ 2475.727982][T13347] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2475.735586][T13347] ? find_held_lock+0x2d/0x110 [ 2475.740367][T13347] __folio_alloc+0x16/0x40 [ 2475.744789][T13347] vma_alloc_folio+0x155/0x870 [ 2475.749613][T13347] ? policy_nodemask+0x1c0/0x1c0 [ 2475.754922][T13347] copy_page_range+0x22f6/0x3b40 [ 2475.759929][T13347] ? mas_store+0x206/0x2e0 [ 2475.764348][T13347] ? handle_mm_fault+0x850/0x850 [ 2475.769647][T13347] ? anon_vma_fork+0xba/0x630 [ 2475.774333][T13347] dup_mmap+0xc10/0x10b0 [ 2475.778623][T13347] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2475.783940][T13347] ? lock_downgrade+0x6e0/0x6e0 [ 2475.788822][T13347] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2475.794670][T13347] ? mm_init+0x8e0/0xc10 [ 2475.799041][T13347] copy_process+0x440f/0x7520 [ 2475.803742][T13347] ? find_held_lock+0x2d/0x110 [ 2475.808556][T13347] ? __cleanup_sighand+0xb0/0xb0 [ 2475.813533][T13347] kernel_clone+0xeb/0x990 [ 2475.817977][T13347] ? create_io_thread+0xf0/0xf0 [ 2475.822858][T13347] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2475.828530][T13347] ? wait_for_completion_io_timeout+0x20/0x20 [ 2475.834642][T13347] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2475.840212][T13347] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2475.846140][T13347] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2475.852753][T13347] ? lockdep_hardirqs_on+0x7d/0x100 [ 2475.857973][T13347] __do_fast_syscall_32+0x65/0xf0 [ 2475.863031][T13347] do_fast_syscall_32+0x33/0x70 [ 2475.867915][T13347] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2475.874360][T13347] RIP: 0023:0xf7f7c549 [ 2475.878445][T13347] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2475.898092][T13347] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2475.906549][T13347] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2475.914566][T13347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:47:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0xd}, {0x4}}]}, 0x34}}, 0x0) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r3, 0x0, 0x8000002b) dup(r1) 20:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2475.922580][T13347] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2475.930682][T13347] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2475.939373][T13347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2475.947391][T13347] 20:47:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xea05, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffff, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:08 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:08 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x38c, 0x0, 0x0, 0x0) 20:47:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xea05, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffff, 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @mcast2, 0x7}, 0x1c) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x7}}, 0x1c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010101, @in=@loopback, 0x4e23, 0x13, 0x4e20, 0x800, 0x2, 0x20, 0x80, 0x32, r4, r7}, {0x80, 0x8000000000000001, 0x1, 0xf6, 0xffffffffffffffe0, 0xffffffffffffff7c, 0xc000000000000000}, {0x7, 0x8001, 0x7}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0xffff, 0x100, 0x7}}, 0xe4) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) socket(0x2b, 0xa, 0x2) r9 = dup3(r1, r8, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) sendto$inet6(r9, &(0x7f00000001c0)="f023a3c4e5c1f1ba7bf60b483e9e4ceae0b630af9cbcb4fc67541291669284c227e2eca5a3852c3e0e2b2a8b3ea937a34ce41310a337f75680e50e396b4259ae4b11a0cd923b1ec9f63ed7889b81869156daf3e80f3fe212cabe9d186731d0529d2cf369f63986fe33e17cb3a624bb981f210d1eeb8b979806fee42159a61e94984b59ba131c6c500a66998ed28104c04b9014710b26438f5239e06a79301a1030173178b21fd3387256ac1c68b288d17c19270dbf194b1eafc9d6ea3d01b5a2df63761c4be595cb49c03f25bfa0ae67c53b6b468685644fb759f2e930786057bce5222248df0c61d80bb8d25474b64de96197deb7a97150", 