2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2750.943516][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2750.952135][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2750.965098][T29077] FAULT_INJECTION: forcing a failure. [ 2750.965098][T29077] name failslab, interval 1, probability 0, space 0, times 0 [ 2750.977915][T29077] CPU: 1 PID: 29077 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2750.988044][T29077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2750.998075][T29077] Call Trace: [ 2751.001343][T29077] dump_stack+0x14a/0x1ce [ 2751.005650][T29077] ? devkmsg_release+0x11c/0x11c [ 2751.010570][T29077] ? __kernel_text_address+0x93/0x110 [ 2751.015926][T29077] ? show_regs_print_info+0x12/0x12 [ 2751.021106][T29077] ? unwind_get_return_address+0x48/0x90 [ 2751.026719][T29077] ? arch_stack_walk+0xd8/0x120 [ 2751.031549][T29077] should_fail+0x6fb/0x860 [ 2751.035934][T29077] ? setup_fault_attr+0x3d0/0x3d0 [ 2751.040987][T29077] ? stack_trace_save+0x123/0x1f0 [ 2751.045992][T29077] ? stack_trace_snprint+0x150/0x150 [ 2751.051250][T29077] ? __alloc_skb+0x88/0x4d0 [ 2751.055725][T29077] should_failslab+0x5/0x20 [ 2751.060202][T29077] kmem_cache_alloc+0x36/0x260 [ 2751.064952][T29077] __alloc_skb+0x88/0x4d0 [ 2751.069253][T29077] ? __kasan_kmalloc+0x189/0x1c0 [ 2751.074173][T29077] alloc_skb_with_frags+0xb1/0x580 [ 2751.079262][T29077] ? sock_sendpage+0xd0/0x120 [ 2751.083912][T29077] ? pipe_to_sendpage+0x23b/0x300 [ 2751.088963][T29077] ? __splice_from_pipe+0x2d3/0x870 [ 2751.094136][T29077] ? generic_splice_sendpage+0x184/0x210 [ 2751.099744][T29077] ? do_syscall_64+0xcb/0x150 [ 2751.104403][T29077] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2751.110442][T29077] sock_alloc_send_pskb+0x87e/0xcc0 [ 2751.115645][T29077] ? sock_kzfree_s+0x50/0x50 [ 2751.120210][T29077] ? rt_set_nexthop+0x48b/0x1140 [ 2751.125121][T29077] __ip_append_data+0x1fb9/0x3170 [ 2751.130123][T29077] ? ip_do_fragment+0x22c0/0x22c0 [ 2751.135128][T29077] ? inet_rtm_getroute+0x2590/0x2590 [ 2751.140395][T29077] ? ip_setup_cork+0x810/0x810 [ 2751.145136][T29077] ? ip_setup_cork+0x46b/0x810 [ 2751.149873][T29077] ? sock_def_destruct+0x10/0x10 [ 2751.154788][T29077] ip_append_data+0x12c/0x1a0 [ 2751.159444][T29077] ? ip_do_fragment+0x22c0/0x22c0 [ 2751.164441][T29077] udp_sendmsg+0x3ef/0x2f40 [ 2751.168924][T29077] ? update_misfit_status+0x5e0/0x5e0 [ 2751.174268][T29077] ? ip_do_fragment+0x22c0/0x22c0 [ 2751.179272][T29077] ? udp_cmsg_send+0x340/0x340 [ 2751.184127][T29077] ? perf_pmu_sched_task+0x370/0x370 [ 2751.189405][T29077] ? find_next_bit+0xf7/0x120 [ 2751.194115][T29077] ? finish_task_switch+0x2be/0x4c0 [ 2751.199387][T29077] udp_sendpage+0x110/0x5c0 [ 2751.203929][T29077] ? udplite_getfrag+0x70/0x70 [ 2751.208674][T29077] ? mutex_lock+0xa6/0x110 [ 2751.213064][T29077] ? inet_send_prepare+0x1b7/0x470 [ 2751.218151][T29077] ? udplite_getfrag+0x70/0x70 [ 2751.222885][T29077] inet_sendpage+0xd7/0x130 [ 2751.227363][T29077] ? inet_sendmsg+0xc0/0xc0 [ 2751.231845][T29077] sock_sendpage+0xd0/0x120 [ 2751.236325][T29077] pipe_to_sendpage+0x23b/0x300 [ 2751.241158][T29077] ? sock_fasync+0xf0/0xf0 [ 2751.245549][T29077] ? generic_splice_sendpage+0x210/0x210 [ 2751.251152][T29077] __splice_from_pipe+0x2d3/0x870 [ 2751.256149][T29077] ? generic_splice_sendpage+0x210/0x210 [ 2751.261773][T29077] generic_splice_sendpage+0x184/0x210 [ 2751.267213][T29077] ? iter_file_splice_write+0xf60/0xf60 [ 2751.272732][T29077] ? security_file_permission+0x128/0x300 [ 2751.278438][T29077] ? iter_file_splice_write+0xf60/0xf60 [ 2751.283985][T29077] __se_sys_splice+0x7ee/0x1b70 [ 2751.288818][T29077] ? fput_many+0x42/0x1a0 [ 2751.293122][T29077] ? ksys_write+0x25d/0x2c0 [ 2751.297597][T29077] ? file_open_root+0x450/0x450 [ 2751.302432][T29077] ? __x64_sys_splice+0xf0/0xf0 [ 2751.307263][T29077] ? __x64_sys_splice+0x1d/0xf0 [ 2751.312086][T29077] do_syscall_64+0xcb/0x150 [ 2751.316571][T29077] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2751.322436][T29077] RIP: 0033:0x45ca59 [ 2751.326314][T29077] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2751.345899][T29077] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2751.354282][T29077] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2751.362273][T29077] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2751.370249][T29077] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2751.378198][T29077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2751.386144][T29077] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0xb, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x2e, 0x61, 0x2e, 0x30]}}, &(0x7f0000000180)=""/182, 0x2f, 0xb6}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x10, &(0x7f0000000300)={&(0x7f0000000280)=""/126, 0x7e, 0xffffffffffffffff}}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) pipe2(&(0x7f0000008480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000008580)={&(0x7f00000084c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000008540)={&(0x7f0000008500)={0x34, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x41) recvmmsg(r1, &(0x7f00000082c0)=[{{&(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000002c0)=""/150, 0x96}], 0x4, &(0x7f00000003c0)=""/166, 0xa6}, 0xfffffffb}, {{&(0x7f0000000480)=@phonet, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)=""/197, 0xc5}, {&(0x7f0000000600)=""/246, 0xf6}, {&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/119, 0x77}], 0x6}, 0x81}, {{&(0x7f00000008c0)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/45, 0x2d}, {&(0x7f0000000980)=""/151, 0x97}, {&(0x7f0000000a40)=""/133, 0x85}, {&(0x7f0000000b00)=""/28, 0x1c}, {&(0x7f0000000b40)=""/92, 0x5c}], 0x5, &(0x7f0000000c40)=""/49, 0x31}, 0x4}, {{&(0x7f0000000c80)=@un=@abs, 0x80, &(0x7f0000005340)=[{&(0x7f0000000d00)=""/9, 0x9}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000000d40)=""/145, 0x91}, {&(0x7f0000000e00)=""/94, 0x5e}, {&(0x7f0000000e80)=""/80, 0x50}, {&(0x7f0000004f80)=""/77, 0x4d}, {&(0x7f0000005000)=""/230, 0xe6}, {&(0x7f0000005100)=""/176, 0xb0}, {&(0x7f00000051c0)=""/77, 0x4d}, {&(0x7f0000005240)=""/214, 0xd6}], 0xa, &(0x7f0000005400)=""/161, 0xa1}, 0x3}, {{&(0x7f00000054c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005540)=""/131, 0x83}, {&(0x7f0000005600)=""/223, 0xdf}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/206, 0xce}], 0x4, &(0x7f0000006840)=""/245, 0xf5}, 0x700000}, {{&(0x7f0000006940)=@caif=@util, 0x80, &(0x7f0000007e00)=[{&(0x7f00000069c0)=""/192, 0xc0}, {&(0x7f0000006a80)=""/153, 0x99}, {&(0x7f0000006b40)=""/73, 0x49}, {&(0x7f0000006bc0)=""/4096, 0x1000}, {&(0x7f0000007bc0)=""/157, 0x9d}, {&(0x7f0000007c80)=""/52, 0x34}, {&(0x7f0000007cc0)=""/186, 0xba}, {&(0x7f0000007d80)=""/88, 0x58}], 0x8, &(0x7f0000007e80)=""/142, 0x8e}, 0x5}, {{&(0x7f0000007f40)=@nfc_llcp, 0x80, &(0x7f00000081c0)=[{&(0x7f0000007fc0)=""/179, 0xb3}, {&(0x7f0000008080)=""/118, 0x76}, {&(0x7f0000008100)=""/185, 0xb9}], 0x3, &(0x7f0000008200)=""/133, 0x85}, 0x1}], 0x7, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000008600)={&(0x7f00000085c0)='\x00', r5}, 0x10) dup(r3) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:25 executing program 0 (fault-call:11 fault-nth:42): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:25 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2a) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000000}, 0x10000810) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0xfffffffc}, 0x1c) sendmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x18000, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) r3 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) poll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x810e}, {r3, 0x400}, {0xffffffffffffffff, 0x8060}, {r6, 0x220}, {r1, 0x1}], 0x5, 0x4) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000280)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x800}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000300)="602a8e27cd6a842c7012e90e98261ad01612f96863005b6db507940f688113c44b75a3f88aa97ff5fabe4a8e36b5388ec91f8c3bc23d235e84d2b7677b59b3836d27b2bd1a1ee04722132534d8099bc0e30daf3e697bac5f50022f4045a9c821de9fa73b7a0b365f9017d05f362b61ed5499b0494c502b8cb318a1c05d087524aea9177356", 0x85}, {&(0x7f00000003c0)="3bc8daf545226f24bf3d888ab91cc47d4ddf601a785d20f77ac241b124a64ced5c527c64fda1608f5af7e3697b3cf733d4b51ef27fcf9c31f4ac00f0864177d874973845640002d4867f114b00dec6e3106065f1ad98eb7d12dacc52bf7aee53deaf956292e4f35767064947c86b6d3e4f92cd1324f0cea18a4b21beff214de54d82ffc1caa7ca0a0208766baa3c86956d599015e195ff8e8dfd1b44", 0x9c}, {&(0x7f0000000480)="3d8cc59f57a13bc2cec1feb2002c359c79bab5c477d9a02707fe7f7c87949e7066795c0829966172074c45fdc0fbaac6da36d9ae615bfc12c24ebed056e68f6a5a6c69ebf1a1206d1bb1d27ae9135947078e9a6da800ce8dd89c61626c77c8b873d077b0854f2bca8e68286d2d7eda6ad2c5b5b8c7db5406ce8c47d799713d2cff453c3cf977625e018a38612a4202dd4aa0518b1c5d46c35fffc0", 0x9b}, {&(0x7f0000000540)="d02a48f1e1c3fece53f634e7dbaf15cd3a4b51c6d06874182e29c49861e532eaa800d3df296c610f547600cba22a", 0x2e}, {&(0x7f0000000580)="39b837fb30c6ed7f787a289891f204b0617ce5aecd9c85f278df46a60b43df9e2ed728213065a1f2258175537c826cf3e71b7795f8d8e22957d339140097f321308689f231d96e2ffbe39583de07aac4b1ea00faa089f9fbe6530220ced5510dc8e4b84de056e25ae6d331da6cca2b80d637ed20e7468775cd28d54726345741fd206101785373b5e5b99154ca0592934e41c5d929a45d385c56f8289c24aa9a263c4587df2cde02af37b61be6874c5e228de6eae990d17615e9dc3b8641141e9d7d01747d82a33f833ca03174dc3578626e6270b1c148be", 0xd8}, {&(0x7f0000000680)="b00a723a595cde6092a120074377a5defe4e069122d68619a1c6ae978752e90120eb9e4fae254db23f44e4bf2f4bf0c20d544f161bc5960ab3602d674e0fd3710b020c2efce3353104a04d6b21246c8b469791855677a26f60679465a3c6ac01879e7c6033d7f87bdc86a571cda66aad0566bf12e2750f361f55c4be618663e9decaa7731703017cce0ec47ac89d709e24dfcef69ef31666b80eabfead64e9dba7461706b21543917d35c9db86035a25f08cb9b4f27f89e50158198e3684a6b74355f63a2e0c09f78a500245843f5bd674b031c31b00a0984eb0758d510afb7cb3dce23212395866944c458de33963a8ad916cd17f7809e6", 0xf8}, {&(0x7f0000000780)="a3115b340e1b1a87367c80f109cf18b190d596d0795a1c813af3cc2d5511", 0x1e}, {&(0x7f00000007c0)="d1d2e0ce4c2ccce0fcf49b3bd269a1039d55de30d9b95cdc7cad6b8aef39bb471d31d62924379651f46565e895d0bd742bad0f9396f630dc5945d417f4036fa061560b473b5c64cbd0a83e73", 0x4c}, {&(0x7f0000000840)="c28f685e0de6ba88256006b622e83d96fae7ce720cd87635974c9aac0b66e5424437dbaefb7ad1cf57d593e9af496a93b7f2a7e317aa67be6c25751b37971daf9d232eda3c5829b30aeecd8dd8895617f2335a3d6f25887fdbe578087c17dbc6488a191929954bffbbeb180c04971449fe2bd8427ca549013e8b00b9ed79a4", 0x7f}], 0x9, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xd0}}], 0x2, 0x0) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r4, &(0x7f0000000180)={0x48000002}) 15:27:25 executing program 4: rmdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xb) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) write$P9_RRENAMEAT(r0, &(0x7f0000000080)={0x7, 0x4b, 0x1}, 0x7) 15:27:25 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r2, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2b}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40004) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r5, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000300)='security.evm\x00', &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x1009, 0x3) sendmmsg(r5, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000300), 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8e3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004084) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2753.578829][T29120] FAULT_INJECTION: forcing a failure. [ 2753.578829][T29120] name failslab, interval 1, probability 0, space 0, times 0 [ 2753.591891][T29120] CPU: 1 PID: 29120 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2753.602050][T29120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2753.612086][T29120] Call Trace: [ 2753.615432][T29120] dump_stack+0x14a/0x1ce [ 2753.619740][T29120] ? devkmsg_release+0x11c/0x11c [ 2753.624711][T29120] ? show_regs_print_info+0x12/0x12 [ 2753.629893][T29120] should_fail+0x6fb/0x860 [ 2753.634305][T29120] ? setup_fault_attr+0x3d0/0x3d0 [ 2753.639312][T29120] ? alloc_skb_with_frags+0xb1/0x580 [ 2753.644613][T29120] should_failslab+0x5/0x20 [ 2753.649092][T29120] __kmalloc_track_caller+0x5d/0x2c0 [ 2753.654348][T29120] ? kmem_cache_alloc+0x1d5/0x260 [ 2753.659347][T29120] ? alloc_skb_with_frags+0xb1/0x580 [ 2753.664614][T29120] __alloc_skb+0xd1/0x4d0 [ 2753.668934][T29120] ? __kasan_kmalloc+0x189/0x1c0 [ 2753.673856][T29120] alloc_skb_with_frags+0xb1/0x580 [ 2753.678943][T29120] ? sock_sendpage+0xd0/0x120 [ 2753.683604][T29120] ? pipe_to_sendpage+0x23b/0x300 [ 2753.688609][T29120] ? __splice_from_pipe+0x2d3/0x870 [ 2753.693789][T29120] ? generic_splice_sendpage+0x184/0x210 [ 2753.699415][T29120] ? do_syscall_64+0xcb/0x150 [ 2753.704076][T29120] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2753.710123][T29120] sock_alloc_send_pskb+0x87e/0xcc0 [ 2753.715299][T29120] ? sock_kzfree_s+0x50/0x50 [ 2753.719870][T29120] ? rt_set_nexthop+0x48b/0x1140 [ 2753.724781][T29120] __ip_append_data+0x1fb9/0x3170 [ 2753.729782][T29120] ? ip_do_fragment+0x22c0/0x22c0 [ 2753.734783][T29120] ? inet_rtm_getroute+0x2590/0x2590 [ 2753.740053][T29120] ? ip_setup_cork+0x810/0x810 [ 2753.744790][T29120] ? ip_setup_cork+0x46b/0x810 [ 2753.749533][T29120] ? sock_def_destruct+0x10/0x10 [ 2753.754449][T29120] ip_append_data+0x12c/0x1a0 [ 2753.759106][T29120] ? ip_do_fragment+0x22c0/0x22c0 [ 2753.764159][T29120] udp_sendmsg+0x3ef/0x2f40 [ 2753.768644][T29120] ? update_misfit_status+0x5e0/0x5e0 [ 2753.773995][T29120] ? ip_do_fragment+0x22c0/0x22c0 [ 2753.779057][T29120] ? udp_cmsg_send+0x340/0x340 [ 2753.783807][T29120] ? perf_pmu_sched_task+0x370/0x370 [ 2753.789083][T29120] ? find_next_bit+0xf7/0x120 [ 2753.793748][T29120] ? finish_task_switch+0x2be/0x4c0 [ 2753.798934][T29120] udp_sendpage+0x110/0x5c0 [ 2753.803427][T29120] ? udplite_getfrag+0x70/0x70 [ 2753.808164][T29120] ? mutex_lock+0xa6/0x110 [ 2753.812565][T29120] ? inet_send_prepare+0x1b7/0x470 [ 2753.817653][T29120] ? udplite_getfrag+0x70/0x70 [ 2753.822388][T29120] inet_sendpage+0xd7/0x130 [ 2753.826864][T29120] ? inet_sendmsg+0xc0/0xc0 [ 2753.831345][T29120] sock_sendpage+0xd0/0x120 [ 2753.835831][T29120] pipe_to_sendpage+0x23b/0x300 [ 2753.840659][T29120] ? sock_fasync+0xf0/0xf0 [ 2753.845101][T29120] ? generic_splice_sendpage+0x210/0x210 [ 2753.850754][T29120] __splice_from_pipe+0x2d3/0x870 [ 2753.855756][T29120] ? generic_splice_sendpage+0x210/0x210 [ 2753.861367][T29120] generic_splice_sendpage+0x184/0x210 [ 2753.866801][T29120] ? iter_file_splice_write+0xf60/0xf60 [ 2753.872324][T29120] ? security_file_permission+0x128/0x300 [ 2753.878018][T29120] ? iter_file_splice_write+0xf60/0xf60 [ 2753.883541][T29120] __se_sys_splice+0x7ee/0x1b70 [ 2753.888369][T29120] ? fput_many+0x42/0x1a0 [ 2753.892681][T29120] ? ksys_write+0x25d/0x2c0 [ 2753.897166][T29120] ? file_open_root+0x450/0x450 [ 2753.901991][T29120] ? __x64_sys_splice+0xf0/0xf0 [ 2753.906833][T29120] ? __x64_sys_splice+0x1d/0xf0 [ 2753.911727][T29120] do_syscall_64+0xcb/0x150 [ 2753.916212][T29120] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2753.922099][T29120] RIP: 0033:0x45ca59 [ 2753.926043][T29120] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2753.945625][T29120] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2753.954015][T29120] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2753.961965][T29120] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2753.969935][T29120] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 15:27:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2753.977917][T29120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2753.985878][T29120] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000200)=@req={0xffc, 0xb, 0x80000000, 0x8}, 0x10) io_uring_setup(0x698, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x3, 0x31d}) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00') sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x3, @broadcast}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@loopback, 0x4e24, 0x1f, 0x4e24, 0x9, 0xa, 0x20, 0x20, 0x3a, r5, r7}, {0x6c5, 0x9, 0x3, 0x6, 0x2a, 0x49ce, 0x7f, 0xee}, {0x8, 0x2, 0x3, 0x9}, 0x8000, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in6=@private1={0xfc, 0x1, [], 0x1}, 0x4d6, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x3503, 0x1, 0x2, 0x4, 0x2, 0x40, 0x6}}, 0xe8) 15:27:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x6c, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1395c8a0}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x136127ca}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) 15:27:26 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:26 executing program 0 (fault-call:11 fault-nth:43): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2754.387645][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2754.396373][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x39, 0x0, "68ef68e4c54abe7c7df62bd4f119dfdf0b3e372952ed9d4b26faa7f8b3c32b137b4c3b2bdb0b02161b63d56615b3d0f887b9bc1fc162da972b7e3f305744bb3db73b86e5f07df895ad2df670a458c332"}, 0xd8) [ 2754.428047][T29149] FAULT_INJECTION: forcing a failure. [ 2754.428047][T29149] name failslab, interval 1, probability 0, space 0, times 0 [ 2754.441306][T29149] CPU: 0 PID: 29149 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2754.451453][T29149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2754.461501][T29149] Call Trace: [ 2754.464792][T29149] dump_stack+0x14a/0x1ce [ 2754.469121][T29149] ? devkmsg_release+0x11c/0x11c 15:27:26 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.swap.current\x00', 0x26e1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2754.474062][T29149] ? show_regs_print_info+0x12/0x12 [ 2754.479271][T29149] should_fail+0x6fb/0x860 [ 2754.483685][T29149] ? setup_fault_attr+0x3d0/0x3d0 [ 2754.488711][T29149] ? skb_clone+0x1b2/0x370 [ 2754.493124][T29149] should_failslab+0x5/0x20 [ 2754.497626][T29149] kmem_cache_alloc+0x36/0x260 [ 2754.502403][T29149] skb_clone+0x1b2/0x370 [ 2754.506648][T29149] ip_mc_output+0x1d1/0x9f0 [ 2754.511160][T29149] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2754.516619][T29149] ? nf_hook_slow+0x1a6/0x1f0 [ 2754.521298][T29149] ? __ip_local_out+0x33b/0x470 [ 2754.526149][T29149] ? ip_send_check+0xd0/0xd0 [ 2754.530727][T29149] ? __ip_local_out+0x470/0x470 [ 2754.535555][T29149] ? inet_rtm_getroute+0x2590/0x2590 [ 2754.541263][T29149] ? csum_partial+0x379/0x470 [ 2754.545914][T29149] ? siphash_3u32+0x22/0x240 [ 2754.550566][T29149] ? csum_partial+0x379/0x470 [ 2754.555217][T29149] ip_send_skb+0xaa/0x140 [ 2754.559546][T29149] udp_send_skb+0x8e9/0x1100 [ 2754.564177][T29149] udp_sendpage+0x2f2/0x5c0 [ 2754.568668][T29149] ? udplite_getfrag+0x70/0x70 [ 2754.573425][T29149] ? mutex_lock+0xa6/0x110 [ 2754.577818][T29149] ? inet_send_prepare+0x1b7/0x470 [ 2754.582903][T29149] ? udplite_getfrag+0x70/0x70 [ 2754.587641][T29149] inet_sendpage+0xd7/0x130 [ 2754.592118][T29149] ? inet_sendmsg+0xc0/0xc0 [ 2754.596728][T29149] sock_sendpage+0xd0/0x120 [ 2754.601221][T29149] pipe_to_sendpage+0x23b/0x300 [ 2754.606070][T29149] ? sock_fasync+0xf0/0xf0 [ 2754.610457][T29149] ? generic_splice_sendpage+0x210/0x210 [ 2754.616068][T29149] __splice_from_pipe+0x2d3/0x870 [ 2754.621069][T29149] ? generic_splice_sendpage+0x210/0x210 [ 2754.626781][T29149] generic_splice_sendpage+0x184/0x210 [ 2754.632225][T29149] ? iter_file_splice_write+0xf60/0xf60 [ 2754.637748][T29149] ? security_file_permission+0x128/0x300 [ 2754.643437][T29149] ? iter_file_splice_write+0xf60/0xf60 [ 2754.648955][T29149] __se_sys_splice+0x7ee/0x1b70 [ 2754.653778][T29149] ? fput_many+0x42/0x1a0 [ 2754.658079][T29149] ? ksys_write+0x25d/0x2c0 [ 2754.662562][T29149] ? file_open_root+0x450/0x450 [ 2754.667393][T29149] ? __x64_sys_splice+0xf0/0xf0 [ 2754.672214][T29149] ? __x64_sys_splice+0x1d/0xf0 [ 2754.677043][T29149] do_syscall_64+0xcb/0x150 [ 2754.681531][T29149] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2754.687398][T29149] RIP: 0033:0x45ca59 [ 2754.691265][T29149] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2754.710851][T29149] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2754.719241][T29149] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2754.727235][T29149] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2754.735179][T29149] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2754.743125][T29149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2754.751072][T29149] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2754.760322][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2754.769195][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x5, 0x5d84fc03, 0x7, 0x8a}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x24ba1dc0}) 15:27:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xf60f]}) 15:27:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="286cc904", @ANYRES16=r1, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a00000000000000fec000000000000000000000000000bb00000000200002000a00000000000000fe8000000000000000000000000000aa00000000"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0xb0, r1, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2adb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0xfffffffffffffe62}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4040800}, 0x40000) 15:27:28 executing program 0 (fault-call:11 fault-nth:44): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$peeksig(0x4209, r3, &(0x7f0000000180)={0x1fb3, 0x1, 0x5}, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x0) keyctl$unlink(0x9, 0x0, r5) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}) 15:27:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 15:27:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}) [ 2756.606816][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2756.615413][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2756.625885][T29192] FAULT_INJECTION: forcing a failure. [ 2756.625885][T29192] name failslab, interval 1, probability 0, space 0, times 0 [ 2756.639321][T29192] CPU: 0 PID: 29192 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2756.649516][T29192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2756.659555][T29192] Call Trace: [ 2756.662824][T29192] dump_stack+0x14a/0x1ce [ 2756.667131][T29192] ? devkmsg_release+0x11c/0x11c [ 2756.672046][T29192] ? inet_sendpage+0xd7/0x130 [ 2756.676690][T29192] ? show_regs_print_info+0x12/0x12 [ 2756.681872][T29192] should_fail+0x6fb/0x860 [ 2756.686255][T29192] ? setup_fault_attr+0x3d0/0x3d0 [ 2756.691249][T29192] ? dst_alloc+0x137/0x4f0 [ 2756.695633][T29192] should_failslab+0x5/0x20 [ 2756.700106][T29192] kmem_cache_alloc+0x36/0x260 [ 2756.704838][T29192] dst_alloc+0x137/0x4f0 [ 2756.709064][T29192] rt_dst_clone+0x53/0x670 [ 2756.713450][T29192] ip_mc_finish_output+0xad/0x3a0 [ 2756.718456][T29192] ip_mc_output+0x3fb/0x9f0 [ 2756.722944][T29192] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2756.728383][T29192] ? nf_hook_slow+0x1a6/0x1f0 [ 2756.733070][T29192] ? ip_mc_output+0x9f0/0x9f0 [ 2756.737720][T29192] ? ip_send_check+0xd0/0xd0 [ 2756.742283][T29192] ? __ip_local_out+0x470/0x470 [ 2756.747177][T29192] ? inet_rtm_getroute+0x2590/0x2590 [ 2756.752452][T29192] ? csum_partial+0x379/0x470 [ 2756.757097][T29192] ? siphash_3u32+0x22/0x240 [ 2756.761691][T29192] ? csum_partial+0x379/0x470 [ 2756.766360][T29192] ip_send_skb+0xaa/0x140 [ 2756.770711][T29192] udp_send_skb+0x8e9/0x1100 [ 2756.775274][T29192] udp_sendpage+0x2f2/0x5c0 [ 2756.779747][T29192] ? udplite_getfrag+0x70/0x70 [ 2756.784478][T29192] ? mutex_lock+0xa6/0x110 [ 2756.788864][T29192] ? inet_send_prepare+0x1b7/0x470 [ 2756.793944][T29192] ? udplite_getfrag+0x70/0x70 [ 2756.798721][T29192] inet_sendpage+0xd7/0x130 [ 2756.803195][T29192] ? inet_sendmsg+0xc0/0xc0 [ 2756.807667][T29192] sock_sendpage+0xd0/0x120 [ 2756.812140][T29192] pipe_to_sendpage+0x23b/0x300 [ 2756.816960][T29192] ? sock_fasync+0xf0/0xf0 [ 2756.821344][T29192] ? generic_splice_sendpage+0x210/0x210 [ 2756.826955][T29192] __splice_from_pipe+0x2d3/0x870 [ 2756.831956][T29192] ? generic_splice_sendpage+0x210/0x210 [ 2756.837561][T29192] generic_splice_sendpage+0x184/0x210 [ 2756.842995][T29192] ? iter_file_splice_write+0xf60/0xf60 [ 2756.848513][T29192] ? security_file_permission+0x128/0x300 [ 2756.854201][T29192] ? iter_file_splice_write+0xf60/0xf60 [ 2756.859716][T29192] __se_sys_splice+0x7ee/0x1b70 [ 2756.864539][T29192] ? fput_many+0x42/0x1a0 [ 2756.868850][T29192] ? ksys_write+0x25d/0x2c0 [ 2756.873321][T29192] ? file_open_root+0x450/0x450 [ 2756.878139][T29192] ? __x64_sys_splice+0xf0/0xf0 [ 2756.883001][T29192] ? __x64_sys_splice+0x1d/0xf0 [ 2756.887821][T29192] do_syscall_64+0xcb/0x150 [ 2756.892296][T29192] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2756.898163][T29192] RIP: 0033:0x45ca59 [ 2756.902028][T29192] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2756.921607][T29192] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2756.929987][T29192] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2756.937932][T29192] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2756.945914][T29192] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 15:27:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_int(r6, 0x0, 0x1, &(0x7f0000000180)=0x9, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, r4, 0x4}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2756.953858][T29192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2756.961816][T29192] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5]}) 15:27:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x3, &(0x7f0000000400)=[{&(0x7f0000000140)="0e3e6a53c26e5f6de991a38f65bf562f3ae6b85ce2ec4cf95d4dd83259243be780fd9fc8ffa185996db173a11831e7fb1e17773d42cf48b9eccbc397150a1ed6239dfd5542e0bee6375f07dc0d952aa74300237d0f2a95afb70a2e031ca9700c49fd0e9bef078d271905c9fbb77a56e55bc05a38a546bb6d5792542594df748bdfa475f3f37b7251e2bbe589e5501145f5c5360906f3ccb53e3020257d387d947f744e312b2a6fdc10374647e7618883d3340209849b3ea11c3bedaf4b0c0c937749fbf5c61769bb0c2a0fa27fee2e17b43ff3ed13a3ffa571803c1997f5af18ccff25024dc4dbb2ce", 0xe9, 0x4}, {&(0x7f0000000300)="b9bee395dfa2a3bbf85b8de5c9b3c3e739285d966a9c9874c9f11ad7474691fcb7ea0a019b55620a86add096c097ba0ef56e8983a26b48c479b4bcb5594804f90fb4a95cbc398f25524034527eb6fc5b43f990c80bb178e3e5f54cca", 0x5c}, {&(0x7f0000000380)="2507a39049fae86cd240d528db64518a6d582f70081b6a0b6aa8d423a6a1d3dad37445689b2d7470d952060c1d61c6dd66e0db392f3c743e7cb8a5b010ba2a62c825dd98081b80e8837510d8a22ae288e0560ee89d711cc4c55523908aea1dad0eaad819d3dc1bd1e6c73bae73e968de6824121a173d", 0x76, 0x79b}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:29 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="d2d323a6e4ef44720ac14b86a64b60782c54882d6228da879d9f107e856c6fff4efdbb7683d4c58355ea6656488d267ce5ebe0f1a5a39c0a61a29d4e903d0ca3b648323c32066db998865043c810184b1f6422a8bae471945f51ddae15c6a446923558db029dcf8cf8976ae301010000000000009daab1f849594b8bf34676ea8851b022e4e5a22f9dc445f77561f24022f526c3366d6a0194120563399b4d8b59c6d45680a160a0fe0d2fae4fa550f3d5d500c428fea77c038a34671120bfc2d29d5ef19c10447213902d9562f6979065d875fd86267f33cc93f9bf21f339fddfb0e02ec795b3a0b6c1df8017d0e10e36783fbbb598e527d95ccdeb29a93ec036aa04f8a0649c52d6e4b134c2e4b196fd90ff5a0a18a7d9acced339a6af06687236b478", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xaa7f1cf92c53c321}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x73f}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8, 0x1, r5}, {0x8, 0x1, r7}, {0x8, 0x1, r9}, {0x8, 0x1, r11}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x92}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) [ 2757.035954][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2757.045276][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2757.123730][T29219] FAT-fs (loop4): invalid media value (0x9c) [ 2757.130080][T29219] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x44004, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0xf}, @sack_perm, @window={0x3, 0x20}, @sack_perm, @window={0x3, 0x8, 0xa3}, @mss={0x2, 0x80000000}, @sack_perm, @timestamp], 0x8) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKIOOPT(r4, 0x1279, &(0x7f0000000040)) fcntl$setsig(r1, 0xa, 0xd) [ 2757.207377][T29219] FAT-fs (loop4): invalid media value (0x9c) [ 2757.213389][T29219] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:29 executing program 0 (fault-call:11 fault-nth:45): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2757.492555][T29242] FAULT_INJECTION: forcing a failure. [ 2757.492555][T29242] name failslab, interval 1, probability 0, space 0, times 0 [ 2757.505172][T29242] CPU: 1 PID: 29242 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2757.515295][T29242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2757.525334][T29242] Call Trace: [ 2757.528601][T29242] dump_stack+0x14a/0x1ce [ 2757.532918][T29242] ? devkmsg_release+0x11c/0x11c [ 2757.537827][T29242] ? __kmalloc_track_caller+0x201/0x2c0 [ 2757.543343][T29242] ? show_regs_print_info+0x12/0x12 [ 2757.548511][T29242] ? __ip_append_data+0x1fb9/0x3170 [ 2757.553682][T29242] ? udp_sendmsg+0x3ef/0x2f40 [ 2757.558336][T29242] ? memset+0x1f/0x40 [ 2757.562298][T29242] should_fail+0x6fb/0x860 [ 2757.566694][T29242] ? setup_fault_attr+0x3d0/0x3d0 [ 2757.571703][T29242] ? arch_stack_walk+0xb8/0x120 [ 2757.576570][T29242] ? skb_clone+0x1b2/0x370 [ 2757.580958][T29242] should_failslab+0x5/0x20 [ 2757.585436][T29242] kmem_cache_alloc+0x36/0x260 [ 2757.590217][T29242] skb_clone+0x1b2/0x370 [ 2757.594435][T29242] dev_queue_xmit_nit+0x279/0x9e0 [ 2757.599429][T29242] ? validate_xmit_skb+0x630/0xc60 [ 2757.604520][T29242] xmit_one+0x7b/0x460 [ 2757.608563][T29242] dev_hard_start_xmit+0xac/0x1b0 [ 2757.613558][T29242] sch_direct_xmit+0x23b/0x970 [ 2757.618293][T29242] ? nvmem_get_mac_address+0x310/0x310 [ 2757.623723][T29242] ? stack_trace_save+0x123/0x1f0 [ 2757.628721][T29242] __qdisc_run+0x245/0x420 [ 2757.633210][T29242] ? sch_direct_xmit+0x970/0x970 [ 2757.638116][T29242] ? pfifo_fast_enqueue+0x36e/0x580 [ 2757.643283][T29242] __dev_queue_xmit+0x11fa/0x2680 [ 2757.648292][T29242] ? dev_queue_xmit+0x20/0x20 [ 2757.652940][T29242] ? ip_finish_output2+0x936/0x1810 [ 2757.658104][T29242] ip_finish_output2+0xbdf/0x1810 [ 2757.663119][T29242] ? ip_fragment+0x210/0x210 [ 2757.667697][T29242] ? __ip_finish_output+0x4e1/0x6d0 [ 2757.672869][T29242] ip_mc_output+0x8b5/0x9f0 [ 2757.677348][T29242] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2757.682777][T29242] ? nf_hook_slow+0x1a6/0x1f0 [ 2757.687424][T29242] ? ip_mc_output+0x9f0/0x9f0 [ 2757.692078][T29242] ? ip_send_check+0xd0/0xd0 [ 2757.696642][T29242] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2757.701910][T29242] ? inet_rtm_getroute+0x2590/0x2590 [ 2757.707182][T29242] ? csum_partial+0x379/0x470 [ 2757.711837][T29242] ? siphash_3u32+0x22/0x240 [ 2757.716421][T29242] ? csum_partial+0x379/0x470 [ 2757.721073][T29242] ip_send_skb+0xaa/0x140 [ 2757.725381][T29242] udp_send_skb+0x8e9/0x1100 [ 2757.729949][T29242] udp_sendpage+0x2f2/0x5c0 [ 2757.734482][T29242] ? udplite_getfrag+0x70/0x70 [ 2757.739221][T29242] ? mutex_lock+0xa6/0x110 [ 2757.743656][T29242] ? inet_send_prepare+0x1b7/0x470 [ 2757.748794][T29242] ? udplite_getfrag+0x70/0x70 [ 2757.753535][T29242] inet_sendpage+0xd7/0x130 [ 2757.758024][T29242] ? inet_sendmsg+0xc0/0xc0 [ 2757.762549][T29242] sock_sendpage+0xd0/0x120 [ 2757.767023][T29242] pipe_to_sendpage+0x23b/0x300 [ 2757.771845][T29242] ? sock_fasync+0xf0/0xf0 [ 2757.776231][T29242] ? generic_splice_sendpage+0x210/0x210 [ 2757.781889][T29242] __splice_from_pipe+0x2d3/0x870 [ 2757.786937][T29242] ? generic_splice_sendpage+0x210/0x210 [ 2757.792576][T29242] generic_splice_sendpage+0x184/0x210 [ 2757.798050][T29242] ? iter_file_splice_write+0xf60/0xf60 [ 2757.803571][T29242] ? security_file_permission+0x128/0x300 [ 2757.809271][T29242] ? iter_file_splice_write+0xf60/0xf60 [ 2757.814783][T29242] __se_sys_splice+0x7ee/0x1b70 [ 2757.819608][T29242] ? fput_many+0x42/0x1a0 [ 2757.823907][T29242] ? ksys_write+0x25d/0x2c0 [ 2757.828380][T29242] ? file_open_root+0x450/0x450 [ 2757.833200][T29242] ? __x64_sys_splice+0xf0/0xf0 [ 2757.838032][T29242] ? __x64_sys_splice+0x1d/0xf0 [ 2757.842857][T29242] do_syscall_64+0xcb/0x150 [ 2757.847389][T29242] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2757.853306][T29242] RIP: 0033:0x45ca59 [ 2757.857175][T29242] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2757.876765][T29242] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2757.885147][T29242] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2757.893088][T29242] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2757.901074][T29242] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2757.909117][T29242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2757.917060][T29242] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f00000018c0)={'nat\x00', 0xcd, "acf15082ea7fd6bd6e5757c0892b668b4a8e79ba451975758bc3fb04d5bf3d91aa4be8e90d9ac65eace4a1e2a4768c87f50824d149abdaa908944ebc14cdf23f7f07c554bb16f517f24e1bfdb85fa746627c9882d9c48e9270413f1651575865541b6921133c1628ef0fb12e8914c8bbe47be7286ac6edc8f549e02723618c99b1708d0b6da1e4b17dbba9f88ba216ec7e66200ff5d35703abe2f2dc70c6404e5eac39e8aef5833c9476383a58c027e771ee9f6bc89a0108753cae7335653e4e7972eaf4ded933cfc2be6db686"}, &(0x7f00000019c0)=0xf1) r4 = add_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)="f5ff778430cbba7df97b28250b33a433ac7553151cde4c08211ad7c19bd85e2f05443e9446a3e65ca181ae6230e862e45cec4867ab3cf83706e5f01660eded1b7cb99d0f8c802efb8df21a6ebc4df32472ecc7de0b13f365f8d2dad592f13533d85fa8c3017bbce037473dd666b67d493a758e475228d1c36fa074606ce1f7dc3d46a657d4711e835ba495251fcca7fdc6517e5c52dc43ad66fc0b20af5c3ca0e52815132bb811fb203a0d1d8f0d1917a08dc635d29e219e25", 0xb9, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r5, r6, r7, 0x0) r8 = add_key$keyring(&(0x7f0000001840)='keyring\x00', &(0x7f0000001880)={'syz', 0x0}, 0x0, 0x0, r7) keyctl$instantiate_iov(0x14, r4, &(0x7f0000001780)=[{&(0x7f0000000300)="cb22fb09ac8eae9ad57ca46f3dd17556fbf9ba98dc5ad2270c14503ba2030757f50e76033119da39", 0x28}, {&(0x7f0000000340)="f677e817ca6a295d9a9635219cac3506a2cf93e710a7f79566a71b9bfaeb48a4ad69400b8317a714b572bf9392e0175db4d52b64812cd11d40f535bdd6660d599a499d39eead12a30b5fee458914fec1330e6c3ac7c465fadbcde68794d258487a00466d61f7c5a88b92f88eb2e3863f0efcb93259dbc3fefe6694273ce0199e06ca99f762d1f6e94564dab2859ae06a3aff94bd924062dd7b202bda0485bf212b2ebbfca3b2186aae4c66550e0905c1f4c75474", 0xb4}, {&(0x7f0000000400)="815419dc2213c43fa6378951fb56e95394754daaa7654d00163481acf86f09f544c27200ad99809d5f0b583f6de82ed7405dcf89f58f760face0e37b4d2dfbab0a74c33e22f805a51d6cbc8b86", 0x4d}, {&(0x7f0000000480)="b1a0e5b9f93048755526003cae6ceefbb348b84343cb74c608e335a079ae4c566a7ecf8683c00000000000000000983b907b0c277ac52736317b6b1bdc7d32f9f83027630d375b3c5ec4799773e3d7f977ae028bbe6a5870876cb995905e29280391df8930b3fd91123d7977cb9d2cb143a107bb1d99e587baec8450ce4e4427cb1f183d55c3153e49a44a082e3d06b8528ac6133ce36efcc4c72647fb68cf3999e36011423af172da9ee5cccb8823e114f8a066d5125cfd2934e08f32809704b27926f3b2b404fa737e973115fc", 0xce}, {&(0x7f0000000580)="ccbd8a800e1bca4950a90ff34b98dbb9b362e6601a7b77799c51ff9642594c5b9b0165af155b1d0c733262d8a00a3f597071ce5f", 0x34}, {&(0x7f00000005c0)="450295d29fb23578c9d1dbf2d6893e618cf5b4da71800b0f9ad923dd7e798f53a9d77754c845d1475f160d7e21593cb1759db3b8a1ab1f52d36dd5df4f86d97772", 0x41}, {&(0x7f0000000640)="72d18ca8fc294a019c9aef1032d6ad9161de0d35940de323276ba05e125600a1a63855be8eabad77831cfca23f7c7d85fae3454167b5619a4dfdb1433c9018e8d2fb205568c154d614bbd06ed9924184f7db50aac3b1790c9d50e13030d333610fbfcdc91566c9e8a514933aeddae5522dc24ecc6da6f02f19b8989b0b26ee12e80e439502180d4e3092cda3003e188e94e7f3bbeb98a66f101bef860449e567a233ad7557d9df3debe6d99ca2a8584ea2495ac4fba8025773b91a1d11d4c7a6e6e9ed8b93734d93e22412fb79cf5490298805caee167b8258248954960da1ac497b7650d10cd9d077fe17ef5e0216e43df71d11a42fa0020d9769e891591900e59c562ac697acf8d8542bf7e32f6005efda9f3d49e2e24332e40f443645125bfe4fd9c07e4c5127ef9c32a842d0f77950f28fbf3d5e31313790235c8382c72dab931ed6bd74dddc5f7434e2bfa7abf46604f418868f24610e70f72f325229b568ced4c758c53d3877f5c1689de969c4bf38e7d15af0f0fa9ca2a6a5776751b0f05a74926d74610ec9ff4053889076bd6120350eb51b56631245d116474b4746cc9a9f4646b1abe3527f18b34d2b90e0cf716c4659b8ea2177dc59b33b887524d7c52a6fbc9c0ed769d0b64352f163fa267ded9f05ba670047e61e867a1001698dfb2e3996aca1fc9173efd3a5401d94f7e2562f0434f23aebf275918bb001ad27974378aca694501769b4765bc3bbf1a1f0dcb09a38650bcb2d9671f97901ffb72553690e24d4b9cd70469c3aea2083db095f7399a129d0a17ff0dc80b925c0bf213aeed64add528a744198fa373a68d8cbe5f24393532c6339eca6b63e1a1ec6f2acf041d091c1fcfe802a05dfe48b93750469d43ce965a41754d3bf9d8b0ffc15f7767c086874179944e521f5ec4c93369bdb48cf0faf0b7a437ce3a07948b881759ed00af26b1ee3b3aaa989cf3e211c4562f8c0be483434b04887818da0a09d3b81ad23a08f350a16468e20dba2e726919715adcb2890026cc26a40044c086a13f0b813089793158a1fc4929f965080b619d23c1bb21780faf41c8aa7bfc8a458ad09e471dd20c48e1839e3ffa3f6815b3e20affd08093187c64a236aa1da8e7b6f23e8cb4830de290f414d092b88bdef42808aa72cdd56c5dcaadc976afe525a307f7372a0ceb86e4ede979e63b7dc32df1e774debeaf35cd3f1133820052ff5ac89ef8c2b808f30d0d516440af96630f6d32414c4a60b43b770183be2db6c3582b52664d802d6bf96a4b617db028bd534d5ad399f043af6c867e92398dfb10c594f25ab6e243f5c02238e95df4cac9afc2ef46c00db1613e6fdd33e370df6e39d2735f9353ef59d4d31f0454dd8886e96729d1d3d32dbb08eade0d0cbfd5bb8ff0c77bb9427d055f452e0fe666c3e79c80b0f761bdd642bd16a0bd96b31efc6fdcb7d206e322f34471fac6a773135ebb165f305e8ba7a78caa1af07d66821f118da2f8766d9c075d9b8ae1e911fc82e81298ae8132e4f64a32043b79626b6f685ee228738a0cd296a1dc7718f4c55825e6472ae5d93444af9ffdf45c5fafa55df85b2c764559e6ab897ad04d910e1df90e4eefb575916002a49d716fb2f4cd03e1aa7dde135eca87da2909b16ec3ae0cf23dff60557f2b24050ca76d6fc3d7aab7fb200c41346d3f0ffa151fc63c5a350eca3520ea810e613413ead5bd2f99ddcccbfb568fe5c4018c6e15fd1ac115fb8d9119b9e4c92c85deabc004162cfffea9eda1135d677c1d184992c6301983700ce1b27c60e6a4d3895cb29b6e7e2dd49d2fd7a95fe910fd55b3949fa877652bfbd89c554a3e278bbc8ad4d0b146cb798d506833bf3d1c006ea7c51effcfab806c5a55717684583e01abcfb26fb32b8e79532227b28b96e2836bfd90717dccfc8c20ad59eb89ac145f4c4873934a4038b42d650cf22215d84ddfe823b475639768f82bbd196dc64b4dc014fdf678c500378b0362b358226427852029eb81f8f50c9c1d4bb37fac9525939fa9a69466b60439580c5bec54190d8ee2d2db32f1c9822cc9deab87019c50437c1562b59712c3f78ced39dd9e1bc2a8548a6c102ef7000e1845b744113b03101c43b3ee29315de3ee99d740c296d14029802cd3704d498d77a166fcc3f28baa7320c150ef287267a8a4b066b6d71c72aab766381de0b3e3efd56ab11770ca9997156f16b137af4b7be04494130a9ab0efa259383022936f343b517a3606de6bb484e4ab5f9c57e803a7ee8bd39d6c11922676574fbc3f70c4dffe0548ad8340f2b0bf7deda9b46e37908ceede2e1f25f3bb86e1f56697e48be0b499aecff33e5d5ea5d386e13a616e994910cb61d63fa926fa7960d7a8e60c3657a992646862fe92854afa57d7350fa74896164e61acbc847f0eba5cfd3f1f3130a08bf40701db42828080ea14bea31f2892228b1720911d2380be9561b3bd028e99e032a93418178f391410a18dec3b9481cbeb540cd18b1751fb1b7f4d543418f274c7a378bd8943f47e28387989b8d5c42bd3fca0ca395d1b85ede2a7888325ced7faeaf74857e6f015eabcbf3a7fcb2eb2a3dee086b1d685123ed8b8f550a96129f1b66ab4f5cf5926da00447281a2dd875e407131e4ae782b5c7e0a54748e935f6cea2eacf0a4a42bdcdc171a14c90ef2ae5127e0ab381499d97240c371dea46a8aa8e3f6b502426b82c6f0284b2dd09a1d67b85d4d2e4163f34b9fd2e52d915ecd1d95e218da15f7ea3acb0dceb1fe9c25c065f3701052478678848efb30f4aa659aaa104fcecf376e7a523c01535688c9c3ff259fb7e617f9e2407bbc8cfeed605b3c2e8795e880e6106526705aa10e17b7d96df399782e20acbed9afbb3116f18ef3b6881f8e07ff44c749a0207d0b8256865b98bc45ce00550258353fe7607c1778c62ceee42e59e57f94b260b3da9aa33f81b47805f725e8d4f4f1b3dc69c5c3eb243aa00fb66022b752dca17c080b31dfeae1d93fa6706787f5e97e76c01308b391f3358da09dc416af04eb456a7bdf84d60338c294dfb0cbec84c5e08fcd37f83d5fc1e95c4924fe310815e1bf053b88865fed3274fee1fb3b89b553d778891c4d41f87dddbbdb4f37c171013ebadeafcc686029c2375aff9b0bc40a9c1f76c316a2fdfdfbfbe4b0151bda0f12c98b9e65a731c435df530642f0ab02167bf8214dcb633ed7525b50d9b4dd4860b39ff4531900f6c029dc2c9b8e19fd05767ab66be33e93c00565bc662235c18f789e3b782586c9db052e64088a50ac61028421c8de194d3fd2bef82180c7527277aca885e9bdad79801da272135c50f673cebb4700fd9c1698b3d51089837fc7bdd295763b9c9b2b25bd76fb6bcf2643ab83ef593ed65767eef9f130dbadaa4accc3c2ecff0ecb7b83454ca9d4d3b330456327ecbd035ead419efb3bb7a388946eadbeba13d4d42834f22a4eea794fd3657ff08e55b9141c8543548cee574ca217e9bb00ebba13da5bb62fc3c654d06e28d98ba0710c9bf6ae4e7504640ac6a8fd37576e4ec787d77e4ca821f3c04489cbad824377f99d46fcdf7b4160c1351f8e34456e6c1cd73212f22e35f7562c157e49820d3d3f08d0faf4d9eb5d7cb622d5dc7e268c45861a4889f4b79716e0372a22ae8b46e4ce3855676a755bd0d9763501b9c180c4313712132ab4ae7fa4c2cda3cb301bd23e9399f53412dcc45a78be4d2caee0791bccc3578d74cbba9a6156a1891d85b9a49a6ffd07271bd8caa89a31df781574a457cce1422670b31e26624589ffdbe33d255102ea0f1a98ae4de384e4dc64c2fa74962683fcef840d4e5859c1f95a139b444afc44f6e056715b15356ad267955f94740d394e0b55276fbadb8bbe46696ab19e726534af1bbf4c3dadbf8ee933917bb76a3af9da449a83d0f574b7203813d0fc6c8da047e57f49c55433d230aa6e9c28e81b0506c498bda8aa718756e9fa830d6239ffb6f894e6e42e15ea7d5701302bea8fd5bf5818c59998f321147a41820ef8af0081a629a9c2b88845cd0b1a9d8b5baa6b106df7457e564f7534cf9b838262fcef81e6e05862b206e4311292686fb680c23cc9c9c0e364b91fed744921228fbdafba9d4a130f9229be945f94a9c8d4058177c849dd3ccc0abd9162a47716c502c2fdc32595c30adb73ad896ccd32f3850d5b7b9f221c9edbe5da00e993386b370d706f5bcb10edc00d85f53ec0f1c1e7b0b6069a1cdef49ea9b8bf0d3e8e754e04eba5afe4237dc88abd01d4fe06eb2c4a08625c04bf659a7c9237e0e30aa2a5e29d52d8f9219fbf888c046048c316bb681997c8d4c9b5d2998b54c6e3ef8d74f95c5376b0a753ab5d417ac456493d25f0548766bdb06fde86e7095daf8e90fee3e075f1160cf10741e8ac41cfcea72a92c0d62ff557450c003f5a42176d06ad1b2c458d7579c3c4bb920bf1be85b0a8f445bdfc6ea1e4bf442339f38d5d39a1de3ee2fc9fad619b3555639e91bb173754c69ad46435ae1d70936287ea0133496152414e7edee68d8b81c2a9c69a4179b1429295e3499e4ae745ec2cf6b2771651d1b5e44d7f493dbc6ef5cdbceab5e002c81ad0a27ca9fb45b72a9faebdf8e9038980bf345ebe7ca41e5d16ca2fc09bbec809cc0229ad7da46dea3735f0f0ea36d2b6b03f8994420f4f9cac77198eaf8576aaa12142f389099c1748bb45181d9bce9ae2de0a24884a2eeae94ae128cb705e73b3219c2301e1b6bc2c52c8ae61d51c13d3a46b7ffeb7ca88850519c99ad9287b09c20b71a8377a0c8d4e2c5c577288302fe5499b273caaadf67b0f880ba3dfc503261feb5b2ba58c8eff10bfb05ffcda94e08cb7cf3cab247a1f77ed1f512657a896289082bfbfa6f59d9a6a17c8faf044971ccdf3ea7bbdf01345bb9e59cf5986bcd52e6bb24b2d562c299730fb9822faf89540827c09d8548cbd3339432b9b86d7b238592b30b816e03ca865aaa0022dd04496589fa55bd45872c37a50dbd35dfbf0597c0e16c2c43d9f32938981ed9f9f1d05212b3dcab76a3975fe35b261d8ccce558a1c00292fe4e2409c1ff4d275c20f02f11f0edad84a7d2cc8c3a268b7b1d298ce30f93c1977b02f3db715fe67e6af54adcef39baa334df4e87a4768188309f5fc80efab7b8fb7bfbc382c01643b61bafa343bda454064e7b4710a4104e9ab2c24b2817181d5f8747167f74685aa79cb38ac9669e2c82c46b004e7538855406b4eb635f8d408b076d0ffd7276db5872fd26b6c0166c444c50cd89f2ae59bec18ce3334cdc56d29e2c6caaf4ccf008099ea0dbe3cdbdbecc28b76b99491aced5494a5b5fd65b1c65f117826183b24395d7dbe9edf59d1f773fd2c457466538e6216ebf23d35d59bbc24dca21a423ce27dd4fdd0b0996e7f08e3d62c17d0d93d57ec67075ab169e14fc7dffba6bf58060c11f901cdd61a9ad253543ac584e26c0a58b849ae79964366205244519d06704f4cec8e100649485bedf5b0e1f091941d090bb92ac19b24283bcb30f797a2275c053c2d9c22851e574522d2dd22b72eeac4964b84858a687273831bed1f1f0e236653ad7abc72fec3e4cfdbba7811cd8bacff58c2ccab669e2bcc18bb07f3c54f13194ecb0dedc24b40096ad0f979272f675c67f94f83109c378508cf102f27135578d13b48c4e52596a69fa262eeebdbb59f8a3d3bfc9b9d2288514e752e64bc913fca301ced9ed5b047cfdeae63c4cc1d2d55846cf43c1f3cf82c8a0b8321724c82a9f2408b912a15e43638d7276b4e20201b3", 