0xf8, 0x4000084, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @empty, 0x8}, 0x1c) [ 2476.202036][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2476.285333][T13373] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 20:47:08 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @mcast2, 0x7}, 0x1c) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x7}}, 0x1c}}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010101, @in=@loopback, 0x4e23, 0x13, 0x4e20, 0x800, 0x2, 0x20, 0x80, 0x32, r4, r7}, {0x80, 0x8000000000000001, 0x1, 0xf6, 0xffffffffffffffe0, 0xffffffffffffff7c, 0xc000000000000000}, {0x7, 0x8001, 0x7}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0xffff, 0x100, 0x7}}, 0xe4) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) socket(0x2b, 0xa, 0x2) (async) r9 = dup3(r1, r8, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) sendto$inet6(r9, &(0x7f00000001c0)="f023a3c4e5c1f1ba7bf60b483e9e4ceae0b630af9cbcb4fc67541291669284c227e2eca5a3852c3e0e2b2a8b3ea937a34ce41310a337f75680e50e396b4259ae4b11a0cd923b1ec9f63ed7889b81869156daf3e80f3fe212cabe9d186731d0529d2cf369f63986fe33e17cb3a624bb981f210d1eeb8b979806fee42159a61e94984b59ba131c6c500a66998ed28104c04b9014710b26438f5239e06a79301a1030173178b21fd3387256ac1c68b288d17c19270dbf194b1eafc9d6ea3d01b5a2df63761c4be595cb49c03f25bfa0ae67c53b6b468685644fb759f2e930786057bce5222248df0c61d80bb8d25474b64de96197deb7a97150", 0xf8, 0x4000084, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @empty, 0x8}, 0x1c) 20:47:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0xea05, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0xffffffff, 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:08 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0xd0f0000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:08 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0xd}, {0x4}}]}, 0x34}}, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async, rerun: 64) dup(r1) (rerun: 64) 20:47:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="3f9c609c4855d0a7b8a896b5d5209903d09ddfae7edd7b41563fdf08f0ffaf9620958147a8ea26a3f0a1b7e860a676cf9c789802101e8afad5b5e16a8bf6821e63969544c034a341c731f5bf77bdc4cb934de27f4196a6d74e36ff47a7685a07dbebc86120b2eba7cbe9b17e73523a9ef881e8c8fc24b73e2356a4e2503744d4b48f1b5c05b1ef07da55f5959ec50f7df76badb9377685ff6f0c9965577d8a00236b7975309ecc3d78b75240b95bfb0d1949ba7fec34abef1d6238ee97ae58150257155f144e650d333549449e88805798344ed60263bfff1cd9af1f3b8ecf6b464b706cbe8fbe3eaaf8729000b83f2008cd823be4d66796", 0xf8, 0x20008001, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1ff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000000}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e21, 0x5, @mcast2, 0x7}, 0x1c) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x7}}, 0x1c}}, 0x0) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010101, @in=@loopback, 0x4e23, 0x13, 0x4e20, 0x800, 0x2, 0x20, 0x80, 0x32, r4, r7}, {0x80, 0x8000000000000001, 0x1, 0xf6, 0xffffffffffffffe0, 0xffffffffffffff7c, 0xc000000000000000}, {0x7, 0x8001, 0x7}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x3, 0x1}, {{@in=@broadcast, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3505, 0x0, 0x2, 0x4, 0xffff, 0x100, 0x7}}, 0xe4) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) socket(0x2b, 0xa, 0x2) (async) r9 = dup3(r1, r8, 0x0) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r9, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) sendto$inet6(r9, &(0x7f00000001c0)="f023a3c4e5c1f1ba7bf60b483e9e4ceae0b630af9cbcb4fc67541291669284c227e2eca5a3852c3e0e2b2a8b3ea937a34ce41310a337f75680e50e396b4259ae4b11a0cd923b1ec9f63ed7889b81869156daf3e80f3fe212cabe9d186731d0529d2cf369f63986fe33e17cb3a624bb981f210d1eeb8b979806fee42159a61e94984b59ba131c6c500a66998ed28104c04b9014710b26438f5239e06a79301a1030173178b21fd3387256ac1c68b288d17c19270dbf194b1eafc9d6ea3d01b5a2df63761c4be595cb49c03f25bfa0ae67c53b6b468685644fb759f2e930786057bce5222248df0c61d80bb8d25474b64de96197deb7a97150", 