0x1000}, {&(0x7f0000001640)="5b0047c0927107629cfd3f63f6bd77ead1a82f36b727e61806f2752b128ae12b3007cf35658a5c988b49a0e041df6f", 0x2f}, {&(0x7f0000001680)="70c25a25d8d5fec5d63bf525d957bdbe56fe350810d96b54836d66094fb11226dee2d09b45607a16805554d7114c5aa7739f5589f31ca1009d37123df02b7314625ebc3aee1b7dc646f8fc6f27ca22c7afabe439117767b4aa08af2f60aa05f186324314e01f9c1cff2c4ba4ab5ad8e737c0adf0c5b2421639336bd49b47ac51d41c61da8bb4b5bc5e6fa63013149668d8dfd154cecaa24785c097d0568434ba209ebe993c589a362c7389e48cd546fd5876f3d8435939727893ebc48a1b938e7dc130225f79bffb581507f5f6a7e67f4b520f53957b1454bee5cf70", 0xdc}], 0x9, r8) 15:27:31 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x101, 0x4) 15:27:31 executing program 0 (fault-call:11 fault-nth:46): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000140)="95e119753fcb2b723f20b3ff9eb3536d29ff84b788f57421eed922b2361bf88f2c61614343d0e61ce68f718436a9b0a2e03f964288b6d1de", 0x38) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x101000, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r5, 0xa05, 0x0, 0x0, {0x34}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0xa, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvtap0\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fffffff}}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$char_usb(r3, &(0x7f0000000180)=""/216, 0xd8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2759.631472][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2759.640924][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2759.643792][T29264] FAULT_INJECTION: forcing a failure. [ 2759.643792][T29264] name failslab, interval 1, probability 0, space 0, times 0 [ 2759.660394][T29264] CPU: 1 PID: 29264 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2759.670573][T29264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2759.680649][T29264] Call Trace: [ 2759.683943][T29264] dump_stack+0x14a/0x1ce [ 2759.688422][T29264] ? devkmsg_release+0x11c/0x11c [ 2759.694286][T29264] ? inet_sendpage+0xd7/0x130 [ 2759.698935][T29264] ? show_regs_print_info+0x12/0x12 [ 2759.704130][T29264] should_fail+0x6fb/0x860 [ 2759.708537][T29264] ? setup_fault_attr+0x3d0/0x3d0 [ 2759.713543][T29264] ? dst_alloc+0x137/0x4f0 [ 2759.718126][T29264] should_failslab+0x5/0x20 [ 2759.722624][T29264] kmem_cache_alloc+0x36/0x260 [ 2759.727381][T29264] dst_alloc+0x137/0x4f0 [ 2759.731608][T29264] rt_dst_clone+0x53/0x670 [ 2759.736123][T29264] ip_mc_finish_output+0xad/0x3a0 [ 2759.741259][T29264] ip_mc_output+0x3fb/0x9f0 [ 2759.745744][T29264] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2759.751191][T29264] ? nf_hook_slow+0x1a6/0x1f0 [ 2759.755859][T29264] ? ip_mc_output+0x9f0/0x9f0 [ 2759.760509][T29264] ? ip_send_check+0xd0/0xd0 [ 2759.765071][T29264] ? __ip_local_out+0x470/0x470 [ 2759.769928][T29264] ? inet_rtm_getroute+0x2590/0x2590 [ 2759.775294][T29264] ? csum_partial+0x379/0x470 [ 2759.780144][T29264] ? siphash_3u32+0x22/0x240 [ 2759.784815][T29264] ? csum_partial+0x379/0x470 [ 2759.789601][T29264] ip_send_skb+0xaa/0x140 [ 2759.793961][T29264] udp_send_skb+0x8e9/0x1100 [ 2759.798589][T29264] udp_sendpage+0x2f2/0x5c0 [ 2759.803068][T29264] ? udplite_getfrag+0x70/0x70 [ 2759.807805][T29264] ? mutex_lock+0xa6/0x110 [ 2759.812196][T29264] ? inet_send_prepare+0x1b7/0x470 [ 2759.817300][T29264] ? udplite_getfrag+0x70/0x70 [ 2759.822077][T29264] inet_sendpage+0xd7/0x130 [ 2759.826554][T29264] ? inet_sendmsg+0xc0/0xc0 [ 2759.831048][T29264] sock_sendpage+0xd0/0x120 [ 2759.835538][T29264] pipe_to_sendpage+0x23b/0x300 [ 2759.840386][T29264] ? sock_fasync+0xf0/0xf0 [ 2759.844776][T29264] ? generic_splice_sendpage+0x210/0x210 [ 2759.850396][T29264] __splice_from_pipe+0x2d3/0x870 [ 2759.855396][T29264] ? generic_splice_sendpage+0x210/0x210 [ 2759.861002][T29264] generic_splice_sendpage+0x184/0x210 [ 2759.866435][T29264] ? iter_file_splice_write+0xf60/0xf60 [ 2759.871954][T29264] ? security_file_permission+0x128/0x300 [ 2759.877654][T29264] ? iter_file_splice_write+0xf60/0xf60 [ 2759.883175][T29264] __se_sys_splice+0x7ee/0x1b70 [ 2759.888004][T29264] ? fput_many+0x42/0x1a0 [ 2759.892324][T29264] ? ksys_write+0x25d/0x2c0 [ 2759.896816][T29264] ? file_open_root+0x450/0x450 [ 2759.901666][T29264] ? __x64_sys_splice+0xf0/0xf0 [ 2759.906515][T29264] ? __x64_sys_splice+0x1d/0xf0 [ 2759.911439][T29264] do_syscall_64+0xcb/0x150 [ 2759.915974][T29264] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2759.921951][T29264] RIP: 0033:0x45ca59 [ 2759.925908][T29264] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2759.946874][T29264] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2759.955265][T29264] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2759.963214][T29264] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2759.971183][T29264] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2759.979185][T29264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2759.987138][T29264] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:32 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x28) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:32 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:32 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x705e00, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000180)=""/188) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:32 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:32 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) 15:27:32 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) 15:27:32 executing program 0 (fault-call:11 fault-nth:47): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:32 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x51, 0x3, 0x3, 0x1f, 0x2, 0x3e, 0x0, 0x86, 0x38, 0x21d, 0x2, 0x3, 0x20, 0x2, 0x2, 0x9, 0xfffd}, [{0x6474e556, 0x1000, 0x7, 0x9, 0x3f, 0x76, 0x3, 0x1a09}], "39f918d0828d2bb564f66d725eeda7b586d8baf0fe4c20de3e98850505d6a99d97bfa7ddabbc3a594b848044b8763525e15b31076f52c79bc8965ed5aba41100c26d2eee113fcac5bb9588ba2c0a715d044b0865fc016ac9b78081401ab2d3058bc7e0a0e319e421dc35acff9f04202d05723a00cf8b157aa08daa8fe0f2aace5d89ffe301166dc003ae048a258f2c7d7c02b074678184477f1ef4d3c8947149d65b04bf561504f0ccc8d85baccb8cec95d00be743a6f0c76bf282a89052afd664bda2d2f2f640c62fa0768c29b904e866f5250f017fd93e0b132f6cd5f6265d244f2bce3f5c1f76513d0542cd8a0c56045aa1271d51f4", [[], [], [], [], [], [], [], [], [], []]}, 0xb4f) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:32 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x4, @broadcast, 'ipvlan0\x00'}}, 0x71, 0x0}}], 0x2, 0x44000) [ 2760.495446][T29308] FAULT_INJECTION: forcing a failure. [ 2760.495446][T29308] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.508117][T29308] CPU: 1 PID: 29308 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2760.518284][T29308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2760.528327][T29308] Call Trace: [ 2760.531621][T29308] dump_stack+0x14a/0x1ce [ 2760.535948][T29308] ? devkmsg_release+0x11c/0x11c [ 2760.540893][T29308] ? show_regs_print_info+0x12/0x12 [ 2760.546066][T29308] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2760.552028][T29308] should_fail+0x6fb/0x860 [ 2760.556421][T29308] ? setup_fault_attr+0x3d0/0x3d0 [ 2760.561422][T29308] ? sch_direct_xmit+0x23b/0x970 [ 2760.566340][T29308] ? __qdisc_run+0x245/0x420 [ 2760.570927][T29308] ? __dev_queue_xmit+0x11fa/0x2680 [ 2760.576113][T29308] ? ip_finish_output2+0xbdf/0x1810 [ 2760.581292][T29308] ? ip_mc_output+0x8b5/0x9f0 [ 2760.585999][T29308] ? udp_send_skb+0x8e9/0x1100 [ 2760.590746][T29308] ? udp_sendpage+0x2f2/0x5c0 [ 2760.595451][T29308] ? inet_sendpage+0xd7/0x130 [ 2760.600116][T29308] ? sock_sendpage+0xd0/0x120 [ 2760.604771][T29308] ? ___pskb_trim+0x19d/0xfa0 [ 2760.609421][T29308] should_failslab+0x5/0x20 [ 2760.614040][T29308] __kmalloc_track_caller+0x5d/0x2c0 [ 2760.619309][T29308] ? ___pskb_trim+0x19d/0xfa0 [ 2760.623967][T29308] pskb_expand_head+0x10d/0xfb0 [ 2760.628892][T29308] ? memcpy+0x38/0x50 [ 2760.632851][T29308] ___pskb_trim+0x19d/0xfa0 [ 2760.637331][T29308] sk_filter_trim_cap+0x2bc/0x420 [ 2760.642347][T29308] sock_queue_rcv_skb+0x1f/0x50 [ 2760.647227][T29308] packet_rcv_spkt+0x36b/0x490 [ 2760.651970][T29308] ? packet_rcv+0x1410/0x1410 [ 2760.656626][T29308] dev_queue_xmit_nit+0x36c/0x9e0 [ 2760.661861][T29308] xmit_one+0x7b/0x460 [ 2760.665914][T29308] dev_hard_start_xmit+0xac/0x1b0 [ 2760.671064][T29308] sch_direct_xmit+0x23b/0x970 [ 2760.675857][T29308] ? nvmem_get_mac_address+0x310/0x310 [ 2760.681390][T29308] ? stack_trace_save+0x123/0x1f0 [ 2760.686400][T29308] __qdisc_run+0x245/0x420 [ 2760.690795][T29308] ? sch_direct_xmit+0x970/0x970 [ 2760.695718][T29308] ? pfifo_fast_enqueue+0x36e/0x580 [ 2760.700914][T29308] __dev_queue_xmit+0x11fa/0x2680 [ 2760.705948][T29308] ? dev_queue_xmit+0x20/0x20 [ 2760.710623][T29308] ? ip_finish_output2+0x936/0x1810 [ 2760.715804][T29308] ip_finish_output2+0xbdf/0x1810 [ 2760.721327][T29308] ? ip_fragment+0x210/0x210 [ 2760.725892][T29308] ? __ip_finish_output+0x4e1/0x6d0 [ 2760.731075][T29308] ip_mc_output+0x8b5/0x9f0 [ 2760.735638][T29308] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2760.741093][T29308] ? nf_hook_slow+0x1a6/0x1f0 [ 2760.745842][T29308] ? ip_mc_output+0x9f0/0x9f0 [ 2760.751032][T29308] ? ip_send_check+0xd0/0xd0 [ 2760.755688][T29308] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2760.760963][T29308] ? inet_rtm_getroute+0x2590/0x2590 [ 2760.766232][T29308] ? csum_partial+0x379/0x470 [ 2760.770976][T29308] ? siphash_3u32+0x22/0x240 [ 2760.775638][T29308] ? csum_partial+0x379/0x470 [ 2760.781463][T29308] ip_send_skb+0xaa/0x140 [ 2760.785791][T29308] udp_send_skb+0x8e9/0x1100 [ 2760.790384][T29308] udp_sendpage+0x2f2/0x5c0 [ 2760.794871][T29308] ? udplite_getfrag+0x70/0x70 [ 2760.799614][T29308] ? mutex_lock+0xa6/0x110 [ 2760.804022][T29308] ? inet_send_prepare+0x1b7/0x470 [ 2760.809108][T29308] ? udplite_getfrag+0x70/0x70 [ 2760.813846][T29308] inet_sendpage+0xd7/0x130 [ 2760.818340][T29308] ? inet_sendmsg+0xc0/0xc0 [ 2760.822828][T29308] sock_sendpage+0xd0/0x120 [ 2760.827487][T29308] pipe_to_sendpage+0x23b/0x300 [ 2760.832326][T29308] ? sock_fasync+0xf0/0xf0 [ 2760.836916][T29308] ? generic_splice_sendpage+0x210/0x210 [ 2760.842526][T29308] __splice_from_pipe+0x2d3/0x870 [ 2760.847899][T29308] ? generic_splice_sendpage+0x210/0x210 [ 2760.853521][T29308] generic_splice_sendpage+0x184/0x210 [ 2760.858980][T29308] ? iter_file_splice_write+0xf60/0xf60 [ 2760.864538][T29308] ? security_file_permission+0x128/0x300 [ 2760.870259][T29308] ? iter_file_splice_write+0xf60/0xf60 [ 2760.875918][T29308] __se_sys_splice+0x7ee/0x1b70 [ 2760.880787][T29308] ? fput_many+0x42/0x1a0 [ 2760.885266][T29308] ? ksys_write+0x25d/0x2c0 [ 2760.889746][T29308] ? file_open_root+0x450/0x450 [ 2760.894593][T29308] ? __x64_sys_splice+0xf0/0xf0 [ 2760.899592][T29308] ? __x64_sys_splice+0x1d/0xf0 [ 2760.904430][T29308] do_syscall_64+0xcb/0x150 [ 2760.908921][T29308] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2760.914817][T29308] RIP: 0033:0x45ca59 [ 2760.918715][T29308] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2760.938515][T29308] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2760.946917][T29308] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2760.954873][T29308] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2760.962838][T29308] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2760.972524][T29308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2760.980738][T29308] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2760.999679][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2761.015732][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x7fff, 0x100000001, 0x10000}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x40040) 15:27:34 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETLINK(r2, 0x400454cd, 0x310) 15:27:34 executing program 0 (fault-call:11 fault-nth:48): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:34 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x7, 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x880) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, &(0x7f0000000180)=0xc) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8, 0x8000) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000280)=0x3, 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, @can={0x1d, r3}, @rc={0x1f, @none, 0xff}, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0xfffffffffffffff8, 0x1}) 15:27:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01790270fff8", 0x16}], 0x1880000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setgid(0x0) r1 = socket(0x10, 0x2, 0x80) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setgid(r2) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r3) socket(0x23, 0x2, 0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) setgid(r4) getgid() r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) gettid() setgid(r6) fchdir(r0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2762.686710][T29335] FAULT_INJECTION: forcing a failure. [ 2762.686710][T29335] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.699387][T29335] CPU: 0 PID: 29335 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2762.709572][T29335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2762.719607][T29335] Call Trace: [ 2762.722892][T29335] dump_stack+0x14a/0x1ce [ 2762.727207][T29335] ? devkmsg_release+0x11c/0x11c [ 2762.732124][T29335] ? show_regs_print_info+0x12/0x12 [ 2762.737307][T29335] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2762.743303][T29335] should_fail+0x6fb/0x860 [ 2762.747718][T29335] ? setup_fault_attr+0x3d0/0x3d0 [ 2762.752738][T29335] ? sch_direct_xmit+0x23b/0x970 [ 2762.757796][T29335] ? __qdisc_run+0x245/0x420 [ 2762.762382][T29335] ? __dev_queue_xmit+0x11fa/0x2680 [ 2762.767572][T29335] ? ip_finish_output2+0xbdf/0x1810 [ 2762.772747][T29335] ? ip_mc_output+0x8b5/0x9f0 [ 2762.777402][T29335] ? udp_send_skb+0x8e9/0x1100 [ 2762.782138][T29335] ? udp_sendpage+0x2f2/0x5c0 [ 2762.786792][T29335] ? inet_sendpage+0xd7/0x130 [ 2762.791442][T29335] ? sock_sendpage+0xd0/0x120 [ 2762.796094][T29335] ? ___pskb_trim+0x19d/0xfa0 [ 2762.800762][T29335] should_failslab+0x5/0x20 [ 2762.805256][T29335] __kmalloc_track_caller+0x5d/0x2c0 [ 2762.810520][T29335] ? ___pskb_trim+0x19d/0xfa0 [ 2762.815171][T29335] pskb_expand_head+0x10d/0xfb0 [ 2762.819996][T29335] ? memcpy+0x38/0x50 [ 2762.823959][T29335] ___pskb_trim+0x19d/0xfa0 [ 2762.828564][T29335] sk_filter_trim_cap+0x2bc/0x420 [ 2762.833581][T29335] sock_queue_rcv_skb+0x1f/0x50 [ 2762.838422][T29335] packet_rcv_spkt+0x36b/0x490 [ 2762.843159][T29335] ? packet_rcv+0x1410/0x1410 [ 2762.847813][T29335] dev_queue_xmit_nit+0x36c/0x9e0 [ 2762.852813][T29335] xmit_one+0x7b/0x460 [ 2762.856858][T29335] dev_hard_start_xmit+0xac/0x1b0 [ 2762.861868][T29335] sch_direct_xmit+0x23b/0x970 [ 2762.866616][T29335] ? nvmem_get_mac_address+0x310/0x310 [ 2762.872051][T29335] ? stack_trace_save+0x123/0x1f0 [ 2762.877049][T29335] __qdisc_run+0x245/0x420 [ 2762.881467][T29335] ? sch_direct_xmit+0x970/0x970 [ 2762.886444][T29335] ? pfifo_fast_enqueue+0x36e/0x580 [ 2762.891637][T29335] __dev_queue_xmit+0x11fa/0x2680 [ 2762.896636][T29335] ? dev_queue_xmit+0x20/0x20 [ 2762.901288][T29335] ? ip_finish_output2+0x936/0x1810 [ 2762.906479][T29335] ip_finish_output2+0xbdf/0x1810 [ 2762.911521][T29335] ? ip_fragment+0x210/0x210 [ 2762.916085][T29335] ? __ip_finish_output+0x4e1/0x6d0 [ 2762.921257][T29335] ip_mc_output+0x8b5/0x9f0 [ 2762.925763][T29335] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2762.931196][T29335] ? nf_hook_slow+0x1a6/0x1f0 [ 2762.935852][T29335] ? ip_mc_output+0x9f0/0x9f0 [ 2762.940523][T29335] ? ip_send_check+0xd0/0xd0 [ 2762.945087][T29335] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2762.950342][T29335] ? inet_rtm_getroute+0x2590/0x2590 [ 2762.955605][T29335] ? csum_partial+0x379/0x470 [ 2762.960260][T29335] ? siphash_3u32+0x22/0x240 [ 2762.964834][T29335] ? csum_partial+0x379/0x470 [ 2762.969484][T29335] ip_send_skb+0xaa/0x140 [ 2762.973802][T29335] udp_send_skb+0x8e9/0x1100 [ 2762.978375][T29335] udp_sendpage+0x2f2/0x5c0 [ 2762.982853][T29335] ? udplite_getfrag+0x70/0x70 [ 2762.987605][T29335] ? mutex_lock+0xa6/0x110 [ 2762.991995][T29335] ? inet_send_prepare+0x1b7/0x470 [ 2762.997081][T29335] ? udplite_getfrag+0x70/0x70 [ 2763.001815][T29335] inet_sendpage+0xd7/0x130 [ 2763.006294][T29335] ? inet_sendmsg+0xc0/0xc0 [ 2763.010782][T29335] sock_sendpage+0xd0/0x120 [ 2763.015352][T29335] pipe_to_sendpage+0x23b/0x300 [ 2763.020195][T29335] ? sock_fasync+0xf0/0xf0 [ 2763.024588][T29335] ? generic_splice_sendpage+0x210/0x210 [ 2763.030352][T29335] __splice_from_pipe+0x2d3/0x870 [ 2763.035361][T29335] ? generic_splice_sendpage+0x210/0x210 [ 2763.040969][T29335] generic_splice_sendpage+0x184/0x210 [ 2763.046410][T29335] ? iter_file_splice_write+0xf60/0xf60 [ 2763.051947][T29335] ? security_file_permission+0x128/0x300 [ 2763.057636][T29335] ? iter_file_splice_write+0xf60/0xf60 [ 2763.063155][T29335] __se_sys_splice+0x7ee/0x1b70 [ 2763.067993][T29335] ? fput_many+0x42/0x1a0 [ 2763.072302][T29335] ? ksys_write+0x25d/0x2c0 [ 2763.076777][T29335] ? file_open_root+0x450/0x450 [ 2763.081604][T29335] ? __x64_sys_splice+0xf0/0xf0 [ 2763.086430][T29335] ? __x64_sys_splice+0x1d/0xf0 [ 2763.091264][T29335] do_syscall_64+0xcb/0x150 [ 2763.095742][T29335] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2763.101617][T29335] RIP: 0033:0x45ca59 [ 2763.105486][T29335] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2763.125070][T29335] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 15:27:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x20, r4, 0xa05, 0x0, 0x0, {0x34}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0xa, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x80}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @local}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfbff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffff}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) [ 2763.133462][T29335] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2763.141424][T29335] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2763.149552][T29335] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2763.157504][T29335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2763.165457][T29335] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:35 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 15:27:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair(0x2d, 0x80000, 0xffffffff, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000bff000/0x400000)=nil, 0x400000}, &(0x7f0000000180)=0x10) 15:27:35 executing program 3: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RATTACH(r1, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x40, 0x1, 0x5}}, 0x14) capset(&(0x7f0000000180)={0x19980330}, &(0x7f00000001c0)={0x8, 0x8, 0x1, 0x6, 0x81, 0x6}) sendmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:35 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000180)=0xc) 15:27:35 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:35 executing program 0 (fault-call:11 fault-nth:49): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:35 executing program 4: socket$netlink(0x10, 0x3, 0xb) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x140890, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000080)={@remote, @initdev, @private}, &(0x7f0000000200)=0xc) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xb) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2763.490621][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2763.504961][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2763.546317][T29376] FAULT_INJECTION: forcing a failure. [ 2763.546317][T29376] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.560220][T29376] CPU: 0 PID: 29376 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2763.570493][T29376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2763.580528][T29376] Call Trace: [ 2763.583797][T29376] dump_stack+0x14a/0x1ce [ 2763.588102][T29376] ? devkmsg_release+0x11c/0x11c [ 2763.593012][T29376] ? __kernel_text_address+0x93/0x110 [ 2763.598362][T29376] ? show_regs_print_info+0x12/0x12 [ 2763.603543][T29376] ? unwind_get_return_address+0x48/0x90 [ 2763.609204][T29376] ? arch_stack_walk+0xd8/0x120 [ 2763.614030][T29376] should_fail+0x6fb/0x860 [ 2763.618422][T29376] ? setup_fault_attr+0x3d0/0x3d0 [ 2763.623423][T29376] ? stack_trace_save+0x123/0x1f0 [ 2763.628427][T29376] ? stack_trace_snprint+0x150/0x150 [ 2763.633696][T29376] ? __alloc_skb+0x88/0x4d0 [ 2763.638181][T29376] should_failslab+0x5/0x20 [ 2763.642782][T29376] kmem_cache_alloc+0x36/0x260 [ 2763.647546][T29376] __alloc_skb+0x88/0x4d0 [ 2763.651850][T29376] ? __kasan_kmalloc+0x189/0x1c0 [ 2763.659782][T29376] alloc_skb_with_frags+0xb1/0x580 [ 2763.664936][T29376] ? sock_sendpage+0xd0/0x120 [ 2763.669593][T29376] ? pipe_to_sendpage+0x23b/0x300 [ 2763.674591][T29376] ? __splice_from_pipe+0x2d3/0x870 [ 2763.679797][T29376] ? generic_splice_sendpage+0x184/0x210 [ 2763.685431][T29376] ? do_syscall_64+0xcb/0x150 [ 2763.690083][T29376] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2763.696127][T29376] sock_alloc_send_pskb+0x87e/0xcc0 [ 2763.701330][T29376] ? sock_kzfree_s+0x50/0x50 [ 2763.705992][T29376] ? rt_set_nexthop+0x48b/0x1140 [ 2763.710908][T29376] __ip_append_data+0x1fb9/0x3170 [ 2763.716059][T29376] ? ip_do_fragment+0x22c0/0x22c0 [ 2763.721113][T29376] ? inet_rtm_getroute+0x2590/0x2590 [ 2763.726388][T29376] ? ip_setup_cork+0x810/0x810 [ 2763.731128][T29376] ? ip_setup_cork+0x46b/0x810 [ 2763.735883][T29376] ? sock_def_destruct+0x10/0x10 [ 2763.740891][T29376] ip_append_data+0x12c/0x1a0 [ 2763.745556][T29376] ? ip_do_fragment+0x22c0/0x22c0 [ 2763.750572][T29376] udp_sendmsg+0x3ef/0x2f40 [ 2763.755062][T29376] ? update_misfit_status+0x5e0/0x5e0 [ 2763.760581][T29376] ? ip_do_fragment+0x22c0/0x22c0 [ 2763.765590][T29376] ? udp_cmsg_send+0x340/0x340 [ 2763.770355][T29376] ? perf_pmu_sched_task+0x370/0x370 [ 2763.775635][T29376] ? find_next_bit+0xf7/0x120 [ 2763.780291][T29376] ? finish_task_switch+0x2be/0x4c0 [ 2763.785486][T29376] udp_sendpage+0x110/0x5c0 [ 2763.790410][T29376] ? udplite_getfrag+0x70/0x70 [ 2763.795167][T29376] ? mutex_lock+0xa6/0x110 [ 2763.799568][T29376] ? inet_send_prepare+0x1b7/0x470 [ 2763.804663][T29376] ? udplite_getfrag+0x70/0x70 [ 2763.809407][T29376] inet_sendpage+0xd7/0x130 [ 2763.813888][T29376] ? inet_sendmsg+0xc0/0xc0 [ 2763.818375][T29376] sock_sendpage+0xd0/0x120 [ 2763.822865][T29376] pipe_to_sendpage+0x23b/0x300 [ 2763.827697][T29376] ? sock_fasync+0xf0/0xf0 [ 2763.832094][T29376] ? generic_splice_sendpage+0x210/0x210 [ 2763.837712][T29376] __splice_from_pipe+0x2d3/0x870 [ 2763.842715][T29376] ? generic_splice_sendpage+0x210/0x210 [ 2763.848323][T29376] generic_splice_sendpage+0x184/0x210 [ 2763.853764][T29376] ? iter_file_splice_write+0xf60/0xf60 [ 2763.859296][T29376] ? security_file_permission+0x128/0x300 [ 2763.865003][T29376] ? iter_file_splice_write+0xf60/0xf60 [ 2763.870527][T29376] __se_sys_splice+0x7ee/0x1b70 [ 2763.875359][T29376] ? fput_many+0x42/0x1a0 [ 2763.879673][T29376] ? ksys_write+0x25d/0x2c0 [ 2763.884156][T29376] ? file_open_root+0x450/0x450 [ 2763.888989][T29376] ? __x64_sys_splice+0xf0/0xf0 [ 2763.893823][T29376] ? __x64_sys_splice+0x1d/0xf0 [ 2763.898689][T29376] do_syscall_64+0xcb/0x150 [ 2763.903182][T29376] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2763.909071][T29376] RIP: 0033:0x45ca59 [ 2763.912942][T29376] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2763.932524][T29376] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2763.940924][T29376] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2763.948889][T29376] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2763.956850][T29376] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2763.964797][T29376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2763.972764][T29376] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x7, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x25, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c00000024001d0500"/20, @ANYRES32=r2, @ANYBLOB="00000000f1ffffff0000000014000100706669666f5f686561645f64726f7000080002"], 0x6c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RUNLINKAT(r8, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) getsockname(r6, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:36 executing program 0 (fault-call:11 fault-nth:50): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2764.303236][T29399] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 15:27:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14010000", @ANYRES16=r5, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40840}, 0x40010) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000340)=r6, 0x1) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@ll={0x11, 0x4, 0x0, 0x1, 0x9, 0x6, @random="3281e0514e77"}, 0x80, 0x0}}, {{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x4, 0x4, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff75}}], 0x2, 0x0) [ 2764.388031][T29399] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2764.403116][T29412] FAULT_INJECTION: forcing a failure. [ 2764.403116][T29412] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.416200][T29412] CPU: 0 PID: 29412 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2764.426342][T29412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2764.436373][T29412] Call Trace: [ 2764.439646][T29412] dump_stack+0x14a/0x1ce [ 2764.443977][T29412] ? devkmsg_release+0x11c/0x11c [ 2764.448905][T29412] ? show_regs_print_info+0x12/0x12 [ 2764.454106][T29412] should_fail+0x6fb/0x860 [ 2764.458509][T29412] ? setup_fault_attr+0x3d0/0x3d0 [ 2764.463532][T29412] ? alloc_skb_with_frags+0xb1/0x580 [ 2764.468792][T29412] should_failslab+0x5/0x20 [ 2764.473272][T29412] __kmalloc_track_caller+0x5d/0x2c0 [ 2764.478533][T29412] ? kmem_cache_alloc+0x1d5/0x260 [ 2764.483534][T29412] ? alloc_skb_with_frags+0xb1/0x580 [ 2764.488790][T29412] __alloc_skb+0xd1/0x4d0 [ 2764.493146][T29412] ? __kasan_kmalloc+0x189/0x1c0 [ 2764.498067][T29412] alloc_skb_with_frags+0xb1/0x580 [ 2764.503169][T29412] ? sock_sendpage+0xd0/0x120 [ 2764.507818][T29412] ? pipe_to_sendpage+0x23b/0x300 [ 2764.512820][T29412] ? __splice_from_pipe+0x2d3/0x870 [ 2764.517991][T29412] ? generic_splice_sendpage+0x184/0x210 [ 2764.523950][T29412] ? do_syscall_64+0xcb/0x150 [ 2764.528741][T29412] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2764.534812][T29412] sock_alloc_send_pskb+0x87e/0xcc0 [ 2764.539999][T29412] ? sock_kzfree_s+0x50/0x50 [ 2764.544572][T29412] ? rt_set_nexthop+0x48b/0x1140 [ 2764.549494][T29412] __ip_append_data+0x1fb9/0x3170 [ 2764.554515][T29412] ? ip_do_fragment+0x22c0/0x22c0 [ 2764.559516][T29412] ? inet_rtm_getroute+0x2590/0x2590 [ 2764.564773][T29412] ? ip_setup_cork+0x810/0x810 [ 2764.569511][T29412] ? ip_setup_cork+0x46b/0x810 [ 2764.574253][T29412] ? sock_def_destruct+0x10/0x10 [ 2764.579174][T29412] ip_append_data+0x12c/0x1a0 [ 2764.583834][T29412] ? ip_do_fragment+0x22c0/0x22c0 [ 2764.588855][T29412] udp_sendmsg+0x3ef/0x2f40 [ 2764.593338][T29412] ? update_misfit_status+0x5e0/0x5e0 [ 2764.598683][T29412] ? ip_do_fragment+0x22c0/0x22c0 [ 2764.603711][T29412] ? udp_cmsg_send+0x340/0x340 [ 2764.608449][T29412] ? perf_pmu_sched_task+0x370/0x370 [ 2764.613713][T29412] ? find_next_bit+0xf7/0x120 [ 2764.618364][T29412] ? finish_task_switch+0x2be/0x4c0 [ 2764.623536][T29412] udp_sendpage+0x110/0x5c0 [ 2764.628017][T29412] ? udplite_getfrag+0x70/0x70 [ 2764.632752][T29412] ? mutex_lock+0xa6/0x110 [ 2764.637156][T29412] ? inet_send_prepare+0x1b7/0x470 [ 2764.642857][T29412] ? udplite_getfrag+0x70/0x70 [ 2764.647591][T29412] inet_sendpage+0xd7/0x130 [ 2764.652068][T29412] ? inet_sendmsg+0xc0/0xc0 [ 2764.656547][T29412] sock_sendpage+0xd0/0x120 [ 2764.661042][T29412] pipe_to_sendpage+0x23b/0x300 [ 2764.665878][T29412] ? sock_fasync+0xf0/0xf0 [ 2764.670274][T29412] ? generic_splice_sendpage+0x210/0x210 [ 2764.675884][T29412] __splice_from_pipe+0x2d3/0x870 [ 2764.680885][T29412] ? generic_splice_sendpage+0x210/0x210 [ 2764.686561][T29412] generic_splice_sendpage+0x184/0x210 [ 2764.692004][T29412] ? iter_file_splice_write+0xf60/0xf60 [ 2764.697529][T29412] ? security_file_permission+0x128/0x300 [ 2764.703220][T29412] ? iter_file_splice_write+0xf60/0xf60 [ 2764.708745][T29412] __se_sys_splice+0x7ee/0x1b70 [ 2764.713578][T29412] ? fput_many+0x42/0x1a0 [ 2764.717902][T29412] ? ksys_write+0x25d/0x2c0 [ 2764.722384][T29412] ? file_open_root+0x450/0x450 [ 2764.727214][T29412] ? __x64_sys_splice+0xf0/0xf0 [ 2764.732039][T29412] ? __x64_sys_splice+0x1d/0xf0 [ 2764.736873][T29412] do_syscall_64+0xcb/0x150 [ 2764.741361][T29412] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2764.747239][T29412] RIP: 0033:0x45ca59 [ 2764.751144][T29412] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2764.770723][T29412] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2764.779109][T29412] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2764.787057][T29412] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2764.795007][T29412] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2764.802961][T29412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2764.810906][T29412] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2764.826974][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2764.835519][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:38 executing program 4: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x94, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x181040, 0x0) linkat(r0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1400) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2766.242121][T29416] FAT-fs (loop4): bogus number of reserved sectors [ 2766.248740][T29416] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2766.326296][T29416] FAT-fs (loop4): bogus number of reserved sectors [ 2766.332896][T29416] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:38 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 15:27:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000f80)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) lsetxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v3={0x3000000, [{0x100, 0x7}, {0x94, 0x6}], r2}, 0x18, 0x1) 15:27:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(0xffffffffffffffff) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e23, 0xffff4901, @remote, 0x6}, {0xa, 0x4e22, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x7f, [0x9, 0x7, 0x20, 0x4, 0x1, 0x80000000, 0x8, 0xc6]}, 0x5c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x20000000) 15:27:38 executing program 0 (fault-call:11 fault-nth:51): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x800400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f5, 0x8, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x49c5}, 0x20000040) wait4(0x0, 0x0, 0x20000000, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x482, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3f8, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x40) vmsplice(0xffffffffffffffff, &(0x7f00000036c0)=[{&(0x7f00000003c0)="9ace302bd80754baa49037e258dd7130d46b2cdc5e88b1bca5459185f6d22226939e8e940849b3791dbdf57da7b244e9d6bd379113c87dd17a30a49b1b8d6664dacbdbdf905e9f62cd679b259c3357df41ca7950d6b3ae8240560ffb524bb98515fa8f5b38a23248a6ab5ebe9f10856ce2cf4d08ec7ab03e7d2fe9d72196e1eeef410d6b71fa5a1e5aa98c00405c0941cdabf7a4836bd0a5137d8a2582371577bb924f8cdbc85f0d31727cdcf535b0a926d7cf5cc5c5fc32ed97f4bdb373dd7e0c6b2aa6c1be68cc21303caa2aabddc044255e067edf860e53615f6c470b73263243f236e31b7310a4d0484bb87e4c2b300e67a8c82b3d560890fbc72025b3d531ba487dd987b683b92c594704c35c03e00802cd97fa7e11cbc42130254853906a005dad733ebc945bbc6a67644a6f0e5dffb6999c7dd8c5cec23ca5863b752dd5b89ffc86f38918164a0a143d2d36adcf9533cf599b5dd3fc3d8dddbada7a829adaf0ea23bedde9a6b7c1284302ff5f7ba54cd9b639598e27df588fa49535d3ec765eb58e80ba94b8e79679e89c3cbb4d155b858b98378621b019f822ae50c89ded30511d73c7276ff827cba0e947966fef6296e8b1446a8c7ade1a401086dd356b2a483c2d8160146302021f3edb7b203b4cd988ad98a81c071a361d427bf97870af6ca427def222031abc7ae3bfaf7c1deb6f021bd206d5137a490b734011a86de816689bfc96e12334d08499ffc56679d2c9469615386899bbb5998f60c4be6dbb5a8455899fe667c58a71d84d20e13155ed2387ed85060b805f430be978dcf7aa36f9a5389d94acc7741752ac526c49a0db76468243c99609133b00a2d17c00c00bd7ae560164331fe5ba2c0b4eedc7b74f72d47a832f383db8fb652893fd0a3955236ab3774b1c5dff42e87f0c912408717d0b5235c55c83b2064f01178628f4ece42afa05eebcd6b52b798e9292163d0704ccf6087d7ef37917596e5c90fe4b9a391bf9eb16eb397e2bc67d68ac827416c3ec6cff90fd3b2398002ccbbd2da7bdd4e3cbf251a8085b92278449a5701532d874cdf26fad299df38f5b7a42cbaac6386128037952ef707ebc1d67e877caaddc64cee92ed5e1e84362180c3190209488af623668a443e561774fa4e91d733a3a0a63dc0145d30d96e5ff7f63d4683809969891564e5738de90371a8644a0736137fb412d8f73e799cb27de0cb4c679622cc93c6f22de0dd6980483d97fcd580555bf22c58663452d0dbc754f4b742a8d2f68d53f99a0a1026a748692b4a3d5d2fb2f813a87c2e33bb81654c531208e650624697fd071c0df3cfdd0acb9f84d8841fef6427c999090a6fc286d830061c6e2b59dc03fa6367b16b9e901ddd701d493a921cb6e7add13609a69df0b3702977d8124e6267623c0d5bc7ae019b333560b6aeda36aa12b0ae3ef2137d6c133a69f9b3dea9778c9863a25ca6aa56293777dccb57e586c3080049952d313c007db5ec5e34d30d801271fde39487d69a84220577e3e83da6128dd71c8159889176218fd86e01b024df055957b9d4f446a53db9d6ea5d09762ab1fa1df876e5a080f5ecddd65625ff88199908d57df7e0c0f786432d62bd7789d375cc3f195da51ad8ff4a6898b10d51e7b2e9ea7a43897b27bb46ee1bff8e3adece2517e3deb9d7a0b99c32e01fcd936e80a829e650c96d4e749edff88e3acc1810d79d06dc5cffcdf436229616153bd9bf4eaf025d273364065e4d5fdf7a29ca4aab6f43b32fb6c870bf43d286ebcc6926c2b8de77cb40ee9b247816ad87d73c2ec42a3d505975e501059a97920cda49876823775ddc5ff9da818bbde118f23f497b5c8b5409bae7169e2a0b7d698f6fd6d45d4482a84f3475d55e08954710254ea9b66f03b3e8c0e13a82747de6d89ac2616382acb618c2f0a6d3309b8f6dc4bcfd84648167dcc7cdf16c09540151ec8868a57521c376dde48fcb3464aa25b99a6c11d787407bb72aecdd61a1038efecdb45e065cf145c116cf6ec5c98a6ba1dfa91720fdc412e4a0c0bbd38f8d674e40669951eb14cd4764dc652a1e996a45dc6173764df6fc39e24b90fde96ba44c505e7f99ec5cb24bb0109e98da78f6179114435654f60a29e16a57e759ffa0d112a3c6b981105f79b09467cff0caa74dce7325dae76e2bb33523217f32ab8ba709299fc9b238ed95c4652d5420ab173a1c1e30638d6a4a7b53a685862158ca6dcde9993a0b7142f579234511a94e9f991664c500b4bc101756c447c57ad1446bececbb41a239149f6fbb713c972e85178cd5decf95d7201276df504acd33f310116397da8db8dfa98315d6f2dc5c11ab71b5a9e1859f89532c1952c8b4871c239d2ee3f8720b62713f1ed50b17b381560b4f1de697d312d5a974d12eeaa89fb509898e0b77a301dcbb9b2db549aa4f515c48ed7ef27c0aba253b228b29a6a2f35eb1ef6b671efe727d0fae4e75634f2a188f67cd3f0735a19628a95f962c50a8f17b8e86dfc02dc570df76576594ce6ef62a97a56368b11905f374878d942927f5f859769444ac9052152bbfb9fec3ac8ea6306c26b1f6d1cbf70b43696c74c688bb108d9ab0ce50d9910664f04b1315093d3d4c59b239b3a4cd05dbfd75b7c66bdf433cdc05aaab4bceeae55d520d6330171a0bab281e15a4fa53033961781c7fb05d3cabf5d0faa4028d3163cf633c8b7deeebd448aff637bd11545c5bcbe87fdefa2c89c4d40f388a21f80fc4ac6add439df7ac5acc53bbc18342e1e04e53c76ec1caacb096138c7cb56cae486d5ca28dee0f63446acfce279471c6ab96d7ca01ce0f427949ff39e07f97355f603d6f709966abd2d6196f4a714f51f4520cde7685b4ce84d84c7104ee62da01de305218ac8c5af2b4de862ca305d4dcd30ed58f8c82ba30a025e56b2d9310e7ea0589697ea76d807e9eebe313051b6e4b13fafe302cc8d90db6e26a8fd5bc6f8415eacc01658394dabfbb21885054a11c35c8dff6be5cb93bfa480c8d06a6a4c3764981aa2a9af7b8dfde6d4e1d90e8f9069ccfe0cc4488bde28ac24e73be50ab842ab013da96e67124a12998be8a2e3d312624b7fa6d274e19298ccecaa2fbe4e25d34dfbee8a9ec2ac3705f9cc95430894788853020b0fa3c0f2cfe1a617707db39963e6791ccc31ce2dcc782a091588eb04a687bc842fdedd5a51a60ddd847188d73e3439ecbdc76089cb9241e4172fd6c53691b621e54052834458902e35a6d5bfc5d2d87e15a71c14223c90b79b6d7b9d024242f6ccf6069a3e1fca0143e3f57b30e8efec4ead56117f64739c3eb38c778d4d5c66c02fb9e8a3188786a8853a362cb7f23fe7aa3df9bba26021d0885817952e135b15a5b9f3178fdf51300126050855a171dc231fdbc841a9adfccb97ea2f83e7f47980ae4fa1d081c548587acdd3c078e3b6a89e98615b7e02327244f4b4dae8b65375ac5a79e8909ad43467e636101bca6daf2d62f58cc305ac240b19071bbb4835537f9be65bceec6c76090519420684ed69f265230378bd993778b86d2ea5d62c7672f701e2b5213dde40caf364cc4684935aaf6f976cc99c0c6e777a07d1862cb05002a84c8f8cabc4040fa4b05663e621fc6bb873779513711dc1db709de2df4d6fe86bec21178c66955a7ef97788a2c9d87fe25b89846fc083115c250f848b414c5d0bf2b969a015ab960df80b8ac7562461fd9838cda6766ca392799f40c4aeba8be0e8427d04d6a9e3df5bdd3ea8fe08832375dcac821e5a1ecd33f9ac743a79d1b4fa50284d55622ed5a65cefde673fe080f386657788085ed09f4d08be25ce4796bd217643901f050b0d1436614f27c4e07e32a25e30c166511cdcae89122ff6325ff6103d10bc25bcb0ca36d63239537dc0695e7cd6430712dd8b91631516174d5fe88276dce37af6169d0de976890b82e98598f450408b4a99364028162b269b19c62b17c1dfbc7268916f49d9e856fc74e1d3943f3c8d62a7bc6607a713cc4d5f8be713c70b81a8558d6a13ae7b3c6195f636a0786a3be23b7ea66780232a26ef380ef5f797c2469611cc4cebcb17f04dd7d19976dae127c419f0ca1ada69b98dc76d737b3532766bf7b5e7e1c3dcc771a0deea8074ac252251aa35ae9946a3ee762090779a8b06bd1f4759ca4cf93628978fdbdaccef7c310c1d1e9750e2f807792febb2be3415c3df35b2fb1e89eaf6def2fe9ca7b5331f682adb1a433f53bfcf63a38435c9bcf38db8d1a8edf837dc0df3dbd4faeca9a3a543b78581db24fe86b1b6f7a316c78bc0423a02ad7772cb621af4bad19754dfcdf08295d102f3138359cc5c36779c6563a4ef567821b35f1f725023dbe7d72eb1c6c3c875cfb1ca614e499e4555d0682ba9cff90d37cfc51c241f8c8078af4e2cb9e185a57c1f16b63415e0425d9fae810239c13093c193b8d41a646f11ca171d3d7d9cee736380d982959d867f927e270011c78692dc3123dade913d10a2134dd60257c92ec9e8882c457fdaf2a59cabf4730d2e7ba12c72e5e11489f6b01641ab89a62857ebf09238a48770d9e787bbd47343f94d7b30d420a5585651aeb503a4e46c86fe722c73e3c8a8808710115d1029e39e66b4306c5282fea303fdb59f01f34b7aa2f388045b493e03cf92069383abf66502ceab64fe39be5674b615937f67094943349442a5aa14bfdca469152e40aa59b18126b5e1898ec288947814ecb61f4cab81aa6f5c830c489898a26488f8fc1cf28f1b29dd248da558335bfa8fbee5105a96b84893010206768e4c5b15306a902865a5aeab85566c8cf7d6efaa1965e8cbad87bed096fa21e27a5b87661766f2eae845536dc1d22ae8264ee42fa72594d4f1681936a1e912e666307e61857d932bc3c01f28a4afbbbd2d244313759737556ada3b68dd79d7cf8dc1e28d9754bd19a4c2c12bae7f68989e007786ef4eacb2db429d479cdb8accbca56aea85a7494e6f130b5e633c54a6aa62bb92bfc22a42552b50fcc91c8aa9c11dfdf9cc3f44b0ca8b17e035152d7f019f23b11bfbd95e0948da50b0f8f36b37964a467a8693343a1386404252c9f3fb0d93f14983e9ac70518a5966bf577e7b2130e595a41884888e9d4b317df9f23c3de61c0d7ad740f116cce0d5c8a46de3f39d35916c5c8326f8d23d4dd29a5b555b3ddeaa016d843be9fe7b07bcce08f25a7ade0092869b2bccfa0ef472e1f9102b224a2f8c35a4b549939d0b0728fa5152f8b428b45c649a0e8d38c22261c13492ea5fe72af9b3417af43509e70d5b6baf277cd4a52af9e823af56cd4c8ba1e7aaff602a85c820997d4457c934fefb16c500894e75e189e4fe1d7bd9d9ec2de00a7b6d414fd51237f83f50de3e2ffa4255562ea0ee3ecc6fc811311152133abf03c8879ff4972fa05cc3bb67a6ef1407bc7397f51448548edd687fa8074aa1213a3a2eb201850660aef64fe8c2dad904591ebcd5e8ea9edcdda30c5709c355341b2324310f460c0c8ce9e689354d8cf8cfc19112737ca6ec5614069f2b3c5a827772053edbb09117689e7d510dae3fc46b8a7d8804b3eeabf0cb8809ca446281064730fe4d3d08459a297d1b3c0a799b75b31b474b7fc5bfde27b72ab15f5b564ce1b699390ef31ce2a18e3bc998f00e90a71aca78535f58f0267a8b757405315b5940e2bc71d880a7f44651ee2e05fc6e1017c61d70b066eceb0629f31d244afbf5a8aee249d3f1fd35bf65ebbf525d5e6c01ebd57a98d25721e40099fb5d1e8668ccc6d843a8a7aa30eeaae821a0fc", 0x1000}, {&(0x7f0000000000)="dc5d0d3bf26288723ad03e8d157f4362e5a1c723972c25045a32d307478c24bfd5fb4ff4196c0c5a8c3d69843bbfecdd7f002a3fca2dda6c29e1b384733115f06376c01097236d1ffcb6b54f2b1b81dd8cebd186efc6a6c5ff929773f0cdbded", 0x60}, {&(0x7f0000000100)="eaa49ea8e1d01b00aa4c575cd40172", 0xf}, {&(0x7f00000013c0)="354932486149c084b2ecdcd417d1c696e3e65afb152e46b78191c1961f8c70dc8cbefc7fce1f434ff4817322f6bc35ecef1fef60d524ee4c4b6e521c37fc8f", 0x3f}, {&(0x7f0000001400)="2e36597e665fab3a5ad268589ca47bb6e8b832e73e311eb940a4fcc226f9f98af60d51ee6f7742af1d5c0b47e3e27f36f8e1c6adf4e447be532ce588bc13c78c2acc0ef5670c46023d72f1d12ccc5601fd3b3689084bfc03bbe6a47ea7b937b951a739cb5553160891d8c7", 0x6b}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="9bdbec66a73f7d85ebd3914d4196d81d83570ca8ad7c512c0d83a34c39d303e9ddf28640a352bba2a9742807519885bb2e6c27d8915c7350783f0950e4a98e09a7b19915193875c3e46b3b948c3765cd7ab66375ec102f6d49334ef353fb99bc1b9840cba97879ec2db9b4", 0x6b}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000003580)="1330331733fba3cbb9c9a4", 0xb}, {&(0x7f00000035c0)="1a5af9e6ab53f2b5332674774269d3a2bc0272d2", 0x14}, {&(0x7f0000003600)="8e0d39ce15c486a2b1a723002dda3488f89e42ed5dc590154e0d76b53acfdac8f2a91fd4b0b76a6c6eec60657dac7b1424e38b692e2f9482d2b6af6f410e856c93e88c2ef997d37d99f8476153a5275493a64a38f295db98fe915a93bb56ae045ef7ab472ab676d18264aa5c715e07c31b2e0d09c0c244000ad4f9890e5a52dbbd642d8656a6cf09a56eb72b6cbdef14f0659c92cd061c1b8379bd", 0x9b}], 0xb, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000001400)=0x81) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/166, 0xa6}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/74, 0x4a}, {&(0x7f0000001380)=""/105, 0x69}], 0x3, 0x0) statfs(&(0x7f0000001440)='./file0\x00', &(0x7f0000001480)=""/161) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:38 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 15:27:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)='./file0/file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x600102, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x3c, r3, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0xa, 'veth1_virt_wifi\x00'}}}}}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x52000880}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50080) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000180)='./file0\x00', 0x180, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="c2eba3cce16e9602f4bdc1b74d98efe3dacccf17f429ae0f7fa3d5d4ea307e115a235ae8409c3c5783b48691253914b3f38a39d5a14125263612f6b11f8a050d721a5a1f470d88b243b8dab53c37e2a73d84cc35d9b0765bbf3ea67529b07e7c12b96f71463bfd983bb4b114b8768684271cdf9883d4793388643f457f8586c21db8f19d83629449eba38439a29f91092a981d72e617507626dde26073bec594a269992e1b08b772d4af34172a84476269b428c70494238ffcf581a6666a4c12aeddeb9d25b7c110d65ffb57478e621c23caf9bc3187846fbd0b712b", 