0xf8, 0x4000084, &(0x7f0000000000)={0xa, 0x4e23, 0x7f, @empty, 0x8}, 0x1c) 20:47:09 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0xda8, 0x0, 0x0, 0x0) 20:47:09 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="3f9c609c4855d0a7b8a896b5d5209903d09ddfae7edd7b41563fdf08f0ffaf9620958147a8ea26a3f0a1b7e860a676cf9c789802101e8afad5b5e16a8bf6821e63969544c034a341c731f5bf77bdc4cb934de27f4196a6d74e36ff47a7685a07dbebc86120b2eba7cbe9b17e73523a9ef881e8c8fc24b73e2356a4e2503744d4b48f1b5c05b1ef07da55f5959ec50f7df76badb9377685ff6f0c9965577d8a00236b7975309ecc3d78b75240b95bfb0d1949ba7fec34abef1d6238ee97ae58150257155f144e650d333549449e88805798344ed60263bfff1cd9af1f3b8ecf6b464b706cbe8fbe3eaaf8729000b83f2008cd823be4d66796", 0xf8, 0x20008001, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1ff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000000}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r2, r3, 0x0) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="3f9c609c4855d0a7b8a896b5d5209903d09ddfae7edd7b41563fdf08f0ffaf9620958147a8ea26a3f0a1b7e860a676cf9c789802101e8afad5b5e16a8bf6821e63969544c034a341c731f5bf77bdc4cb934de27f4196a6d74e36ff47a7685a07dbebc86120b2eba7cbe9b17e73523a9ef881e8c8fc24b73e2356a4e2503744d4b48f1b5c05b1ef07da55f5959ec50f7df76badb9377685ff6f0c9965577d8a00236b7975309ecc3d78b75240b95bfb0d1949ba7fec34abef1d6238ee97ae58150257155f144e650d333549449e88805798344ed60263bfff1cd9af1f3b8ecf6b464b706cbe8fbe3eaaf8729000b83f2008cd823be4d66796", 0xf8, 0x20008001, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1ff}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000000}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) [ 2476.643802][T13406] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2476.661436][T13407] FAULT_INJECTION: forcing a failure. [ 2476.661436][T13407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2476.726596][T13407] CPU: 0 PID: 13407 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2476.736732][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2476.746787][T13407] Call Trace: [ 2476.750070][T13407] [ 2476.753000][T13407] dump_stack_lvl+0xd1/0x138 [ 2476.757603][T13407] should_fail_ex.cold+0x5/0xa [ 2476.762384][T13407] prepare_alloc_pages+0x178/0x570 [ 2476.767501][T13407] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2476.773575][T13407] __alloc_pages+0x149/0x5b0 [ 2476.778171][T13407] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2476.785034][T13407] ? find_held_lock+0x2d/0x110 [ 2476.789837][T13407] __folio_alloc+0x16/0x40 [ 2476.794303][T13407] vma_alloc_folio+0x155/0x870 [ 2476.799076][T13407] ? policy_nodemask+0x1c0/0x1c0 [ 2476.804020][T13407] copy_page_range+0x22f6/0x3b40 [ 2476.808988][T13407] ? mas_store+0x206/0x2e0 [ 2476.813404][T13407] ? handle_mm_fault+0x850/0x850 [ 2476.818365][T13407] ? anon_vma_fork+0xba/0x630 [ 2476.823051][T13407] dup_mmap+0xc10/0x10b0 [ 2476.827296][T13407] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2476.832579][T13407] ? lock_downgrade+0x6e0/0x6e0 [ 2476.837475][T13407] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2476.843318][T13407] ? mm_init+0x8e0/0xc10 [ 2476.847581][T13407] copy_process+0x440f/0x7520 [ 2476.852266][T13407] ? find_held_lock+0x2d/0x110 [ 2476.857047][T13407] ? __cleanup_sighand+0xb0/0xb0 [ 2476.862000][T13407] kernel_clone+0xeb/0x990 [ 2476.866432][T13407] ? create_io_thread+0xf0/0xf0 [ 2476.871288][T13407] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2476.876929][T13407] ? wait_for_completion_io_timeout+0x20/0x20 [ 2476.883022][T13407] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2476.888567][T13407] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2476.894465][T13407] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2476.901073][T13407] ? lockdep_hardirqs_on+0x7d/0x100 [ 2476.906305][T13407] __do_fast_syscall_32+0x65/0xf0 [ 2476.911348][T13407] do_fast_syscall_32+0x33/0x70 [ 2476.916206][T13407] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2476.922557][T13407] RIP: 0023:0xf7f7c549 [ 2476.926640][T13407] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2476.946258][T13407] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2476.954676][T13407] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2476.962648][T13407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2476.970620][T13407] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2476.978588][T13407] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2476.986566][T13407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2476.994570][T13407] 20:47:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 20:47:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000007c0)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0xd}, {0x4}}]}, 0x34}}, 0x0) (async) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) dup(r1) 20:47:09 executing program 0: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) syz_open_dev$usbfs(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:47:09 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 20:47:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$rfkill(r1, 0x0, 0xfffffe7e) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000001100)=0x4, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="3f9c609c4855d0a7b8a896b5d5209903d09ddfae7edd7b41563fdf08f0ffaf9620958147a8ea26a3f0a1b7e860a676cf9c789802101e8afad5b5e16a8bf6821e63969544c034a341c731f5bf77bdc4cb934de27f4196a6d74e36ff47a7685a07dbebc86120b2eba7cbe9b17e73523a9ef881e8c8fc24b73e2356a4e2503744d4b48f1b5c05b1ef07da55f5959ec50f7df76badb9377685ff6f0c9965577d8a00236b7975309ecc3d78b75240b95bfb0d1949ba7fec34abef1d6238ee97ae58150257155f144e650d333549449e88805798344ed60263bfff1cd9af1f3b8ecf6b464b706cbe8fbe3eaaf8729000b83f2008cd823be4d66796", 0xf8, 0x20008001, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1ff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000000}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async) syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') (async) read$rfkill(r1, 0x0, 0xfffffe7e) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) (async) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) (async) dup3(r2, r3, 0x0) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000001100)=0x4, 0x4) (async) sendto$inet6(r0, &(0x7f00000000c0)="3f9c609c4855d0a7b8a896b5d5209903d09ddfae7edd7b41563fdf08f0ffaf9620958147a8ea26a3f0a1b7e860a676cf9c789802101e8afad5b5e16a8bf6821e63969544c034a341c731f5bf77bdc4cb934de27f4196a6d74e36ff47a7685a07dbebc86120b2eba7cbe9b17e73523a9ef881e8c8fc24b73e2356a4e2503744d4b48f1b5c05b1ef07da55f5959ec50f7df76badb9377685ff6f0c9965577d8a00236b7975309ecc3d78b75240b95bfb0d1949ba7fec34abef1d6238ee97ae58150257155f144e650d333549449e88805798344ed60263bfff1cd9af1f3b8ecf6b464b706cbe8fbe3eaaf8729000b83f2008cd823be4d66796", 0xf8, 0x20008001, &(0x7f00000001c0)={0xa, 0x4e23, 0x8, @empty, 0x1ff}, 0x1c) (async) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xfffffffa, @empty, 0x80000000}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) 20:47:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_io_uring_setup(0x616f, &(0x7f00000000c0)={0x0, 0xe7ec, 0x400, 0x2, 0x51, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r1, 0x10000000) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r7 = dup3(r5, r6, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x2cadccadc00b6073, 0x0, r7, 0x0, &(0x7f0000000200)="fb19ce08a17514d107549c3e5233dfab6c7ae757aa0e82025c741e9af4b0bc7193f8a1333db7e5505c04f91a8ac5f274db9b97176d658108724967af7520d886dfef6c5db8bd671895c556c3ec59887aa20aba94168a73138af6638a7ea9c29442607a3ea5bd9df5093b0935ec8622eb40ce5f508b4a13f60af2b29a534f4f04b405be5d47ceb52bcb75ba8a1851d8c6bf49f2e54d9f550251b507db6ff383cb32315211d306a5837c0804ff0215aa6def1b13db12c8262599ab4c331bf982b88880a7ff5d1dbd0f8148bf60b1fa6711df7edaf8216d6458762c2d12b6", 