0xdc, 0x1}, {&(0x7f00000001c0)="498c0f00d67bf415be0bf72871fb5cb3a884296be872ddc12abb46a63707b8677f54a2f4ccd0663507d72b7b8f1ec548b11b186e6132e9ff3dfd06367f3513bb5797ded6ad6347c5d3a6f590a25a47f56724f34a0d2f6190c45913b33cc9777fa36c9c61643120a325d47df0050e7a8997698da764bbb3e0cb161a53e7d10b4f6f45cdd9afc13e1196db6dd8f6ba7a7c7789357c1c063a80a15bd13af4a3f45b40774a65d439c264ec67e035", 0xac, 0x5}, {&(0x7f0000000400)="928a27748c9cfe2d483c7f8e5158aee6c04fb6814978cb93a222e2f1e35ae534fd64b639214e904d79a35f950233742f332a484bd1a84540665f16f154d268a11e03deb3c9a5cbc458ee3913d0afbca4bf0dc9a253c62ac2d36fcf468c40f92cf31ee6be0fa87f60fb72f231824b14e7afa016fd3a1909d063090cd81c2c423cb977e8901a91aec68d55aa977974fbd922d8c7ef80def5ad30847b9cd523209e644519f5d29d687f29d740061278db0b95ed2d51535601c149f9d78542267366443d3138b4699bf959b3f1b1476b06ff909b217c6a2d", 0xd6, 0x7}], 0x5080054, &(0x7f0000000580)={[{@huge_never={'huge=never', 0x3d, '&$+('}}], [{@euid_lt={'euid<', r1}}, {@subj_type={'subj_type'}}]}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000005c0)={0x0, 0x5}, 0x8) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) accept(r4, &(0x7f0000001740)=@tipc=@id, &(0x7f00000017c0)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r8, 0x81007702, &(0x7f0000000740)=""/4096) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_procs(r3, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140)="36edc7d052dac4f4469d369b4786cbd83ac6160137dc4849f9a712a01cc72d83b77a92b8cd8268200526d3f58a7136e1132a1a3aaae2bd1f09abacb975707d2805a85bba15fe6bcdd10582193f3650ab6d1ad34bfa85df87716afda0af99c316ace1cfb4552629cbea63504e41115c2bb96a3c556aa378ab7af83ea3636bc19020410ae90deaf05b56e5679832c824e6ef6a7db02e926717f3aa6612ee83c01579da9c7ccb6e00e95fbb316f2d97ca70539cff0f713c735d3bcfc77af16025c05acea273c698a95188b67d82126836260b466a9e7ebeeba0dff2d4f7dfe44a94d10671b2300c5dc053ce53b705a1c8d84f18d9801f", 0xf5, r5}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000340)={0x4, 0x0, 0x7fff}) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) [ 2766.503983][T29443] FAULT_INJECTION: forcing a failure. [ 2766.503983][T29443] name failslab, interval 1, probability 0, space 0, times 0 [ 2766.516925][T29443] CPU: 0 PID: 29443 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2766.527067][T29443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2766.537123][T29443] Call Trace: [ 2766.540415][T29443] dump_stack+0x14a/0x1ce [ 2766.544738][T29443] ? devkmsg_release+0x11c/0x11c [ 2766.549666][T29443] ? show_regs_print_info+0x12/0x12 [ 2766.554856][T29443] should_fail+0x6fb/0x860 [ 2766.559252][T29443] ? setup_fault_attr+0x3d0/0x3d0 [ 2766.564253][T29443] ? alloc_skb_with_frags+0xb1/0x580 [ 2766.569521][T29443] should_failslab+0x5/0x20 [ 2766.574091][T29443] __kmalloc_track_caller+0x5d/0x2c0 [ 2766.579359][T29443] ? kmem_cache_alloc+0x1d5/0x260 [ 2766.584360][T29443] ? alloc_skb_with_frags+0xb1/0x580 [ 2766.589619][T29443] __alloc_skb+0xd1/0x4d0 [ 2766.593925][T29443] ? __kasan_kmalloc+0x189/0x1c0 [ 2766.598843][T29443] alloc_skb_with_frags+0xb1/0x580 [ 2766.604007][T29443] ? sock_sendpage+0xd0/0x120 [ 2766.608657][T29443] ? pipe_to_sendpage+0x23b/0x300 [ 2766.613652][T29443] ? __splice_from_pipe+0x2d3/0x870 [ 2766.618821][T29443] ? generic_splice_sendpage+0x184/0x210 [ 2766.624429][T29443] ? do_syscall_64+0xcb/0x150 [ 2766.629088][T29443] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.635136][T29443] sock_alloc_send_pskb+0x87e/0xcc0 [ 2766.640314][T29443] ? sock_kzfree_s+0x50/0x50 [ 2766.644931][T29443] ? rt_set_nexthop+0x48b/0x1140 [ 2766.649842][T29443] __ip_append_data+0x1fb9/0x3170 [ 2766.654845][T29443] ? ip_do_fragment+0x22c0/0x22c0 [ 2766.659895][T29443] ? inet_rtm_getroute+0x2590/0x2590 [ 2766.665163][T29443] ? ip_setup_cork+0x810/0x810 [ 2766.669931][T29443] ? ip_setup_cork+0x46b/0x810 [ 2766.674668][T29443] ? sock_def_destruct+0x10/0x10 [ 2766.679580][T29443] ip_append_data+0x12c/0x1a0 [ 2766.684240][T29443] ? ip_do_fragment+0x22c0/0x22c0 [ 2766.689272][T29443] udp_sendmsg+0x3ef/0x2f40 [ 2766.693756][T29443] ? update_misfit_status+0x5e0/0x5e0 [ 2766.699105][T29443] ? ip_do_fragment+0x22c0/0x22c0 [ 2766.704103][T29443] ? udp_cmsg_send+0x340/0x340 [ 2766.708860][T29443] ? perf_pmu_sched_task+0x370/0x370 [ 2766.714136][T29443] ? find_next_bit+0xf7/0x120 [ 2766.718808][T29443] ? finish_task_switch+0x2be/0x4c0 [ 2766.723990][T29443] udp_sendpage+0x110/0x5c0 [ 2766.728472][T29443] ? udplite_getfrag+0x70/0x70 [ 2766.733210][T29443] ? mutex_lock+0xa6/0x110 [ 2766.737619][T29443] ? inet_send_prepare+0x1b7/0x470 [ 2766.742704][T29443] ? udplite_getfrag+0x70/0x70 [ 2766.747441][T29443] inet_sendpage+0xd7/0x130 [ 2766.751917][T29443] ? inet_sendmsg+0xc0/0xc0 [ 2766.756394][T29443] sock_sendpage+0xd0/0x120 [ 2766.760873][T29443] pipe_to_sendpage+0x23b/0x300 [ 2766.765696][T29443] ? sock_fasync+0xf0/0xf0 [ 2766.770086][T29443] ? generic_splice_sendpage+0x210/0x210 [ 2766.775712][T29443] __splice_from_pipe+0x2d3/0x870 [ 2766.780732][T29443] ? generic_splice_sendpage+0x210/0x210 [ 2766.786344][T29443] generic_splice_sendpage+0x184/0x210 [ 2766.791829][T29443] ? iter_file_splice_write+0xf60/0xf60 [ 2766.797352][T29443] ? security_file_permission+0x128/0x300 [ 2766.803096][T29443] ? iter_file_splice_write+0xf60/0xf60 [ 2766.808616][T29443] __se_sys_splice+0x7ee/0x1b70 [ 2766.813451][T29443] ? fput_many+0x42/0x1a0 [ 2766.817767][T29443] ? ksys_write+0x25d/0x2c0 [ 2766.822251][T29443] ? file_open_root+0x450/0x450 [ 2766.827080][T29443] ? __x64_sys_splice+0xf0/0xf0 [ 2766.831922][T29443] ? __x64_sys_splice+0x1d/0xf0 [ 2766.836784][T29443] do_syscall_64+0xcb/0x150 [ 2766.841313][T29443] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2766.847190][T29443] RIP: 0033:0x45ca59 [ 2766.851068][T29443] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2766.870667][T29443] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2766.879054][T29443] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2766.887011][T29443] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2766.894957][T29443] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 15:27:39 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = epoll_create1(0x0) splice(0xffffffffffffffff, &(0x7f0000000180), r2, &(0x7f00000001c0)=0x80000000, 0x49, 0x2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) statx(r6, &(0x7f0000000280)='./file0\x00', 0x0, 0x200, &(0x7f00000002c0)) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0x3, @broadcast}, 0x10) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0xf5, r4, 0x1, 0x20, 0x6, @remote}, 0x14) [ 2766.902903][T29443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2766.910851][T29443] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408202, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000180), &(0x7f00000001c0)=0x4) fchdir(0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000200), 0x4) 15:27:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$rfkill(r1, &(0x7f0000000000), 0x8) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e25, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000380), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x101000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x48, 0x4, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xa154}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xfec}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000000) fchdir(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x100000024ba1dc0}) 15:27:41 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 15:27:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xf) 15:27:41 executing program 0 (fault-call:11 fault-nth:52): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) splice(r1, 0x0, r3, 0x0, 0x5f, 0x0) shutdown(r2, 0x1) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 15:27:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) eventfd(0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = timerfd_create(0x1, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000180)="1b5165e8fe283c4108b2a348ddceaf3b0da55ad5c0a2094ac0f974e08f639a0580d8c091b06983ff542954e447fec69acad14b51b05043f62a401a9e67636211519ea0cb9e7536fadf9426ca34eb2fb5e23485366295f9cf35a56fa7f8c4bda6ea3fa692a3b0770174c95b46d1bb81a4b9403e48d1afc09a") ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2769.495002][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2769.503877][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2769.513792][T29496] FAULT_INJECTION: forcing a failure. [ 2769.513792][T29496] name failslab, interval 1, probability 0, space 0, times 0 [ 2769.526544][T29496] CPU: 0 PID: 29496 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2769.536672][T29496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2769.546700][T29496] Call Trace: [ 2769.549983][T29496] dump_stack+0x14a/0x1ce [ 2769.554302][T29496] ? devkmsg_release+0x11c/0x11c [ 2769.559303][T29496] ? inet_sendpage+0xd7/0x130 [ 2769.563957][T29496] ? show_regs_print_info+0x12/0x12 [ 2769.569147][T29496] should_fail+0x6fb/0x860 [ 2769.573546][T29496] ? setup_fault_attr+0x3d0/0x3d0 [ 2769.578590][T29496] ? dst_alloc+0x137/0x4f0 [ 2769.582983][T29496] should_failslab+0x5/0x20 [ 2769.587462][T29496] kmem_cache_alloc+0x36/0x260 [ 2769.592199][T29496] dst_alloc+0x137/0x4f0 [ 2769.596415][T29496] rt_dst_clone+0x53/0x670 [ 2769.600817][T29496] ip_mc_finish_output+0xad/0x3a0 [ 2769.605816][T29496] ip_mc_output+0x3fb/0x9f0 [ 2769.610303][T29496] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2769.615762][T29496] ? nf_hook_slow+0x1a6/0x1f0 [ 2769.620413][T29496] ? ip_mc_output+0x9f0/0x9f0 [ 2769.625065][T29496] ? ip_send_check+0xd0/0xd0 [ 2769.629630][T29496] ? __ip_local_out+0x470/0x470 [ 2769.634470][T29496] ? inet_rtm_getroute+0x2590/0x2590 [ 2769.639753][T29496] ? csum_partial+0x379/0x470 15:27:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x80000001) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffc}, 0x48) wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2769.644406][T29496] ? siphash_3u32+0x22/0x240 [ 2769.648967][T29496] ? csum_partial+0x379/0x470 [ 2769.653616][T29496] ip_send_skb+0xaa/0x140 [ 2769.657920][T29496] udp_send_skb+0x8e9/0x1100 [ 2769.662482][T29496] udp_sendpage+0x2f2/0x5c0 [ 2769.666960][T29496] ? udplite_getfrag+0x70/0x70 [ 2769.671738][T29496] ? mutex_lock+0xa6/0x110 [ 2769.676144][T29496] ? inet_send_prepare+0x1b7/0x470 [ 2769.681246][T29496] ? udplite_getfrag+0x70/0x70 [ 2769.685982][T29496] inet_sendpage+0xd7/0x130 [ 2769.690463][T29496] ? inet_sendmsg+0xc0/0xc0 [ 2769.694957][T29496] sock_sendpage+0xd0/0x120 [ 2769.699444][T29496] pipe_to_sendpage+0x23b/0x300 [ 2769.704271][T29496] ? sock_fasync+0xf0/0xf0 [ 2769.708661][T29496] ? generic_splice_sendpage+0x210/0x210 [ 2769.714265][T29496] __splice_from_pipe+0x2d3/0x870 [ 2769.719287][T29496] ? generic_splice_sendpage+0x210/0x210 [ 2769.724893][T29496] generic_splice_sendpage+0x184/0x210 [ 2769.730336][T29496] ? iter_file_splice_write+0xf60/0xf60 [ 2769.735866][T29496] ? security_file_permission+0x128/0x300 [ 2769.741602][T29496] ? iter_file_splice_write+0xf60/0xf60 [ 2769.747132][T29496] __se_sys_splice+0x7ee/0x1b70 [ 2769.751957][T29496] ? fput_many+0x42/0x1a0 [ 2769.756261][T29496] ? ksys_write+0x25d/0x2c0 [ 2769.760740][T29496] ? file_open_root+0x450/0x450 [ 2769.765608][T29496] ? __x64_sys_splice+0xf0/0xf0 [ 2769.770439][T29496] ? __x64_sys_splice+0x1d/0xf0 [ 2769.775262][T29496] do_syscall_64+0xcb/0x150 [ 2769.779784][T29496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2769.785677][T29496] RIP: 0033:0x45ca59 [ 2769.789551][T29496] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2769.809146][T29496] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2769.817566][T29496] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2769.825561][T29496] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2769.833622][T29496] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2769.841569][T29496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2769.849547][T29496] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10040, 0x82) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x3}, 0x4) fchdir(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2769.921483][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2769.930213][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:42 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x81, 0x40, 0x2, 0x80000000, 0x1, 0x5, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r2) 15:27:42 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:42 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) 15:27:42 executing program 0 (fault-call:11 fault-nth:53): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:42 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x6, 0x10001, 0x9, 0xc1e}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x80) [ 2770.400868][T29544] FAULT_INJECTION: forcing a failure. [ 2770.400868][T29544] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.413546][T29544] CPU: 1 PID: 29544 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2770.423693][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2770.433749][T29544] Call Trace: [ 2770.437045][T29544] dump_stack+0x14a/0x1ce [ 2770.441374][T29544] ? devkmsg_release+0x11c/0x11c [ 2770.446306][T29544] ? __kmalloc_track_caller+0x201/0x2c0 [ 2770.451853][T29544] ? show_regs_print_info+0x12/0x12 [ 2770.457052][T29544] ? __ip_append_data+0x1fb9/0x3170 [ 2770.462247][T29544] ? udp_sendmsg+0x3ef/0x2f40 [ 2770.466923][T29544] ? memset+0x1f/0x40 [ 2770.470901][T29544] should_fail+0x6fb/0x860 [ 2770.475312][T29544] ? setup_fault_attr+0x3d0/0x3d0 [ 2770.480331][T29544] ? arch_stack_walk+0xb8/0x120 [ 2770.485178][T29544] ? skb_clone+0x1b2/0x370 [ 2770.489599][T29544] should_failslab+0x5/0x20 [ 2770.494103][T29544] kmem_cache_alloc+0x36/0x260 [ 2770.498867][T29544] skb_clone+0x1b2/0x370 [ 2770.503107][T29544] dev_queue_xmit_nit+0x279/0x9e0 [ 2770.508126][T29544] ? validate_xmit_skb+0x630/0xc60 [ 2770.513232][T29544] xmit_one+0x7b/0x460 [ 2770.517298][T29544] dev_hard_start_xmit+0xac/0x1b0 [ 2770.522318][T29544] sch_direct_xmit+0x23b/0x970 [ 2770.527081][T29544] ? nvmem_get_mac_address+0x310/0x310 [ 2770.532533][T29544] ? stack_trace_save+0x123/0x1f0 [ 2770.537555][T29544] __qdisc_run+0x245/0x420 [ 2770.541968][T29544] ? sch_direct_xmit+0x970/0x970 [ 2770.546900][T29544] ? pfifo_fast_enqueue+0x36e/0x580 [ 2770.552094][T29544] __dev_queue_xmit+0x11fa/0x2680 [ 2770.557118][T29544] ? dev_queue_xmit+0x20/0x20 [ 2770.561795][T29544] ? ip_finish_output2+0x936/0x1810 [ 2770.566995][T29544] ip_finish_output2+0xbdf/0x1810 [ 2770.572024][T29544] ? ip_fragment+0x210/0x210 [ 2770.576612][T29544] ? __ip_finish_output+0x4e1/0x6d0 [ 2770.581810][T29544] ip_mc_output+0x8b5/0x9f0 [ 2770.586314][T29544] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2770.591803][T29544] ? nf_hook_slow+0x1a6/0x1f0 [ 2770.596480][T29544] ? ip_mc_output+0x9f0/0x9f0 [ 2770.601152][T29544] ? ip_send_check+0xd0/0xd0 [ 2770.605737][T29544] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2770.611016][T29544] ? inet_rtm_getroute+0x2590/0x2590 [ 2770.616297][T29544] ? csum_partial+0x379/0x470 [ 2770.620971][T29544] ? siphash_3u32+0x22/0x240 [ 2770.625552][T29544] ? csum_partial+0x379/0x470 [ 2770.630226][T29544] ip_send_skb+0xaa/0x140 [ 2770.634555][T29544] udp_send_skb+0x8e9/0x1100 [ 2770.639144][T29544] udp_sendpage+0x2f2/0x5c0 [ 2770.643643][T29544] ? udplite_getfrag+0x70/0x70 [ 2770.648397][T29544] ? mutex_lock+0xa6/0x110 [ 2770.652812][T29544] ? inet_send_prepare+0x1b7/0x470 [ 2770.657915][T29544] ? udplite_getfrag+0x70/0x70 [ 2770.662671][T29544] inet_sendpage+0xd7/0x130 [ 2770.667170][T29544] ? inet_sendmsg+0xc0/0xc0 [ 2770.671703][T29544] sock_sendpage+0xd0/0x120 [ 2770.676198][T29544] pipe_to_sendpage+0x23b/0x300 [ 2770.681130][T29544] ? sock_fasync+0xf0/0xf0 [ 2770.685538][T29544] ? generic_splice_sendpage+0x210/0x210 [ 2770.691168][T29544] __splice_from_pipe+0x2d3/0x870 [ 2770.696189][T29544] ? generic_splice_sendpage+0x210/0x210 [ 2770.701817][T29544] generic_splice_sendpage+0x184/0x210 [ 2770.707278][T29544] ? iter_file_splice_write+0xf60/0xf60 [ 2770.712839][T29544] ? security_file_permission+0x128/0x300 [ 2770.718557][T29544] ? iter_file_splice_write+0xf60/0xf60 [ 2770.724108][T29544] __se_sys_splice+0x7ee/0x1b70 [ 2770.728997][T29544] ? fput_many+0x42/0x1a0 [ 2770.733357][T29544] ? ksys_write+0x25d/0x2c0 [ 2770.737864][T29544] ? file_open_root+0x450/0x450 [ 2770.742717][T29544] ? __x64_sys_splice+0xf0/0xf0 [ 2770.747569][T29544] ? __x64_sys_splice+0x1d/0xf0 [ 2770.752420][T29544] do_syscall_64+0xcb/0x150 [ 2770.756924][T29544] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2770.762819][T29544] RIP: 0033:0x45ca59 [ 2770.766713][T29544] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2770.786316][T29544] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2770.794725][T29544] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2770.802698][T29544] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2770.810667][T29544] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2770.818636][T29544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2770.826601][T29544] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:43 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0x8, 0x8}]}, 0xc, 0x2) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) fgetxattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@empty}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xf8) 15:27:43 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 15:27:43 executing program 0 (fault-call:11 fault-nth:54): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:43 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fadvise64(r0, 0x6, 0x3ff, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x1}) r4 = open(0x0, 0x0, 0x0) fchdir(r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000440)=ANY=[], 0x7b) sendfile(r5, r5, &(0x7f0000000240), 0x7ffd) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2771.285131][T29561] FAULT_INJECTION: forcing a failure. [ 2771.285131][T29561] name failslab, interval 1, probability 0, space 0, times 0 [ 2771.297759][T29561] CPU: 0 PID: 29561 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2771.307897][T29561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2771.317952][T29561] Call Trace: [ 2771.321246][T29561] dump_stack+0x14a/0x1ce [ 2771.325574][T29561] ? devkmsg_release+0x11c/0x11c [ 2771.330504][T29561] ? __se_sys_splice+0x7ee/0x1b70 [ 2771.335519][T29561] ? show_regs_print_info+0x12/0x12 [ 2771.340717][T29561] should_fail+0x6fb/0x860 [ 2771.345122][T29561] ? setup_fault_attr+0x3d0/0x3d0 [ 2771.350144][T29561] ? alloc_skb_for_msg+0x220/0x220 [ 2771.355253][T29561] ? skb_clone+0x1b2/0x370 [ 2771.359668][T29561] should_failslab+0x5/0x20 [ 2771.364162][T29561] kmem_cache_alloc+0x36/0x260 [ 2771.368909][T29561] skb_clone+0x1b2/0x370 [ 2771.373141][T29561] packet_rcv_spkt+0x129/0x490 [ 2771.377903][T29561] ? skb_clone+0x1f4/0x370 [ 2771.382310][T29561] ? packet_rcv+0x1410/0x1410 [ 2771.386980][T29561] dev_queue_xmit_nit+0x36c/0x9e0 [ 2771.392031][T29561] xmit_one+0x7b/0x460 [ 2771.396096][T29561] dev_hard_start_xmit+0xac/0x1b0 [ 2771.401117][T29561] sch_direct_xmit+0x23b/0x970 [ 2771.405881][T29561] ? nvmem_get_mac_address+0x310/0x310 [ 2771.411772][T29561] ? stack_trace_save+0x123/0x1f0 [ 2771.416800][T29561] __qdisc_run+0x245/0x420 [ 2771.421214][T29561] ? sch_direct_xmit+0x970/0x970 [ 2771.426147][T29561] ? pfifo_fast_enqueue+0x36e/0x580 [ 2771.431334][T29561] __dev_queue_xmit+0x11fa/0x2680 [ 2771.436365][T29561] ? dev_queue_xmit+0x20/0x20 [ 2771.441045][T29561] ? ip_finish_output2+0x936/0x1810 [ 2771.446240][T29561] ip_finish_output2+0xbdf/0x1810 [ 2771.451323][T29561] ? ip_fragment+0x210/0x210 [ 2771.455948][T29561] ? __ip_finish_output+0x4e1/0x6d0 [ 2771.461149][T29561] ip_mc_output+0x8b5/0x9f0 [ 2771.465644][T29561] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2771.471094][T29561] ? nf_hook_slow+0x1a6/0x1f0 [ 2771.476379][T29561] ? ip_mc_output+0x9f0/0x9f0 [ 2771.481045][T29561] ? ip_send_check+0xd0/0xd0 [ 2771.485626][T29561] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2771.490910][T29561] ? inet_rtm_getroute+0x2590/0x2590 [ 2771.496190][T29561] ? csum_partial+0x379/0x470 [ 2771.500862][T29561] ? prandom_u32+0x123/0x1b0 [ 2771.505450][T29561] ? csum_partial+0x379/0x470 [ 2771.510115][T29561] ip_send_skb+0xaa/0x140 [ 2771.514430][T29561] udp_send_skb+0x8e9/0x1100 [ 2771.519002][T29561] udp_sendpage+0x2f2/0x5c0 [ 2771.523489][T29561] ? udplite_getfrag+0x70/0x70 [ 2771.528234][T29561] ? mutex_lock+0xa6/0x110 [ 2771.532642][T29561] ? inet_send_prepare+0x1b7/0x470 [ 2771.537752][T29561] ? udplite_getfrag+0x70/0x70 [ 2771.542519][T29561] inet_sendpage+0xd7/0x130 [ 2771.547010][T29561] ? inet_sendmsg+0xc0/0xc0 [ 2771.551500][T29561] sock_sendpage+0xd0/0x120 [ 2771.555992][T29561] pipe_to_sendpage+0x23b/0x300 [ 2771.560830][T29561] ? sock_fasync+0xf0/0xf0 [ 2771.565236][T29561] ? generic_splice_sendpage+0x210/0x210 [ 2771.570856][T29561] __splice_from_pipe+0x2d3/0x870 [ 2771.575863][T29561] ? generic_splice_sendpage+0x210/0x210 [ 2771.581583][T29561] generic_splice_sendpage+0x184/0x210 [ 2771.587038][T29561] ? iter_file_splice_write+0xf60/0xf60 [ 2771.592703][T29561] ? security_file_permission+0x128/0x300 [ 2771.598417][T29561] ? iter_file_splice_write+0xf60/0xf60 [ 2771.603950][T29561] __se_sys_splice+0x7ee/0x1b70 [ 2771.608790][T29561] ? fput_many+0x42/0x1a0 [ 2771.613106][T29561] ? ksys_write+0x25d/0x2c0 [ 2771.617585][T29561] ? file_open_root+0x450/0x450 [ 2771.622418][T29561] ? __x64_sys_splice+0xf0/0xf0 [ 2771.627258][T29561] ? __x64_sys_splice+0x1d/0xf0 [ 2771.632107][T29561] do_syscall_64+0xcb/0x150 [ 2771.636609][T29561] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2771.642599][T29561] RIP: 0033:0x45ca59 [ 2771.646476][T29561] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2771.666061][T29561] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2771.674459][T29561] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2771.682427][T29561] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2771.690402][T29561] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2771.698357][T29561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2771.706316][T29561] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r2, 0x3, 0x3, @broadcast}, 0x10) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x3, @broadcast}, 0x10) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r8, 0x3, 0x3, @broadcast}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20880400}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf250600000034006a73947ab1b9e63732361c01800400020069705f767469300000000000000000001400020076657468315f766c616e00000000400008000100", @ANYRES32=r2, @ANYBLOB="2000018008000300010000001400020076657468315f746f5f687372000000000c00018008000100", @ANYRES32=r5, @ANYBLOB="3c00018008000100", @ANYRES32=r8, @ANYBLOB="1400020063616966300000000000000000000000140002006261746164765f736c6176655f3100000800030001000000"], 0xb0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15:27:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:45 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x2, 0x100000001, 0x10000, 0x2001, 0x0, 0xffff1d3e}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:45 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:45 executing program 0 (fault-call:11 fault-nth:55): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', './file0', [{}, {0x20, ':\\-/a=)\'\')'}, {}, {}, {0x20, '*'}], 0xa, "52d5200e29c6cb592c40ca52b9e3b0ffc415747162bb8496f0c49b5dd90fa52c3988e0f9de7b0ff740a5c9abc9f59c88b1cf881de75640bcb681c6d777a047fcaece6a297e2d458cd53ec9024bd09b318de35db97dc505e0d4bf4a3a591a6804"}, 0x7b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x39}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4010) wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="d6f5ed407e417dd1ca8bdbd17d9770dcc84fe73bd499b060bf05a890bc0a2d40446499a75e3af71e444e03ec69a55d863194f6b13b781ba2a8983c4c08931cc640507f240759d70ef73017b82325ff7d667edc6482c96b8ff8d8095297b60ecd188a90193906952534a096abf66ae7ca35c117c747a680911052ee0860186a", 0x7f}, {&(0x7f0000000140)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) 15:27:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ioprio_get$pid(0x3, r2) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r2, 0x3, 0x0) 15:27:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x3ff, @mcast2, 0x1}, 0x1c) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 15:27:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={&(0x7f0000000140)="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", &(0x7f0000001140)=""/10, &(0x7f0000001180)="142d4fb20f819a719acca4f02b93c02a5db83f239c28c1795a9a4912d6fd92d6ac3a1c8a472a414c62eb7e68308b0714aad56758e29309a825574859f8e4b25d57bbdc3430f07e87e5a6971fc4db562eee210cad70c6de516e84e107020a08ffe8060c91ca39f1fb87d07832bfc00d9c0d7f29d2e51a35a3b29f0afe5cfac5275d8ef02de9979450914b03293cb6d34495febbd1d3ddaed9b85bf57675", &(0x7f0000001240)="0f0153e92f667d787854f5ea452cc434c975d7eea7532383ae028f56b981444d0831db1f9a7474802cf6491d2685e51e370d1aa256583ab790d2370529abc17a313cce8313aa5aac571bfff0954ee01879aff7f93d619ab3ef", 0x1, r1}, 0x38) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:45 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x800) [ 2772.951592][T29593] FAULT_INJECTION: forcing a failure. [ 2772.951592][T29593] name failslab, interval 1, probability 0, space 0, times 0 [ 2772.964913][T29593] CPU: 0 PID: 29593 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2772.975070][T29593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2772.985159][T29593] Call Trace: [ 2772.988435][T29593] dump_stack+0x14a/0x1ce [ 2772.992746][T29593] ? devkmsg_release+0x11c/0x11c [ 2772.997658][T29593] ? inet_sendpage+0xd7/0x130 [ 2773.002310][T29593] ? show_regs_print_info+0x12/0x12 [ 2773.007497][T29593] should_fail+0x6fb/0x860 [ 2773.011887][T29593] ? setup_fault_attr+0x3d0/0x3d0 [ 2773.016985][T29593] ? dst_alloc+0x137/0x4f0 [ 2773.021375][T29593] should_failslab+0x5/0x20 [ 2773.025851][T29593] kmem_cache_alloc+0x36/0x260 [ 2773.030591][T29593] dst_alloc+0x137/0x4f0 [ 2773.034813][T29593] rt_dst_clone+0x53/0x670 [ 2773.039206][T29593] ip_mc_finish_output+0xad/0x3a0 [ 2773.044245][T29593] ip_mc_output+0x3fb/0x9f0 [ 2773.048723][T29593] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2773.054207][T29593] ? nf_hook_slow+0x1a6/0x1f0 [ 2773.058906][T29593] ? ip_mc_output+0x9f0/0x9f0 [ 2773.063562][T29593] ? ip_send_check+0xd0/0xd0 [ 2773.068125][T29593] ? __ip_local_out+0x470/0x470 [ 2773.073007][T29593] ? inet_rtm_getroute+0x2590/0x2590 [ 2773.078265][T29593] ? csum_partial+0x379/0x470 [ 2773.082915][T29593] ? siphash_3u32+0x22/0x240 [ 2773.087484][T29593] ? csum_partial+0x379/0x470 [ 2773.092135][T29593] ip_send_skb+0xaa/0x140 [ 2773.096461][T29593] udp_send_skb+0x8e9/0x1100 [ 2773.101026][T29593] udp_sendpage+0x2f2/0x5c0 [ 2773.105504][T29593] ? udplite_getfrag+0x70/0x70 [ 2773.110248][T29593] ? mutex_lock+0xa6/0x110 [ 2773.114652][T29593] ? inet_send_prepare+0x1b7/0x470 [ 2773.119736][T29593] ? udplite_getfrag+0x70/0x70 [ 2773.124470][T29593] inet_sendpage+0xd7/0x130 [ 2773.128956][T29593] ? inet_sendmsg+0xc0/0xc0 [ 2773.133436][T29593] sock_sendpage+0xd0/0x120 [ 2773.137912][T29593] pipe_to_sendpage+0x23b/0x300 [ 2773.142735][T29593] ? sock_fasync+0xf0/0xf0 [ 2773.147123][T29593] ? generic_splice_sendpage+0x210/0x210 [ 2773.152738][T29593] __splice_from_pipe+0x2d3/0x870 [ 2773.157746][T29593] ? generic_splice_sendpage+0x210/0x210 [ 2773.163350][T29593] generic_splice_sendpage+0x184/0x210 [ 2773.168783][T29593] ? iter_file_splice_write+0xf60/0xf60 [ 2773.174305][T29593] ? security_file_permission+0x128/0x300 [ 2773.179998][T29593] ? iter_file_splice_write+0xf60/0xf60 [ 2773.185519][T29593] __se_sys_splice+0x7ee/0x1b70 [ 2773.190367][T29593] ? fput_many+0x42/0x1a0 [ 2773.194684][T29593] ? ksys_write+0x25d/0x2c0 [ 2773.199160][T29593] ? file_open_root+0x450/0x450 [ 2773.203984][T29593] ? __x64_sys_splice+0xf0/0xf0 [ 2773.208808][T29593] ? __x64_sys_splice+0x1d/0xf0 [ 2773.213662][T29593] do_syscall_64+0xcb/0x150 [ 2773.218153][T29593] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2773.224035][T29593] RIP: 0033:0x45ca59 [ 2773.227904][T29593] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2773.247503][T29593] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2773.255895][T29593] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2773.263850][T29593] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2773.271815][T29593] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2773.279769][T29593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2773.287723][T29593] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:45 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000180)={0x2, 0x6, 0x9}) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x18000, 0x0) 15:27:45 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:46 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 15:27:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r1, 0x4b35, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x4) fchdir(r0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:46 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 15:27:46 executing program 0 (fault-call:11 fault-nth:56): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x20040, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)={0x2, 0x90, "e7c9dc4fef74b9f54cb94cd1dbf0820aa50df427564d1b6d9ec8cb2daba33d5ddb48bf40e15ae326a26f2183f12dec9607f11541f928ba9daf3b623a07c28c60f896ca9736febc58c99ced5967764078a6ebd1821d59eea3a70460f5b39397e94e2de619cef96c408a56c38f4e41dcef633cb6c7e8a1ef2fca7930b17555cbe953598649dbae4b537c2d70f1c8ad1969"}) fchdir(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:46 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0xffffffff, 0xfcf, 0x414}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x2, @random="90df310ec581", 'erspan0\x00'}}, 0x80, 0x0}}, {{&(0x7f0000000100)=@ethernet={0x306}, 0x80, 0x0}}], 0x2, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendmmsg(r3, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="d2d323a6e4ef44720ac14b86a64b60782c54882d6228da879d9f107e856c6fff4efdbb7683d4c58355ea6656488d267ce5ebe0f1a5a39c0a61a29d4e903d0ca3b648323c32066db998865043c810184b1f6422a8bae471945f51ddae15c6a446923558db029dcf8cf8976ae301010000000000009daab1f849594b8bf34676ea8851b022e4e5a22f9dc445f77561f24022f526c3366d6a0194120563399b4d8b59c6d45680a160a0fe0d2fae4fa550f3d5d500c428fea77c038a34671120bfc2d29d5ef19c10447213902d9562f6979065d875fd86267f33cc93f9bf21f339fddfb0e02ec795b3a0b6c1df8017d0e10e36783fbbb598e527d95ccdeb29a93ec036aa04f8a0649c52d6e4b134c2e4b196fd90ff5a0a18a7d9acced339a6af06687236b478", 0x124}], 0x3}}], 0x2, 0x0) pread64(r2, &(0x7f0000000280)=""/221, 0xdd, 0x58b) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r4 = dup3(r1, r3, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000180)=""/61) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='cubic\x00', 0x6) [ 2773.784833][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2773.800274][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2773.804337][T29628] FAULT_INJECTION: forcing a failure. [ 2773.804337][T29628] name failslab, interval 1, probability 0, space 0, times 0 [ 2773.819508][T29628] CPU: 1 PID: 29628 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2773.829637][T29628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2773.839677][T29628] Call Trace: [ 2773.842953][T29628] dump_stack+0x14a/0x1ce [ 2773.847259][T29628] ? devkmsg_release+0x11c/0x11c [ 2773.852168][T29628] ? show_regs_print_info+0x12/0x12 [ 2773.857342][T29628] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2773.863296][T29628] should_fail+0x6fb/0x860 [ 2773.867701][T29628] ? setup_fault_attr+0x3d0/0x3d0 [ 2773.872699][T29628] ? sch_direct_xmit+0x23b/0x970 [ 2773.877609][T29628] ? __qdisc_run+0x245/0x420 [ 2773.882171][T29628] ? __dev_queue_xmit+0x11fa/0x2680 [ 2773.887347][T29628] ? ip_finish_output2+0xbdf/0x1810 [ 2773.892516][T29628] ? ip_mc_output+0x8b5/0x9f0 [ 2773.897165][T29628] ? udp_send_skb+0x8e9/0x1100 [ 2773.901901][T29628] ? udp_sendpage+0x2f2/0x5c0 [ 2773.906556][T29628] ? inet_sendpage+0xd7/0x130 [ 2773.911206][T29628] ? sock_sendpage+0xd0/0x120 [ 2773.915857][T29628] ? ___pskb_trim+0x19d/0xfa0 [ 2773.920516][T29628] should_failslab+0x5/0x20 [ 2773.924992][T29628] __kmalloc_track_caller+0x5d/0x2c0 [ 2773.930251][T29628] ? ___pskb_trim+0x19d/0xfa0 [ 2773.934898][T29628] pskb_expand_head+0x10d/0xfb0 [ 2773.939716][T29628] ? memcpy+0x38/0x50 [ 2773.943670][T29628] ___pskb_trim+0x19d/0xfa0 [ 2773.948147][T29628] sk_filter_trim_cap+0x2bc/0x420 [ 2773.953145][T29628] sock_queue_rcv_skb+0x1f/0x50 [ 2773.957968][T29628] packet_rcv_spkt+0x36b/0x490 [ 2773.962706][T29628] ? packet_rcv+0x1410/0x1410 [ 2773.967366][T29628] dev_queue_xmit_nit+0x36c/0x9e0 [ 2773.972365][T29628] xmit_one+0x7b/0x460 [ 2773.976408][T29628] dev_hard_start_xmit+0xac/0x1b0 [ 2773.981405][T29628] sch_direct_xmit+0x23b/0x970 [ 2773.986139][T29628] ? nvmem_get_mac_address+0x310/0x310 [ 2773.991568][T29628] ? stack_trace_save+0x123/0x1f0 [ 2773.996565][T29628] __qdisc_run+0x245/0x420 [ 2774.000957][T29628] ? sch_direct_xmit+0x970/0x970 [ 2774.005866][T29628] ? pfifo_fast_enqueue+0x36e/0x580 [ 2774.011036][T29628] __dev_queue_xmit+0x11fa/0x2680 [ 2774.016033][T29628] ? dev_queue_xmit+0x20/0x20 [ 2774.020686][T29628] ? ip_finish_output2+0x936/0x1810 [ 2774.025865][T29628] ip_finish_output2+0xbdf/0x1810 [ 2774.030861][T29628] ? ip_fragment+0x210/0x210 [ 2774.035422][T29628] ? __ip_finish_output+0x4e1/0x6d0 [ 2774.040603][T29628] ip_mc_output+0x8b5/0x9f0 [ 2774.045080][T29628] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2774.050513][T29628] ? nf_hook_slow+0x1a6/0x1f0 [ 2774.055163][T29628] ? ip_mc_output+0x9f0/0x9f0 [ 2774.059813][T29628] ? ip_send_check+0xd0/0xd0 [ 2774.064376][T29628] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2774.069632][T29628] ? inet_rtm_getroute+0x2590/0x2590 [ 2774.074907][T29628] ? csum_partial+0x379/0x470 [ 2774.079554][T29628] ? siphash_3u32+0x22/0x240 [ 2774.084115][T29628] ? csum_partial+0x379/0x470 [ 2774.088761][T29628] ip_send_skb+0xaa/0x140 [ 2774.093064][T29628] udp_send_skb+0x8e9/0x1100 [ 2774.097890][T29628] udp_sendpage+0x2f2/0x5c0 [ 2774.102367][T29628] ? udplite_getfrag+0x70/0x70 [ 2774.107104][T29628] ? mutex_lock+0xa6/0x110 [ 2774.111497][T29628] ? inet_send_prepare+0x1b7/0x470 [ 2774.116668][T29628] ? udplite_getfrag+0x70/0x70 [ 2774.121421][T29628] inet_sendpage+0xd7/0x130 [ 2774.125898][T29628] ? inet_sendmsg+0xc0/0xc0 [ 2774.130374][T29628] sock_sendpage+0xd0/0x120 [ 2774.134853][T29628] pipe_to_sendpage+0x23b/0x300 [ 2774.139675][T29628] ? sock_fasync+0xf0/0xf0 [ 2774.144063][T29628] ? generic_splice_sendpage+0x210/0x210 [ 2774.149667][T29628] __splice_from_pipe+0x2d3/0x870 [ 2774.154664][T29628] ? generic_splice_sendpage+0x210/0x210 [ 2774.160269][T29628] generic_splice_sendpage+0x184/0x210 [ 2774.165700][T29628] ? iter_file_splice_write+0xf60/0xf60 [ 2774.171219][T29628] ? security_file_permission+0x128/0x300 [ 2774.176907][T29628] ? iter_file_splice_write+0xf60/0xf60 [ 2774.182446][T29628] __se_sys_splice+0x7ee/0x1b70 [ 2774.187277][T29628] ? fput_many+0x42/0x1a0 [ 2774.191580][T29628] ? ksys_write+0x25d/0x2c0 [ 2774.196057][T29628] ? __x64_sys_splice+0xf0/0xf0 [ 2774.200895][T29628] ? __x64_sys_splice+0x1d/0xf0 [ 2774.205718][T29628] do_syscall_64+0xcb/0x150 [ 2774.210198][T29628] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2774.216062][T29628] RIP: 0033:0x45ca59 [ 2774.219930][T29628] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2774.239507][T29628] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2774.247893][T29628] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2774.255848][T29628] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2774.263795][T29628] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2774.271740][T29628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2774.279686][T29628] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:46 executing program 3: timer_create(0x4, &(0x7f0000000380)={0x0, 0x32, 0x1, @thr={&(0x7f00000001c0)="013486fa69622927d911cfb920acbdeb901c9082b438cfa0a801717912f5f6350c383ac975cdd5c8ccf0b7884724cc6422f98f45cc59b2a76424cec1b941f3a524cde2bb1cbb8d11dfbef832a01e3c24a4d314caf11c3b8a1332543fdb54d31d3f07c49cbd03b10460999cfed60725ae1f5b77ec8a54018a5863ca8b23a3963e9d4858756626a14cab09b700dbe7218ae8e5257d42430047d0868350875d740d266b2f2ce4fd238266ad15f5dd4e8278c559e8d33a06243f9c1d3d5a594c8dd3c802dcb482d146ddd2e400b3f2", &(0x7f00000002c0)="289f937ec5896742ab839c828e03a98dba84c4e4b0cb237605c12997e2945c7c7c4698ab1b1e2509b82a7be45f1dd7b184c0a3a3ba50f6f1b0392a10e978c46e6a48f51b6a2b6e8765740ad3b3bb63f3666fc85d5be121c3b9725484cb11646081e71324566e63eebb69b4d3f70d690538f68ecb7b1c7ad8d9dc1626fc836acaa5"}}, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0xc0c7, 0x7, 0x6, 0x1, 0x4, 0x100007, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x80082102, &(0x7f0000000180)) 15:27:46 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)={0x6c, r3, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0xc0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000004c0)={0x0, 'veth1_to_team\x00', {}, 0x7}) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x270, r3, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xda}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x60}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffff5e}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4b0d4a4c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c46}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}]}, 0x270}}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2774.402104][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2774.410757][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2774.418090][T29643] tipc: Enabling of bearer rejected, failed to enable media [ 2774.585780][T29647] tipc: Enabling of bearer rejected, failed to enable media 15:27:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="3b000000e2", 0x5}, {&(0x7f00000001c0)="0832f497d3835041a54bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284fe8ffe8e7540f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x4b}, {&(0x7f0000001500)="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", 0x183}, {&(0x7f0000000480)="8bc02f6f20001c09eda9e5523da7dcbd5370908c494cdd0e6f0ac42e7ce09787ab0ca7d9ad4e145fcaa9f924f18f65f339a300d35d891b2c7cb2382f8879a63ff90087395429529f33633052b45066445940580584547032f42b4376babb957bc2261eeaaf5b4da2c1df9594a4", 0x6d}, {&(0x7f0000000240)="0f49c707cd38590ef680a3fef0c54c35b902c18ae1d5b402be805dc90ee24fb63897042ded0c79d3e113ae2eba9121730b9db088e4e39e35806bc4f9063be301b9e9e339dc4eda676272faced4ace7c558819a71cfe3ed39fab04d9277e240cccf8285fd34325e2e82da41383f29970a617e4fce184d9f6395661f2fa14ff486250dc15f3641d3c76ebb1fdafa9df1f4f19dd2108c6bb243cc4e7c1c972e38c55eb654ef997eb95c2c89d1a6cc984126cf2a6d2263f586fa98b735067bdfcb16efdb97afee58247cb8ac3c02cc16e7ae4d3188b230b445f861ada2b6b66d203e5fbddbdd67424a5e4da32a0fa323d4484b5b4b60046c5b", 0xf7}, {&(0x7f0000000340)="643471428c0dae82e62c87bdda7774e7f9cb3756ea30f56c448c2f2bc6493bdf17384f8110505ef5b994cf77d470d4925e0ca3c73d442daeb3fd86fc0dcdbd107a2ca633e6174d50ca75bcae59752328bfe77cb53e7358726a2786e57fb587fce76f4e01a330e37f07809006f007dc5009884a07b578d2f82e4778656f2db196859be5974497fbf7cc30e691fc965dd3c7b9e3906bb1169cde79256fe74f37d0246a85a9cab9b5d9fdfd1d16241db8ef137508d5f0de5b355efa64e4f158", 0xbe}, {&(0x7f0000000500)="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", 0x1000}], 0x7, 0x0) ptrace$setopts(0x6, r2, 0x0, 0x100012) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x4000, 0x0) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x2000}], 0x4000, 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x8081, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000180)={0x10000, 0x200}) 15:27:48 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="d2d323a6e4ef44720ac14b86a64b60782c54882d6228da879d9f107e856c6fff4efdbb7683d4c58355ea6656488d267ce5ebe0f1a5a39c0a61a29d4e903d0ca3b648323c32066db998865043c810184b1f6422a8bae471945f51ddae15c6a446923558db029dcf8cf8976ae301010000000000009daab1f849594b8bf34676ea8851b022e4e5a22f9dc445f77561f24022f526c3366d6a0194120563399b4d8b59c6d45680a160a0fe0d2fae4fa550f3d5d500c428fea77c038a34671120bfc2d29d5ef19c10447213902d9562f6979065d875fd86267f33cc93f9bf21f339fddfb0e02ec795b3a0b6c1df8017d0e10e36783fbbb598e527d95ccdeb29a93ec036aa04f8a0649c52d6e4b134c2e4b196fd90ff5a0a18a7d9acced339a6af06687236b478", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 15:27:48 executing program 0 (fault-call:11 fault-nth:57): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x3911, 0x101, 0x4, 0x1000}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)="04fb24862a0c37885dc6cbacb1aae2ff62d34740450172226d410a2defd32cb9c9629318acab917f8a2fea61b359a36a5ec206b7c20b782aa394480442468501d80748e231c62d", 0x47}, {&(0x7f0000000380)="41c57535fc537d7d48e3910f5c13fe661a368b5c4c4de61905c54d27c5e12c4ad6b3e992dc39f7ff3cf0390b28f26cf8ce4bf1bce98d0e65c50ce477398dd20bd467010f089a32c20e26b0eaee4bf300059547", 0x53}, {&(0x7f0000000640)="7eead1ada1f62b2debcd068e3e5db2299652528ed811c9f9702e6a688f62fcda455a5903f0fbbf0703bff1f56b7ddae703f65794ee2c13af7badcac26c7eaf8a98f6d5b30037ece7bc30ef384ed7b75d9981f145cd4841123a9bc3ef88f6eb7720a110abd9af94919a013c6b81b97d70e8e0df86c07e1c644d616aa692461cf972fe6e58313a", 0x86}, {&(0x7f0000000940)="3af86d13a8e5b4fb6c3fa6fd2b3f614001f5cbb561e727fb10c32bdb40a773d17e661d5a015adc64e73465f6f109b0a194077db919f5cf25e099c63cc7e222d7f41579eade34a60f4d9555a8715ecf01db882a5700d72cfaa07882229852b2a5cbf3e325a8e513997ab2a170ded0758b70", 0x71}, {&(0x7f0000000b40)="b44c6818fb274b4bbfc7ed4a382d2651f1106957644c13a32a0cfd2666f8b66efd4f169e679e60a918d2df93365cde3117850c055ef0be125e477196ac4eb0d789b91807060cbb32b58c1c00f20697957322d89b421f747d7dfb25fc3b9fd890992b1bfb0eaf85d3a3e4af6a1870cb71844ed25882c61a1f8d3ff859aaeadae4f1c51385252c8c347e90bcae85afd29c40d949e3197e0056f352130577fd4a347a4bcac878107fb3ee2ec22bd17e78c9c3a95a4419e28421540415b3dc006e54af495fd8886e5e722d7a67766d40b8289c1958a26d20dec8afe95064e122044c1698", 0xe2}], 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x218}}], 0x2, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000200)={0x6, 'team0\x00', {0x3}, 0xfff}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'veth0_to_bridge\x00', {0x2, 0x4e24, @loopback}}) sendmmsg(r1, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=0x0) sched_getattr(r4, &(0x7f00000002c0)={0x38}, 0x38, 