0xdd}, 0x80000000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) sendfile(r2, r8, 0x0, 0x8000002b) dup(r1) 20:47:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) (rerun: 32) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) 20:47:09 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2477.497316][T13461] FAULT_INJECTION: forcing a failure. [ 2477.497316][T13461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2477.543016][T13461] CPU: 0 PID: 13461 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2477.553504][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2477.563583][T13461] Call Trace: [ 2477.566875][T13461] [ 2477.569822][T13461] dump_stack_lvl+0xd1/0x138 [ 2477.574534][T13461] should_fail_ex.cold+0x5/0xa [ 2477.579341][T13461] prepare_alloc_pages+0x178/0x570 [ 2477.584486][T13461] __alloc_pages+0x149/0x5b0 [ 2477.589099][T13461] ? x86_has_pat_wp+0x80/0x80 [ 2477.593801][T13461] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 2477.600691][T13461] ? arch_io_reserve_memtype_wc+0xa0/0xa0 [ 2477.606529][T13461] alloc_pages+0x1aa/0x270 [ 2477.611167][T13461] pte_alloc_one+0x1a/0x230 [ 2477.615699][T13461] __pte_alloc+0x6d/0x260 [ 2477.620055][T13461] ? pmd_install+0x160/0x160 [ 2477.624856][T13461] copy_page_range+0x17a8/0x3b40 [ 2477.629879][T13461] ? mas_store+0x206/0x2e0 [ 2477.634348][T13461] ? handle_mm_fault+0x850/0x850 [ 2477.639338][T13461] ? up_write+0x1b0/0x520 [ 2477.643712][T13461] dup_mmap+0xc10/0x10b0 [ 2477.647996][T13461] ? replace_mm_exe_file+0x4b0/0x4b0 [ 2477.653304][T13461] ? lock_downgrade+0x6e0/0x6e0 [ 2477.658187][T13461] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 2477.664034][T13461] ? mm_init+0x8e0/0xc10 [ 2477.668305][T13461] copy_process+0x440f/0x7520 [ 2477.673004][T13461] ? find_held_lock+0x2d/0x110 [ 2477.677823][T13461] ? __cleanup_sighand+0xb0/0xb0 [ 2477.682814][T13461] kernel_clone+0xeb/0x990 [ 2477.687262][T13461] ? create_io_thread+0xf0/0xf0 [ 2477.692179][T13461] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2477.697849][T13461] ? wait_for_completion_io_timeout+0x20/0x20 [ 2477.703982][T13461] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2477.709553][T13461] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2477.715481][T13461] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2477.722094][T13461] ? lockdep_hardirqs_on+0x7d/0x100 [ 2477.727317][T13461] __do_fast_syscall_32+0x65/0xf0 [ 2477.732377][T13461] do_fast_syscall_32+0x33/0x70 [ 2477.737261][T13461] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2477.743705][T13461] RIP: 0023:0xf7f7c549 [ 2477.749462][T13461] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2477.769092][T13461] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2477.777531][T13461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2477.785520][T13461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2477.793594][T13461] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2477.801579][T13461] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2477.809590][T13461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2477.817593][T13461] 20:47:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index}, 0x0) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) syz_io_uring_setup(0x616f, &(0x7f00000000c0)={0x0, 0xe7ec, 0x400, 0x2, 0x51, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f00000001c0)) (async) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x4010, r1, 0x10000000) (async) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r7 = dup3(r5, r6, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) (async, rerun: 64) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_MSG_RING={0x28, 0x2cadccadc00b6073, 0x0, r7, 0x0, &(0x7f0000000200)="fb19ce08a17514d107549c3e5233dfab6c7ae757aa0e82025c741e9af4b0bc7193f8a1333db7e5505c04f91a8ac5f274db9b97176d658108724967af7520d886dfef6c5db8bd671895c556c3ec59887aa20aba94168a73138af6638a7ea9c29442607a3ea5bd9df5093b0935ec8622eb40ce5f508b4a13f60af2b29a534f4f04b405be5d47ceb52bcb75ba8a1851d8c6bf49f2e54d9f550251b507db6ff383cb32315211d306a5837c0804ff0215aa6def1b13db12c8262599ab4c331bf982b88880a7ff5d1dbd0f8148bf60b1fa6711df7edaf8216d6458762c2d12b6", 