0x0) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1000, 0x80, 0x5, 0x5, 0x36e0, 0x1ff, 0xb7}, 0x1c) 15:27:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400203) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2775.977646][T29659] FAT-fs (loop4): bogus number of reserved sectors [ 2775.984504][T29659] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2776.023369][T29670] FAULT_INJECTION: forcing a failure. [ 2776.023369][T29670] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.036121][T29670] CPU: 1 PID: 29670 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2776.047374][T29670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.057411][T29670] Call Trace: [ 2776.060699][T29670] dump_stack+0x14a/0x1ce [ 2776.065017][T29670] ? devkmsg_release+0x11c/0x11c [ 2776.069937][T29670] ? __kernel_text_address+0x93/0x110 [ 2776.075293][T29670] ? show_regs_print_info+0x12/0x12 [ 2776.080469][T29670] ? unwind_get_return_address+0x48/0x90 [ 2776.086077][T29670] ? arch_stack_walk+0xd8/0x120 [ 2776.090909][T29670] should_fail+0x6fb/0x860 [ 2776.095336][T29670] ? setup_fault_attr+0x3d0/0x3d0 [ 2776.100334][T29670] ? stack_trace_save+0x123/0x1f0 [ 2776.105350][T29670] ? stack_trace_snprint+0x150/0x150 [ 2776.110618][T29670] ? __alloc_skb+0x88/0x4d0 [ 2776.115097][T29670] should_failslab+0x5/0x20 [ 2776.119603][T29670] kmem_cache_alloc+0x36/0x260 [ 2776.124341][T29670] __alloc_skb+0x88/0x4d0 [ 2776.128642][T29670] ? __kasan_kmalloc+0x189/0x1c0 [ 2776.133554][T29670] alloc_skb_with_frags+0xb1/0x580 [ 2776.138642][T29670] ? sock_sendpage+0xd0/0x120 [ 2776.143301][T29670] ? pipe_to_sendpage+0x23b/0x300 [ 2776.148296][T29670] ? __splice_from_pipe+0x2d3/0x870 [ 2776.153465][T29670] ? generic_splice_sendpage+0x184/0x210 [ 2776.159071][T29670] ? do_syscall_64+0xcb/0x150 [ 2776.163731][T29670] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2776.169791][T29670] sock_alloc_send_pskb+0x87e/0xcc0 [ 2776.174965][T29670] ? sock_kzfree_s+0x50/0x50 [ 2776.180060][T29670] ? rt_set_nexthop+0x48b/0x1140 [ 2776.184979][T29670] __ip_append_data+0x1fb9/0x3170 [ 2776.190002][T29670] ? ip_do_fragment+0x22c0/0x22c0 [ 2776.195008][T29670] ? inet_rtm_getroute+0x2590/0x2590 [ 2776.200287][T29670] ? ip_setup_cork+0x810/0x810 [ 2776.205022][T29670] ? ip_setup_cork+0x46b/0x810 [ 2776.209763][T29670] ? sock_def_destruct+0x10/0x10 [ 2776.214679][T29670] ip_append_data+0x12c/0x1a0 [ 2776.219339][T29670] ? ip_do_fragment+0x22c0/0x22c0 [ 2776.224342][T29670] udp_sendmsg+0x3ef/0x2f40 [ 2776.228824][T29670] ? update_misfit_status+0x5e0/0x5e0 [ 2776.234167][T29670] ? ip_do_fragment+0x22c0/0x22c0 [ 2776.239170][T29670] ? udp_cmsg_send+0x340/0x340 [ 2776.243911][T29670] ? perf_pmu_sched_task+0x370/0x370 [ 2776.249198][T29670] ? find_next_bit+0xf7/0x120 [ 2776.253846][T29670] ? finish_task_switch+0x2be/0x4c0 [ 2776.259025][T29670] udp_sendpage+0x110/0x5c0 [ 2776.263502][T29670] ? udplite_getfrag+0x70/0x70 [ 2776.268236][T29670] ? mutex_lock+0xa6/0x110 [ 2776.272624][T29670] ? inet_send_prepare+0x1b7/0x470 [ 2776.277707][T29670] ? udplite_getfrag+0x70/0x70 [ 2776.282441][T29670] inet_sendpage+0xd7/0x130 [ 2776.286927][T29670] ? inet_sendmsg+0xc0/0xc0 [ 2776.291411][T29670] sock_sendpage+0xd0/0x120 [ 2776.295889][T29670] pipe_to_sendpage+0x23b/0x300 [ 2776.300713][T29670] ? sock_fasync+0xf0/0xf0 [ 2776.305104][T29670] ? generic_splice_sendpage+0x210/0x210 [ 2776.310709][T29670] __splice_from_pipe+0x2d3/0x870 [ 2776.315708][T29670] ? generic_splice_sendpage+0x210/0x210 [ 2776.321314][T29670] generic_splice_sendpage+0x184/0x210 [ 2776.326766][T29670] ? iter_file_splice_write+0xf60/0xf60 [ 2776.332303][T29670] ? security_file_permission+0x128/0x300 [ 2776.337994][T29670] ? iter_file_splice_write+0xf60/0xf60 [ 2776.343513][T29670] __se_sys_splice+0x7ee/0x1b70 [ 2776.348341][T29670] ? fput_many+0x42/0x1a0 [ 2776.352659][T29670] ? ksys_write+0x25d/0x2c0 [ 2776.357136][T29670] ? file_open_root+0x450/0x450 [ 2776.361967][T29670] ? __x64_sys_splice+0xf0/0xf0 [ 2776.366794][T29670] ? __x64_sys_splice+0x1d/0xf0 [ 2776.371617][T29670] do_syscall_64+0xcb/0x150 [ 2776.376098][T29670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2776.381963][T29670] RIP: 0033:0x45ca59 [ 2776.385829][T29670] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2776.405406][T29670] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2776.413808][T29670] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 15:27:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0xffffffffffffcc1a) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000240)=0x4) 15:27:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_CREATE(r2, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000000)=""/12, 0xc, 0x100, 0x1000, 0x3, 0x2, 0x200}}, 0x120) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x24ba1dc5}) [ 2776.421754][T29670] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2776.429701][T29670] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2776.437647][T29670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2776.445592][T29670] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000180)=0x6e, 0x0) sendmmsg(r2, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d0000000000fdff1be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0xffffffffffffff2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc350389edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec380000000cd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x80) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="62127c1a0282aa6977f521848b15fd3f", 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:48 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x7, 0x5, 0x0, 0x1202}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x2000, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x7ff, 0x3, 0x3, 0x2}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = dup2(r0, r3) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000005304020029bdfc3dd9e392afafab5987a8607d5f875fd17221e80f66264ab3ddfa9f6d77000000005218e55f24470636c3051b68a6f136362584fb857c5ff166acff7b7b4672c0f05eaac929572d3925f61fa0a1c6e8d2058eaffbec3d00c8b795df73712c45d7010eb707d01a95863cfe8fe4887ee6aeaf3a7e3f8779d15e6d6b63fecc2cc086719ff5bc6eb26a0f379aa435e09920e6ebce4cd35d380826ccbf898f0f87a1d0881df4a84d0101d82d3547fe7767d7573c"], 0x2c}}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x81, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000180)=""/118, &(0x7f0000000000)=0x76) [ 2776.569809][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2776.579418][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) 15:27:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000240)='wg2\x00', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x800000000440200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x11, 0x800000003, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={@private1={0xfc, 0x1, [], 0x1}, @private1, @empty, 0x1, 0x0, 0x7ff, 0x0, 0x7f, 0x40140070}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000180), &(0x7f0000000280)=0x4) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0xfffffffe, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:49 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() 15:27:49 executing program 0 (fault-call:11 fault-nth:58): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2776.889244][T29718] FAULT_INJECTION: forcing a failure. [ 2776.889244][T29718] name failslab, interval 1, probability 0, space 0, times 0 [ 2776.902017][T29718] CPU: 1 PID: 29718 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2776.912206][T29718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2776.922239][T29718] Call Trace: [ 2776.925525][T29718] dump_stack+0x14a/0x1ce [ 2776.929836][T29718] ? devkmsg_release+0x11c/0x11c [ 2776.934751][T29718] ? show_regs_print_info+0x12/0x12 [ 2776.939937][T29718] should_fail+0x6fb/0x860 [ 2776.944387][T29718] ? setup_fault_attr+0x3d0/0x3d0 [ 2776.949432][T29718] ? alloc_skb_with_frags+0xb1/0x580 [ 2776.954704][T29718] should_failslab+0x5/0x20 [ 2776.959189][T29718] __kmalloc_track_caller+0x5d/0x2c0 [ 2776.964453][T29718] ? kmem_cache_alloc+0x1d5/0x260 [ 2776.969463][T29718] ? alloc_skb_with_frags+0xb1/0x580 [ 2776.974724][T29718] __alloc_skb+0xd1/0x4d0 [ 2776.979030][T29718] ? __kasan_kmalloc+0x189/0x1c0 [ 2776.983940][T29718] alloc_skb_with_frags+0xb1/0x580 [ 2776.989026][T29718] ? sock_sendpage+0xd0/0x120 [ 2776.993674][T29718] ? pipe_to_sendpage+0x23b/0x300 [ 2776.998667][T29718] ? __splice_from_pipe+0x2d3/0x870 [ 2777.003836][T29718] ? generic_splice_sendpage+0x184/0x210 [ 2777.009443][T29718] ? do_syscall_64+0xcb/0x150 [ 2777.014091][T29718] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.020132][T29718] sock_alloc_send_pskb+0x87e/0xcc0 [ 2777.025306][T29718] ? sock_kzfree_s+0x50/0x50 [ 2777.029869][T29718] ? rt_set_nexthop+0x48b/0x1140 [ 2777.034777][T29718] __ip_append_data+0x1fb9/0x3170 [ 2777.039774][T29718] ? ip_do_fragment+0x22c0/0x22c0 [ 2777.044779][T29718] ? inet_rtm_getroute+0x2590/0x2590 [ 2777.050059][T29718] ? ip_setup_cork+0x810/0x810 [ 2777.054805][T29718] ? ip_setup_cork+0x46b/0x810 [ 2777.059546][T29718] ? sock_def_destruct+0x10/0x10 [ 2777.064460][T29718] ip_append_data+0x12c/0x1a0 [ 2777.069118][T29718] ? ip_do_fragment+0x22c0/0x22c0 [ 2777.074118][T29718] udp_sendmsg+0x3ef/0x2f40 [ 2777.078602][T29718] ? update_misfit_status+0x5e0/0x5e0 [ 2777.083943][T29718] ? ip_do_fragment+0x22c0/0x22c0 [ 2777.088940][T29718] ? udp_cmsg_send+0x340/0x340 [ 2777.093683][T29718] ? perf_pmu_sched_task+0x370/0x370 [ 2777.098955][T29718] ? find_next_bit+0xf7/0x120 [ 2777.103609][T29718] ? finish_task_switch+0x2be/0x4c0 [ 2777.108788][T29718] udp_sendpage+0x110/0x5c0 [ 2777.113265][T29718] ? udplite_getfrag+0x70/0x70 [ 2777.118003][T29718] ? mutex_lock+0xa6/0x110 [ 2777.122395][T29718] ? inet_send_prepare+0x1b7/0x470 [ 2777.127479][T29718] ? udplite_getfrag+0x70/0x70 [ 2777.132217][T29718] inet_sendpage+0xd7/0x130 [ 2777.136735][T29718] ? inet_sendmsg+0xc0/0xc0 [ 2777.141237][T29718] sock_sendpage+0xd0/0x120 [ 2777.145712][T29718] pipe_to_sendpage+0x23b/0x300 [ 2777.150538][T29718] ? sock_fasync+0xf0/0xf0 [ 2777.154966][T29718] ? generic_splice_sendpage+0x210/0x210 [ 2777.160596][T29718] __splice_from_pipe+0x2d3/0x870 [ 2777.165595][T29718] ? generic_splice_sendpage+0x210/0x210 [ 2777.171210][T29718] generic_splice_sendpage+0x184/0x210 [ 2777.176642][T29718] ? iter_file_splice_write+0xf60/0xf60 [ 2777.182163][T29718] ? security_file_permission+0x128/0x300 [ 2777.187870][T29718] ? iter_file_splice_write+0xf60/0xf60 [ 2777.193395][T29718] __se_sys_splice+0x7ee/0x1b70 [ 2777.198222][T29718] ? fput_many+0x42/0x1a0 [ 2777.202523][T29718] ? ksys_write+0x25d/0x2c0 [ 2777.207006][T29718] ? file_open_root+0x450/0x450 [ 2777.211828][T29718] ? __x64_sys_splice+0xf0/0xf0 [ 2777.216649][T29718] ? __x64_sys_splice+0x1d/0xf0 [ 2777.221472][T29718] do_syscall_64+0xcb/0x150 [ 2777.225973][T29718] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2777.231845][T29718] RIP: 0033:0x45ca59 [ 2777.235713][T29718] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2777.255289][T29718] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2777.263676][T29718] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2777.271624][T29718] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2777.279579][T29718] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2777.287524][T29718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2777.295469][T29718] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0x5, 0x8, 0x5, 0x81, 0x101}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) flistxattr(r4, &(0x7f0000000180)=""/135, 0x87) 15:27:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="e948ea1e5c090000000000000018953c000000", @ANYRES16=r2, @ANYBLOB="000027bd7000ffdbdf250f0000000500370000000000050037000100000008003b004000000008000b002b0200000600280000800000"], 0x3c}, 0x1, 0x0, 0x0, 0x20e1}, 0x841) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RATTACH(r5, &(0x7f0000000340)={0x14, 0x69, 0x1, {0x11, 0x4, 0x4}}, 0x14) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="d404650496fa924ebc40cf7f570f77e2b099c70cb0ad3d722eaa080e7b25a9d7f5f3e746f3b08419dc597f02db4d2978ce", @ANYRES16=r2, @ANYBLOB="000327bd7000fcdbdf25110000000500370001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0, 0xfffffffffffffcde}}], 0x4a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) r9 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 15:27:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x12000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x24ba1dc0}) [ 2777.470167][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2777.478936][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000180)=0x10000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:27:51 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:51 executing program 0 (fault-call:11 fault-nth:59): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15, 0x5, 0x2}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_enter(r4, 0x8, 0x8, 0x1, &(0x7f0000000180)={[0x6]}, 0x8) sendmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$9p(r4, &(0x7f0000000140)="81ea621280db5dc63e15bb1961a107fb5bd21f6e0700526cdb0d95d7021a230f140c1e381df8dd850b815050aac07aed0f1b85c3d40487a62091f72bec9cc8d06a5bcdb722e5a673716a8484cac8fe068e98495cd41205b6df04794ccf02a7fdfac853c831bb871c020f0a309e558962e9355f8344f82214ef693bb1a99f49d7797fc8ce48ce66d210ab1d374975c17dd68b62d93cddb8aad93036304d11f8f54b9055a4414143f9eb59ce0a830435edecff0f82ab89ad3ca1a56d840878642460a315322e555abc607293a290062e62", 0xd0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000002c0)="d173ef96b47ac483ec20da36229324534576c19009a3df2f0c980790dd063f6cd83b4d95bdd6ce687999b0156b9e837d5b48f5622c005ee0643f54691eda", 0x3e}, {&(0x7f0000000300)="1b9649a8d794dc3e8e4bb321019511dc5df26e9a0b90cb6974f527cc14538df53f6d9da1c871c34ecd6d97032c1efb1ffe03284f6d33265be9c6beeb2aa4c457ac37a3a3f1cedf14866c500fcecd80000000000000", 0x55}], 0x2, 0xd) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x4, &(0x7f00000002c0)) ptrace$cont(0x7, r2, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r6) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="02000000010000000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="040003000000000008000400", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="d03fb0c7", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="10000700000000002000060000000000"], 0x84, 0x0) 15:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000000), 0x290084, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2779.130082][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2779.139068][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2779.148107][T29764] FAULT_INJECTION: forcing a failure. [ 2779.148107][T29764] name failslab, interval 1, probability 0, space 0, times 0 [ 2779.161221][T29764] CPU: 0 PID: 29764 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2779.171399][T29764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2779.181490][T29764] Call Trace: [ 2779.184773][T29764] dump_stack+0x14a/0x1ce [ 2779.189101][T29764] ? devkmsg_release+0x11c/0x11c [ 2779.194020][T29764] ? show_regs_print_info+0x12/0x12 [ 2779.199192][T29764] should_fail+0x6fb/0x860 [ 2779.203583][T29764] ? setup_fault_attr+0x3d0/0x3d0 [ 2779.208581][T29764] ? skb_clone+0x1b2/0x370 [ 2779.212987][T29764] should_failslab+0x5/0x20 [ 2779.217463][T29764] kmem_cache_alloc+0x36/0x260 [ 2779.222197][T29764] skb_clone+0x1b2/0x370 [ 2779.226413][T29764] ip_mc_output+0x1d1/0x9f0 [ 2779.230892][T29764] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2779.236323][T29764] ? nf_hook_slow+0x1a6/0x1f0 [ 2779.240976][T29764] ? __ip_local_out+0x33b/0x470 [ 2779.245797][T29764] ? ip_send_check+0xd0/0xd0 [ 2779.250365][T29764] ? __ip_local_out+0x470/0x470 [ 2779.255186][T29764] ? inet_rtm_getroute+0x2590/0x2590 [ 2779.260451][T29764] ? csum_partial+0x379/0x470 [ 2779.265124][T29764] ? siphash_3u32+0x22/0x240 [ 2779.269686][T29764] ? csum_partial+0x379/0x470 [ 2779.274336][T29764] ip_send_skb+0xaa/0x140 [ 2779.278646][T29764] udp_send_skb+0x8e9/0x1100 [ 2779.283225][T29764] udp_sendpage+0x2f2/0x5c0 [ 2779.287708][T29764] ? udplite_getfrag+0x70/0x70 [ 2779.292443][T29764] ? mutex_lock+0xa6/0x110 [ 2779.296844][T29764] ? inet_send_prepare+0x1b7/0x470 [ 2779.301930][T29764] ? udplite_getfrag+0x70/0x70 [ 2779.306662][T29764] inet_sendpage+0xd7/0x130 [ 2779.311156][T29764] ? inet_sendmsg+0xc0/0xc0 [ 2779.315639][T29764] sock_sendpage+0xd0/0x120 [ 2779.320128][T29764] pipe_to_sendpage+0x23b/0x300 [ 2779.324967][T29764] ? sock_fasync+0xf0/0xf0 [ 2779.329354][T29764] ? generic_splice_sendpage+0x210/0x210 [ 2779.334967][T29764] __splice_from_pipe+0x2d3/0x870 [ 2779.339968][T29764] ? generic_splice_sendpage+0x210/0x210 [ 2779.345568][T29764] generic_splice_sendpage+0x184/0x210 [ 2779.350999][T29764] ? iter_file_splice_write+0xf60/0xf60 [ 2779.356521][T29764] ? security_file_permission+0x128/0x300 [ 2779.362210][T29764] ? iter_file_splice_write+0xf60/0xf60 [ 2779.367753][T29764] __se_sys_splice+0x7ee/0x1b70 [ 2779.372594][T29764] ? fput_many+0x42/0x1a0 [ 2779.376897][T29764] ? ksys_write+0x25d/0x2c0 [ 2779.381372][T29764] ? file_open_root+0x450/0x450 [ 2779.386203][T29764] ? __x64_sys_splice+0xf0/0xf0 [ 2779.391048][T29764] ? __x64_sys_splice+0x1d/0xf0 [ 2779.395896][T29764] do_syscall_64+0xcb/0x150 [ 2779.400374][T29764] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2779.406238][T29764] RIP: 0033:0x45ca59 [ 2779.410104][T29764] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2779.429679][T29764] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2779.438062][T29764] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2779.446007][T29764] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2779.453955][T29764] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2779.461901][T29764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2779.469847][T29764] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3ff, 0x0, 0x80, 0x5}, 'syz0\x00', 0x44}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x103002, 0x154) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x3, 0x9, 0x3f, 0x8001, 0x1, 0x7ff, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000f00), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="24e4eb9ddcf9fab476cc9080922c11dd460097feb48ead53bde640831c08e9f19050ff74467d3bde5b49ebd756bae04de52a497c23e2fd5316d3eecf51b3cbf02a998e852a8990e195115cbbd25991d2dbc8c7ea136e9bdb8e55d1261c868a13756964a9f92d6d31ea3f", @ANYRES16=r3, @ANYBLOB="00012bbd7000ffdbdf2509000000080031000800000008002b0002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000001240)="882f2d6daf32791b931a4941b210a0acab888300674bfa72449709d92f9602992444f521ea2d941b7472eb5e754505e8b0731c270adfb395d2f8ae134eddd71ba06343ef26e30a859c28a8cb23593e5edbf68749dfb32caf20c2e1bdc9bc7cfe96770cca375659f2e12b00ad8ee7aa4373c8b5b0140445e7f30d5eb9f702ad94372cdad82103a7e42c694d5bdf81b9fb49abf582020907d5b6f83caa7163ab806e33783a07a5cbdb84d4a593f2bf74ffa3062d69915c8c8be8635ed1d5017dedff0af6") ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x1ff, &(0x7f0000000180)="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") ptrace$cont(0x7, r4, 0x0, 0x0) r5 = getpgrp(r4) ioprio_get$pid(0x2, r5) [ 2779.607008][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2779.615895][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xffffffffffffff7f, 0x101000) accept4(r0, &(0x7f0000000200)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, &(0x7f0000000300)=0x80, 0x800) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) dup(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r1, 0x401}, {0xffffffffffffffff, 0x7203}, {}, {r2, 0x80}, {r4, 0x120}, {r5, 0x4}], 0x6, 0x401) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2779.654307][T17452] usb 4-1: new high-speed USB device number 8 using dummy_hcd 15:27:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000000)=0x5, 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x4000000000000, 0x24ba1dc0}) 15:27:52 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) [ 2779.934277][T17452] usb 4-1: Using ep0 maxpacket: 8 [ 2780.094341][T17452] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2780.103468][T17452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2780.112482][T17452] usb 4-1: config 0 descriptor?? [ 2780.634316][T17452] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2780.644730][T17452] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2780.656771][T17452] asix: probe of 4-1:0.0 failed with error -71 [ 2780.663544][T17452] usb 4-1: USB disconnect, device number 8 [ 2781.434175][T17682] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 2781.674148][T17682] usb 4-1: Using ep0 maxpacket: 8 [ 2781.794225][T17682] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2781.803401][T17682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2781.812554][T17682] usb 4-1: config 0 descriptor?? 