0xdd}, 0x80000000) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) process_vm_readv(r9, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000001040)={@in6={{0xa, 0x0, 0x0, @mcast1, 0x3a}}, 0x0, 0x0, 0x1, 0x0, "f47148479828264705b2e95e9ca087954b6c429deb896804c1764a50653aa422741d434ec0d29f652e6ecc96d148776e4a6d6e9092a9bf58d8e9df7651c6099e5bf618c779c6ebb57ae39e46bff3406b"}, 0xd8) (async) sendfile(r2, r8, 0x0, 0x8000002b) dup(r1) 20:47:10 executing program 4: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x0, 0x0, 0xdd4, 0x0, 0x0, 0x0) 20:47:10 executing program 2: madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x18a, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000216000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/15, 0xf}], 0x1) syz_clone(0x1fffefff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:47:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'vlan0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001140)={0x0, 0xea, 0x0, [0x375, 0xffffffff, 0x10001, 0x10001, 0x9], [0x5, 0xffffffff, 0x3, 0x100000001, 0x5, 0x100000000, 0x1, 0xea4, 0x2400000000, 0x2, 0x1, 0x7ff, 0x9, 0x0, 0x457, 0x2a1, 0x256, 0x5, 0x1d, 0xc7d, 0x20, 0x8000800000, 0x7ff, 0x8, 0x1, 0x7, 0x7, 0x9, 0x4, 0xf644, 0x4, 0x3, 0x6, 0x0, 0x7, 0x80, 0x6, 0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x0, 0x9, 0x101, 0x100000000, 0x1f, 0x1, 0x9, 0x2, 0x5ea, 0x80000001, 0x152, 0xae, 0x6, 0x3, 0x20, 0x2, 0x0, 0x100000001, 0x7, 0x8, 0x9efa, 0x9, 0x1, 0x80000000, 0xf450, 0xffffffffffffffff, 0x5, 0xff, 0x80000000, 0x4, 0x4, 0x1d8, 0x3, 0x6a82c686, 0x8, 0xbf, 0x5, 0x5f, 0x4, 0x1, 0x4, 0x8, 0x0, 0x7, 0x1, 0x572, 0x3, 0x3, 0x5, 0xd0, 0xd6, 0x3, 0x7fffffff, 0xa3, 0x401, 0x200, 0x6, 0x9, 0x5, 0x1ff, 0x800, 0x200, 0xcc, 0x0, 0x3, 0x2, 0x8, 0xea, 0x46a7, 0xf0, 0x6, 0x0, 0x18, 0x3878, 0x9, 0x5, 0x6ac3, 0x800, 0x0, 0x6, 0x1000]}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000800)={r4, @in={{0x2, 0x0, @empty}}, 0x0, 0x2000}, 0x9c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, &(0x7f0000000000)=0x84) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 20:47:10 executing program 3: r0 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x100) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="4197c6ad7f96907bb612dd7dc507e9eaddfd4fe54855171d73488d5a3e60b306206c499823a0ee3a1260c276fc122f5db2762b7995a274a741e8df989bf34377b2d2f6cd4077568dbc8cbd6605c5b539dc6537807205f2523d608a071ecf7a708c6c22a7d6bb386d0344bbe017308867d3cd794defb79c27d0327e3d8d9720d97f50ba1c86ffbedf01a74b4678b76dbde6d00e8dd1e7885f4595c6f3783d838d", 0xa0, 0x50, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/174, 0xae}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/9, 0x9}], 0x3, &(0x7f0000000900)=""/104, 0x68}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x200000077, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f00000000c0)={0x0, 0x2}) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000001}) recvmmsg(r4, &(0x7f0000003500)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/196, 0xc4}, {&(0x7f0000000440)=""/15, 0xf}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000480)=""/55, 0x37}], 0x4, &(0x7f0000000500)=""/177, 0xb1}, 0x800}, {{&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000980)=[{&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/97, 0x61}, {&(0x7f0000000880)=""/13, 0xd}], 0x4}, 0x7fffffff}, {{&(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000a40)=""/14, 0xe}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000b00)=""/215, 0xd7}, {&(0x7f0000000c00)=""/51, 0x33}, {&(0x7f0000000c40)=""/148, 0x94}, {&(0x7f0000000e00)=""/160, 0xa0}], 0x7, &(0x7f0000000ec0)=""/157, 0x9d}, 0x200}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000001040)=""/170, 0xaa}, {&(0x7f0000003140)=""/205, 0xcd}, {&(0x7f0000003240)=""/78, 0x4e}, {&(0x7f00000032c0)=""/253, 0xfd}, {&(0x7f00000033c0)=""/172, 0xac}, {&(0x7f0000003480)=""/122, 0x7a}], 0x7}, 0xfffffff8}], 0x4, 0x40000042, &(0x7f0000003580)={0x77359400}) [ 2477.959142][T13461] ------------[ cut here ]------------ [ 2477.995165][T13461] WARNING: CPU: 0 PID: 13461 at arch/x86/mm/pat/memtype.c:1060 untrack_pfn+0x24b/0x290 [ 2478.067098][T13461] Modules linked in: [ 2478.079943][T13461] CPU: 0 PID: 13461 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2478.091708][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2478.132113][T13461] RIP: 0010:untrack_pfn+0x24b/0x290 [ 2478.138457][T13461] Code: 85 6c ff ff ff e8 b5 fb 46 00 4c 89 ee 4c 89 e7 e8 1a e2 ff ff e8 a5 fb 46 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 95 fb 46 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 36 03 95 00 e9 98 fe ff ff e8 fc [ 2478.167550][T13461] RSP: 0018:ffffc9000624f748 EFLAGS: 00010246 [ 2478.173792][T13461] RAX: 0000000000040000 RBX: ffff8880270658c0 RCX: ffffc9000d2c0000 [ 2478.195055][T13461] RDX: 0000000000040000 RSI: ffffffff813a56ab RDI: 0000000000000005 [ 2478.203566][T13461] RBP: 1ffff92000c49ee9 R08: 0000000000000005 R09: 0000000000000000 [ 2478.211750][T13461] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea [ 2478.234255][T13461] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880270658e0 [ 2478.243925][T13461] FS: 0000000000000000(0000) GS:ffff8880b9800000(0063) knlGS:00000000f7f77b40 [ 2478.256774][T13461] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2478.267818][T13461] CR2: 0000000032c27000 CR3: 000000007b40f000 CR4: 00000000003506f0 [ 2478.283158][T13461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2478.295803][T13461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2478.307842][T13461] Call Trace: [ 2478.311250][T13461] [ 2478.317618][T13461] ? track_pfn_insert+0x150/0x150 [ 2478.322838][T13461] ? mas_find+0x211/0xd10 [ 2478.332860][T13461] ? uprobe_munmap+0x20/0x550 [ 2478.337979][T13461] unmap_single_vma+0x1b4/0x2a0 [ 2478.349488][T13461] unmap_vmas+0x226/0x370 [ 2478.353956][T13461] ? unmap_single_vma+0x2a0/0x2a0 [ 2478.364768][T13461] ? find_held_lock+0x2d/0x110 [ 2478.369738][T13461] ? lock_downgrade+0x6e0/0x6e0 [ 2478.380326][T13461] exit_mmap+0x18d/0x7b0 [ 2478.384699][T13461] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2478.397567][T13461] ? kmem_cache_free+0xee/0x5c0 [ 2478.405003][T13461] __mmput+0x128/0x4c0 [ 2478.412627][T13461] mmput+0x60/0x70 [ 2478.416475][T13461] copy_process+0x4623/0x7520 [ 2478.425870][T13461] ? find_held_lock+0x2d/0x110 [ 2478.430851][T13461] ? __cleanup_sighand+0xb0/0xb0 [ 2478.441174][T13461] kernel_clone+0xeb/0x990 [ 2478.456734][T13461] ? create_io_thread+0xf0/0xf0 [ 2478.469709][T13461] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2478.487503][T13461] ? wait_for_completion_io_timeout+0x20/0x20 [ 2478.496032][T13461] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2478.517050][T13461] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2478.523288][T13461] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2478.541686][T13461] ? lockdep_hardirqs_on+0x7d/0x100 [ 2478.546958][T13461] __do_fast_syscall_32+0x65/0xf0 [ 2478.554697][T13461] do_fast_syscall_32+0x33/0x70 [ 2478.559805][T13461] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2478.566189][T13461] RIP: 0023:0xf7f7c549 [ 2478.570375][T13461] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2478.590186][T13461] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2478.598708][T13461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2478.606719][T13461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2478.614945][T13461] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2478.637472][T13461] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2478.645554][T13461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2478.685338][T13461] [ 2478.688604][T13461] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2478.695916][T13461] CPU: 0 PID: 13461 Comm: syz-executor.0 Not tainted 6.1.0-syzkaller-14594-g72a85e2b0a1e #0 [ 2478.706019][T13461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 2478.716115][T13461] Call Trace: [ 2478.719419][T13461] [ 2478.722382][T13461] dump_stack_lvl+0xd1/0x138 [ 2478.727055][T13461] panic+0x2cc/0x626 [ 2478.731033][T13461] ? panic_print_sys_info.part.0+0x110/0x110 [ 2478.737117][T13461] ? untrack_pfn+0x24b/0x290 [ 2478.741756][T13461] check_panic_on_warn.cold+0x19/0x35 [ 2478.747185][T13461] __warn+0xf2/0x1a0 [ 2478.751132][T13461] ? untrack_pfn+0x24b/0x290 [ 2478.755771][T13461] report_bug+0x1c0/0x210 [ 2478.760158][T13461] handle_bug+0x3c/0x70 [ 2478.764383][T13461] exc_invalid_op+0x18/0x50 [ 2478.768944][T13461] asm_exc_invalid_op+0x1a/0x20 [ 2478.773834][T13461] RIP: 0010:untrack_pfn+0x24b/0x290 [ 2478.779079][T13461] Code: 85 6c ff ff ff e8 b5 fb 46 00 4c 89 ee 4c 89 e7 e8 1a e2 ff ff e8 a5 fb 46 00 48 85 db 0f 85 58 ff ff ff eb 82 e8 95 fb 46 00 <0f> 0b e9 76 ff ff ff 48 89 df e8 36 03 95 00 e9 98 fe ff ff e8 fc [ 2478.799862][T13461] RSP: 0018:ffffc9000624f748 EFLAGS: 00010246 [ 2478.805975][T13461] RAX: 0000000000040000 RBX: ffff8880270658c0 RCX: ffffc9000d2c0000 [ 2478.814003][T13461] RDX: 0000000000040000 RSI: ffffffff813a56ab RDI: 0000000000000005 [ 2478.822013][T13461] RBP: 1ffff92000c49ee9 R08: 0000000000000005 R09: 0000000000000000 [ 2478.830029][T13461] R10: 00000000ffffffea R11: 0000000000000000 R12: 00000000ffffffea [ 2478.838042][T13461] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880270658e0 [ 2478.846075][T13461] ? untrack_pfn+0x24b/0x290 [ 2478.850718][T13461] ? untrack_pfn+0x24b/0x290 [ 2478.855874][T13461] ? track_pfn_insert+0x150/0x150 [ 2478.860955][T13461] ? mas_find+0x211/0xd10 [ 2478.865320][T13461] ? uprobe_munmap+0x20/0x550 [ 2478.870049][T13461] unmap_single_vma+0x1b4/0x2a0 [ 2478.874944][T13461] unmap_vmas+0x226/0x370 [ 2478.879301][T13461] ? unmap_single_vma+0x2a0/0x2a0 [ 2478.884354][T13461] ? find_held_lock+0x2d/0x110 [ 2478.889156][T13461] ? lock_downgrade+0x6e0/0x6e0 [ 2478.894041][T13461] exit_mmap+0x18d/0x7b0 [ 2478.898312][T13461] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2478.904334][T13461] ? kmem_cache_free+0xee/0x5c0 [ 2478.909215][T13461] __mmput+0x128/0x4c0 [ 2478.913312][T13461] mmput+0x60/0x70 [ 2478.917056][T13461] copy_process+0x4623/0x7520 [ 2478.921754][T13461] ? find_held_lock+0x2d/0x110 [ 2478.926566][T13461] ? __cleanup_sighand+0xb0/0xb0 [ 2478.931546][T13461] kernel_clone+0xeb/0x990 [ 2478.935989][T13461] ? create_io_thread+0xf0/0xf0 [ 2478.940870][T13461] ? __mutex_unlock_slowpath+0x157/0x5e0 [ 2478.946540][T13461] ? wait_for_completion_io_timeout+0x20/0x20 [ 2478.952648][T13461] __do_compat_sys_ia32_clone+0x9e/0xd0 [ 2478.958215][T13461] ? __do_compat_sys_ia32_fstat64+0xd0/0xd0 [ 2478.964143][T13461] ? syscall_enter_from_user_mode_prepare+0x1d/0x80 [ 2478.970753][T13461] ? lockdep_hardirqs_on+0x7d/0x100 [ 2478.975971][T13461] __do_fast_syscall_32+0x65/0xf0 [ 2478.981028][T13461] do_fast_syscall_32+0x33/0x70 [ 2478.985911][T13461] entry_SYSENTER_compat_after_hwframe+0x70/0x82 [ 2478.992265][T13461] RIP: 0023:0xf7f7c549 [ 2478.996347][T13461] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2479.015975][T13461] RSP: 002b:00000000f7f7757c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 2479.024410][T13461] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 2479.032397][T13461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2479.040382][T13461] RBP: 0000000020000200 R08: 0000000000000000 R09: 0000000000000000 [ 2479.048368][T13461] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000000000000 [ 2479.056370][T13461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2479.064375][T13461] [ 2479.067589][T13461] Kernel Offset: disabled [ 2479.072213][T13461] Rebooting in 86400 seconds..