15:27:54 executing program 0 (fault-call:11 fault-nth:60): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:54 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) creat(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x145863, 0x9) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execveat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x100) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'\x00', {0x2, 0x4e21, @multicast2}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000300)=0x2) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) sendmmsg(r6, &(0x7f0000000f00), 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6428f060a9b92e6e"], &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x2002, &(0x7f0000000200)='%-\x00') 15:27:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x800000}], 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/65, 0x41) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) r3 = gettid() r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f00000001c0)=[0xffffff81, 0x100]) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x3, &(0x7f0000000140)="ff587ef66ec98df07e747c57e7b79b8f9b878f3948153bd961cc48b177f360e02266261babe74414311379fd31934193e19030d822a1cc4635562b7b06f9ff799e35de7e439a26d6e4caa3381a5c8ddf42fde021f3f30262d066bbe71bbd96c172799cde91bc238eb391") ptrace$cont(0x7, r2, 0x0, 0x0) 15:27:54 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="d2d323a6e4ef44720ac14b86a64b60782c54882d6228da879d9f107e856c6fff4efdbb7683d4c58355ea6656488d267ce5ebe0f1a5a39c0a61a29d4e903d0ca3b648323c32066db998865043c810184b1f6422a8bae471945f51ddae15c6a446923558db029dcf8cf8976ae301010000000000009daab1f849594b8bf34676ea8851b022e4e5a22f9dc445f77561f24022f526c3366d6a0194120563399b4d8b59c6d45680a160a0fe0d2fae4fa550f3d5d500c428fea77c038a34671120bfc2d29d5ef19c10447213902d9562f6979065d875fd86267f33cc93f9bf21f339fddfb0e02ec795b3a0b6c1df8017d0e10e36783fbbb598e527d95ccdeb29a93ec036aa04f8a0649c52d6e4b134c2e4b196fd90ff5a0a18a7d9acced339a6af06687236b478", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x1, 0x2}}, 0x80, 0x0}}], 0x2, 0xc000) 15:27:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000a80)}}, {{0x0, 0x0, &(0x7f0000000200)}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2782.254178][T17682] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2782.266571][T17682] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2782.282912][T29828] FAT-fs (loop4): bogus number of reserved sectors [ 2782.287315][T17682] asix: probe of 4-1:0.0 failed with error -71 [ 2782.289818][T29828] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x44}], 0x18008, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x6c, 0x101100) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000002c0)=""/228) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2782.300570][T17682] usb 4-1: USB disconnect, device number 9 [ 2782.312892][T29840] FAULT_INJECTION: forcing a failure. [ 2782.312892][T29840] name failslab, interval 1, probability 0, space 0, times 0 [ 2782.327360][T29840] CPU: 1 PID: 29840 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2782.337551][T29840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2782.347599][T29840] Call Trace: [ 2782.350870][T29840] dump_stack+0x14a/0x1ce [ 2782.355182][T29840] ? devkmsg_release+0x11c/0x11c [ 2782.360110][T29840] ? show_regs_print_info+0x12/0x12 [ 2782.365283][T29840] should_fail+0x6fb/0x860 [ 2782.369679][T29840] ? setup_fault_attr+0x3d0/0x3d0 [ 2782.374679][T29840] ? skb_clone+0x1b2/0x370 [ 2782.379085][T29840] should_failslab+0x5/0x20 [ 2782.383566][T29840] kmem_cache_alloc+0x36/0x260 [ 2782.388307][T29840] skb_clone+0x1b2/0x370 [ 2782.392527][T29840] ip_mc_output+0x1d1/0x9f0 [ 2782.397005][T29840] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2782.402436][T29840] ? nf_hook_slow+0x1a6/0x1f0 [ 2782.407084][T29840] ? __ip_local_out+0x33b/0x470 [ 2782.411909][T29840] ? ip_send_check+0xd0/0xd0 [ 2782.416471][T29840] ? __ip_local_out+0x470/0x470 [ 2782.421295][T29840] ? inet_rtm_getroute+0x2590/0x2590 [ 2782.426553][T29840] ? csum_partial+0x379/0x470 [ 2782.431203][T29840] ? siphash_3u32+0x22/0x240 [ 2782.435766][T29840] ? csum_partial+0x379/0x470 [ 2782.440421][T29840] ip_send_skb+0xaa/0x140 [ 2782.444734][T29840] udp_send_skb+0x8e9/0x1100 [ 2782.449306][T29840] udp_sendpage+0x2f2/0x5c0 [ 2782.453784][T29840] ? udplite_getfrag+0x70/0x70 [ 2782.458519][T29840] ? mutex_lock+0xa6/0x110 [ 2782.462908][T29840] ? inet_send_prepare+0x1b7/0x470 [ 2782.468010][T29840] ? udplite_getfrag+0x70/0x70 [ 2782.472744][T29840] inet_sendpage+0xd7/0x130 [ 2782.477220][T29840] ? inet_sendmsg+0xc0/0xc0 [ 2782.481729][T29840] sock_sendpage+0xd0/0x120 [ 2782.486207][T29840] pipe_to_sendpage+0x23b/0x300 [ 2782.491031][T29840] ? sock_fasync+0xf0/0xf0 [ 2782.495432][T29840] ? generic_splice_sendpage+0x210/0x210 [ 2782.501059][T29840] __splice_from_pipe+0x2d3/0x870 [ 2782.506179][T29840] ? generic_splice_sendpage+0x210/0x210 [ 2782.511812][T29840] generic_splice_sendpage+0x184/0x210 [ 2782.517247][T29840] ? iter_file_splice_write+0xf60/0xf60 [ 2782.522771][T29840] ? security_file_permission+0x128/0x300 [ 2782.528460][T29840] ? iter_file_splice_write+0xf60/0xf60 [ 2782.533978][T29840] __se_sys_splice+0x7ee/0x1b70 [ 2782.538802][T29840] ? fput_many+0x42/0x1a0 [ 2782.543104][T29840] ? ksys_write+0x25d/0x2c0 [ 2782.547585][T29840] ? file_open_root+0x450/0x450 [ 2782.552417][T29840] ? __x64_sys_splice+0xf0/0xf0 [ 2782.557253][T29840] ? __x64_sys_splice+0x1d/0xf0 [ 2782.562077][T29840] do_syscall_64+0xcb/0x150 [ 2782.566560][T29840] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2782.572446][T29840] RIP: 0033:0x45ca59 [ 2782.576330][T29840] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2782.595920][T29840] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2782.604309][T29840] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2782.612253][T29840] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2782.620197][T29840] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2782.628144][T29840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2782.636103][T29840] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x2, 0x49, "ad718c7674def65081a2d44d851ac60128c7fb004ff33b32634297a3310cf4d9b1719a0dd43215f8f83a4cdb1b4cd6849b14204326f6d20b8bf5e01135985c9009b3fbc724be1cd289"}) fsetxattr$security_capability(r3, &(0x7f0000000000)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0xfffffffe, 0x1}]}, 0xc, 0x0) [ 2782.724557][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2782.745644][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:55 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1f}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7ff}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x10}, 0x4041) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2782.861676][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2782.870605][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:55 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:55 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xcc, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8acf}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1f}}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x880) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7000000025f298d2af8353ee22be3a5a909be1cd22be31da423312401fab69f2c94ec706a4eae67271cd9b46d7641ba4b560e3808b1db5b827424f21fe5c7091", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf250b0000000800090001ac0f00090007002411cde0a000000004000b000800370002000000110007002c49e8da75256d4adccaa15398000000080037000100000018006e8004000200040001000400010004000200040002000800090001ac0f00"], 0x70}, 0x1, 0x0, 0x0, 0xc040}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pwritev(r7, &(0x7f0000000a80)=[{&(0x7f0000000440)="28a11288106f36cac4a5948b892e4b53cff7cd276f8dd9298bb1e7c278bad03c8387d6a4316d644fa95df667b76e660bc18f0d6b531dcb889fcc29f8815e80fa7d3c12332f9d73c56fee7c36fd9b08b50b1511bbf401901ad27ddc2ff478d61f0409483d3d462bd2293c24ce7628c5373029ddb373229cda009a0503749edcda52a93ec169ebfad3477f80bf61f044c46d0a50db101a92d726093b291d", 0x9d}, {&(0x7f0000000500)="c6e3920c55bea4d4e2757c89f26a307ca18f70442ec53f2a2a254951a8aba5520052d00353ee46b8aea890c218f6ff4827f1aac4846bc697e16e683c10f95b95c6f0e6399b6224bc86c6dedb9c719f899f9a2050711b425d60962496962e2057e8214d861e4421fae699999508b0c7281875e224c4aee646e01b3b6dfeadf9b97ea2b1bb1d31eb862224dd8ab13f87997abc8b3edf522cf525795025c59fa7ab735973d86ff37212f19e4808", 0xac}, {&(0x7f00000005c0)="6ce20e9eec4926722b70798fc688e6bca6989ac88932c6b77fff87e617b5e46ca177324384a36deeafa7", 0x2a}, {&(0x7f0000000600)="5d058387aa3e13a4703f32b3be536bc17d43b57c5338fe0c4a963fb9a2708bdf310c18b275510893c320f158d45c0b85b0bf8aed20535eb148546a3809008c17706aa47a6a0465665cd3eb2bc503af7fb8dddb8e328b0e49c0acedc16f5e1272ba90b9969354468e301721091281b70248227d10eee6d55c971f847861fc522fb2ce5bdf49039c4466c8270e34040a43551ee0c511be594f", 0x98}, {&(0x7f00000006c0)="e8d1f4d9b2ea4f", 0x7}, {&(0x7f0000000700)="999e96a5f414c99462bb2fbc5da2a6695486f4dbc23aaa88dd7de9cff3982ed1113e76db7018fa3be42e5ad508500137f7fe5d979c191eb61764cf8181dc530df496ae5c7ff136d1040418f5d43a8b9e65c237170bf04331e74a5ed28621ef284ed675f208bc980d9eb91a06c4104416b7a966c13cc7d180e74cec20fe3e33b9666c2eaabe5baea71fa6897a39c223c7870cfc94533bc4d6b18cfffe86de8ef768919cf7742693752ecf033f35", 0xad}, {&(0x7f00000007c0)="47b8d988f9adebc6cb07241e95b82e38704d7734ba7f3540ef1d7462ff5526a0e32f56a9c2ef48124eaad45579cf43f380f32a1a3cf366eede85449ae34bfd6eb947ca0aa5f352337d56b3eefb70e017e1c2ad3dda6eb69162b7f2a8e9984761585e23026c8bf537fd9fcb2817f368964f8d2156007ec07167b81a5a6f7c38c8f161af911ecd79905f7bc588f65f3822857e1da2b996ffb750ac6c7f49aaf4c8f0195b5c", 0xa4}, {&(0x7f0000000880)="520d7103c5ee8eb92d4f21df69029112680f72fc9e591f9cabb38cb5c81ffde1115dc37fb9ae70849e8990195a334eb870c8f03c2b4b6a20415752b5541deacb2737e52f7036e05abe90103fc34cd33b4bbcc841e36a2756c03aed340ae523cde5d7c62d08c3bc4c13b7ec2918bbad6c3e318d8468d4120b67367d970d737422a5cccf4f807bb1ca78a876f3779b1bc4a51dd45a94e066ef9752323c7f8574fc667bf5f5af3e5eb502d420a49df5d1b956e3fd0f91ca89a36c262b82592b9cdd14a4d47282627f2c9ca7e68e3a24759e76ef", 0xd2}, {&(0x7f0000000980)="a527e24f6bac2541da79dfbcc3966be9b64ec63c6436c778b92d027e9ba3d1e368bb70f67cd412d2a9a267f4910296bba0b9578e6786be50710c5a340d3d2d616894f70db343fda2a3ad1aefe5f841ef3787f0adea2a6825e11938c640b7988809afa87c9de627b6735104d0d49771bd079e7815d806ae354554bcd02c4fda04aac27ec080c7274ab38f0522961b9ac7055950a496b0e03cc77e316c9ff1cdf11908d204bd1eae65e08d2d548a1ead82a607cb72d364285668221c424c564a88429f795185a50b47b25ff175311dd2e1726e5d5728ee29b0a619e92a357e352a511302fdbbada89e4be197845d07", 0xee}], 0x9, 0x5) r8 = dup(r5) fcntl$setflags(r2, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000200)={0x30, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x3}, @exit_looper, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @release={0x40046306, 0x1}, @dead_binder_done], 0xb7, 0x0, &(0x7f0000000380)="840c502b5bce1b5040dddf84d8bd51be51d8340be5e0eeba99e9731175ac042aefabdcb6b3b287ad7e15743e5c519c889d78c4ca394de5946e014577e431660d7d2b91ab6683d352ac1a6af22d2136058a4602fbfe69504356c27b1a043e7e68259385704b9091a38d104df91d8fad4d4fecf27cec5aa418247ec37021d23593c8a86e48f10774a92cf219879cf305cb6b0beb8a96efcdb66b9991ac8328804a7d6e8b56a50d6566fb8da375936af587d3e7e7c85a4cb1"}) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@caif=@dbg={0x25, 0x81, 0x1f}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:27:55 executing program 0 (fault-call:11 fault-nth:61): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:55 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x81, 0xb6, 0x0, 0xc3c}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000180)) 15:27:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020401ed01000270fff8f989b3df2fdf366e7140e659418e589864bdbbe594239b34938bca9623498cb3fa84cf07abbb4433341d162f3ca8db98ff69afcd007dd91190723d9640b5e7fb8b715f240bc9302a11e8e366a63f93caf9f78950ed2656f3952eeeb3e1371321bf6ea256c0cbae2cd69780486a4ec57676292b0dc1d28fb90b584fa077d07868debaa4c0bb86ad57e7cd", 0xa0}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r5, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x76cc}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80001) sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x9c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x36}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7ff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2783.196770][T29881] FAULT_INJECTION: forcing a failure. [ 2783.196770][T29881] name failslab, interval 1, probability 0, space 0, times 0 [ 2783.209432][T29881] CPU: 0 PID: 29881 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2783.219571][T29881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2783.229620][T29881] Call Trace: [ 2783.232916][T29881] dump_stack+0x14a/0x1ce [ 2783.237242][T29881] ? devkmsg_release+0x11c/0x11c [ 2783.242175][T29881] ? __kmalloc_track_caller+0x201/0x2c0 [ 2783.247712][T29881] ? show_regs_print_info+0x12/0x12 [ 2783.249137][T29884] FAT-fs (loop4): count of clusters too big (9042174) [ 2783.252931][T29881] ? __ip_append_data+0x1fb9/0x3170 [ 2783.252941][T29881] ? udp_sendmsg+0x3ef/0x2f40 [ 2783.252948][T29881] ? memset+0x1f/0x40 [ 2783.252961][T29881] should_fail+0x6fb/0x860 [ 2783.259966][T29884] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2783.264911][T29881] ? setup_fault_attr+0x3d0/0x3d0 [ 2783.264922][T29881] ? arch_stack_walk+0xb8/0x120 [ 2783.264932][T29881] ? skb_clone+0x1b2/0x370 [ 2783.264940][T29881] should_failslab+0x5/0x20 [ 2783.264949][T29881] kmem_cache_alloc+0x36/0x260 [ 2783.264957][T29881] skb_clone+0x1b2/0x370 [ 2783.264967][T29881] dev_queue_xmit_nit+0x279/0x9e0 [ 2783.264973][T29881] ? validate_xmit_skb+0x630/0xc60 [ 2783.264984][T29881] xmit_one+0x7b/0x460 [ 2783.326256][T29881] dev_hard_start_xmit+0xac/0x1b0 [ 2783.331263][T29881] sch_direct_xmit+0x23b/0x970 [ 2783.336011][T29881] ? nvmem_get_mac_address+0x310/0x310 [ 2783.341469][T29881] ? stack_trace_save+0x123/0x1f0 [ 2783.346499][T29881] __qdisc_run+0x245/0x420 [ 2783.350909][T29881] ? sch_direct_xmit+0x970/0x970 [ 2783.355835][T29881] ? pfifo_fast_enqueue+0x36e/0x580 [ 2783.361009][T29881] __dev_queue_xmit+0x11fa/0x2680 [ 2783.366009][T29881] ? dev_queue_xmit+0x20/0x20 [ 2783.370662][T29881] ? ip_finish_output2+0x936/0x1810 [ 2783.375843][T29881] ip_finish_output2+0xbdf/0x1810 [ 2783.380847][T29881] ? ip_fragment+0x210/0x210 [ 2783.385411][T29881] ? __ip_finish_output+0x4e1/0x6d0 [ 2783.390581][T29881] ip_mc_output+0x8b5/0x9f0 [ 2783.395057][T29881] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2783.400502][T29881] ? nf_hook_slow+0x1a6/0x1f0 [ 2783.405165][T29881] ? ip_mc_output+0x9f0/0x9f0 [ 2783.409819][T29881] ? ip_send_check+0xd0/0xd0 [ 2783.414382][T29881] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2783.419642][T29881] ? inet_rtm_getroute+0x2590/0x2590 [ 2783.424900][T29881] ? csum_partial+0x379/0x470 [ 2783.429549][T29881] ? siphash_3u32+0x22/0x240 [ 2783.434112][T29881] ? csum_partial+0x379/0x470 [ 2783.438871][T29881] ip_send_skb+0xaa/0x140 [ 2783.443190][T29881] udp_send_skb+0x8e9/0x1100 [ 2783.447766][T29881] udp_sendpage+0x2f2/0x5c0 [ 2783.452288][T29881] ? udplite_getfrag+0x70/0x70 [ 2783.457035][T29881] ? mutex_lock+0xa6/0x110 [ 2783.461477][T29881] ? inet_send_prepare+0x1b7/0x470 [ 2783.466584][T29881] ? udplite_getfrag+0x70/0x70 [ 2783.471432][T29881] inet_sendpage+0xd7/0x130 [ 2783.475920][T29881] ? inet_sendmsg+0xc0/0xc0 [ 2783.480396][T29881] sock_sendpage+0xd0/0x120 [ 2783.484874][T29881] pipe_to_sendpage+0x23b/0x300 [ 2783.489698][T29881] ? sock_fasync+0xf0/0xf0 [ 2783.494089][T29881] ? generic_splice_sendpage+0x210/0x210 [ 2783.499692][T29881] __splice_from_pipe+0x2d3/0x870 [ 2783.504690][T29881] ? generic_splice_sendpage+0x210/0x210 [ 2783.510294][T29881] generic_splice_sendpage+0x184/0x210 [ 2783.515779][T29881] ? iter_file_splice_write+0xf60/0xf60 [ 2783.521300][T29881] ? security_file_permission+0x128/0x300 [ 2783.526991][T29881] ? iter_file_splice_write+0xf60/0xf60 [ 2783.532513][T29881] __se_sys_splice+0x7ee/0x1b70 [ 2783.537345][T29881] ? fput_many+0x42/0x1a0 [ 2783.541648][T29881] ? ksys_write+0x25d/0x2c0 [ 2783.546124][T29881] ? file_open_root+0x450/0x450 [ 2783.550946][T29881] ? __x64_sys_splice+0xf0/0xf0 [ 2783.555768][T29881] ? __x64_sys_splice+0x1d/0xf0 [ 2783.560592][T29881] do_syscall_64+0xcb/0x150 [ 2783.565340][T29881] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2783.571215][T29881] RIP: 0033:0x45ca59 [ 2783.575088][T29881] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2783.594671][T29881] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2783.603058][T29881] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2783.611006][T29881] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2783.618960][T29881] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2783.626976][T29881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2783.634923][T29881] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2783.691869][T29884] FAT-fs (loop4): count of clusters too big (9042174) [ 2783.699219][T29884] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0x7}], 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd) write$binfmt_script(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="2302"], 0x16c) close(r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffff57a, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617454f8", 0xd}, {&(0x7f0000000000), 0x0, 0x80000001}], 0x2404, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') fchdir(r0) fsetxattr$security_ima(r0, &(0x7f0000000440)='security.ima\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="03020000000000000012a9a91f93b5480b3fd0c6954c295df800"], 0x26, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xc0, r4, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6e}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0xc0}}, 0x810) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendfile(r2, r0, 0x0, 0xec) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000180)) [ 2783.768447][T29900] FAT-fs (loop4): invalid media value (0x01) [ 2783.774590][T29900] FAT-fs (loop4): Can't find a valid FAT filesystem 15:27:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x110) 15:27:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000280)) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x3c}}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4004080) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000240)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x11, 0x800000003, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x841, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x3, 0x3, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp={0x2c, 0x0, r7}, 0x80, 0x0}}], 0x2, 0x0) 15:27:57 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) dup(r0) wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:57 executing program 0 (fault-call:11 fault-nth:62): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:27:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x5, 0x1, 0x1, 0x4}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x64000815) 15:27:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x100000000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$cont(0x7, r3, 0x8, 0x8) 15:27:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) sendmsg$sock(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)="e73c7a228174fb0e", 0x8}, {&(0x7f00000001c0)="22dd744d2a227439dbe812503cb693071f2f49e01066ee4555ed0e470666f8d7d0c2103341fcc0830cd1627282f80f7c86", 0x31}, {&(0x7f0000000200)="41819728af1bcaf74462a9d3087f8adc9de349695a15a39ef628f895ddbe8f3b3c91bb7d96693e1350625a68cda4e34ce5182601ff80ed31565f7569a5a76733da99846d1f6fd93780083546f6ad0c14404084d4f3eec53f4aa28a3fc964c02c9f880b8b23427c262eb5654388092650b8b4b973da4904fde718200f9ebdc058ae94730c15a1d4c5ad9dc2645eb8ca333fdcfd5092529eb4424977fd77cbb322d8f2ae2118710fe7a952d40df4d8ce48c9e69359bfd1b1f64f90f8a8218fb31b0b2e02b73c068518739578a5fdee8e9fe68728e76d7bceefc7815e26260de5da7d33d6f7477c1fd1028fa8eba2013232a10905e87328a1375240ccbf40", 0xfd}, {&(0x7f0000000300)="dbae4b7bca1a810b4d9323c3cd608b6c6a48de5beef35ffff3b798dcceeec4", 0x1f}, {&(0x7f0000000340)="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", 0x1000}], 0x5}, 0x40000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000140)={0x20, 0xffff320c, 0x401}, 0xc) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2785.349169][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2785.362646][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2785.373194][T29942] FAULT_INJECTION: forcing a failure. [ 2785.373194][T29942] name failslab, interval 1, probability 0, space 0, times 0 [ 2785.385836][T29942] CPU: 1 PID: 29942 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2785.395973][T29942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2785.406021][T29942] Call Trace: [ 2785.409318][T29942] dump_stack+0x14a/0x1ce [ 2785.413649][T29942] ? devkmsg_release+0x11c/0x11c [ 2785.418585][T29942] ? __se_sys_splice+0x7ee/0x1b70 [ 2785.423597][T29942] ? show_regs_print_info+0x12/0x12 [ 2785.428768][T29942] should_fail+0x6fb/0x860 [ 2785.433178][T29942] ? setup_fault_attr+0x3d0/0x3d0 [ 2785.438175][T29942] ? alloc_skb_for_msg+0x220/0x220 [ 2785.443257][T29942] ? skb_clone+0x1b2/0x370 [ 2785.447661][T29942] should_failslab+0x5/0x20 [ 2785.452142][T29942] kmem_cache_alloc+0x36/0x260 [ 2785.456880][T29942] skb_clone+0x1b2/0x370 [ 2785.461098][T29942] packet_rcv_spkt+0x129/0x490 [ 2785.465835][T29942] ? skb_clone+0x1f4/0x370 [ 2785.470221][T29942] ? packet_rcv+0x1410/0x1410 [ 2785.474874][T29942] dev_queue_xmit_nit+0x36c/0x9e0 [ 2785.479876][T29942] xmit_one+0x7b/0x460 [ 2785.483920][T29942] dev_hard_start_xmit+0xac/0x1b0 [ 2785.488919][T29942] sch_direct_xmit+0x23b/0x970 [ 2785.493655][T29942] ? nvmem_get_mac_address+0x310/0x310 [ 2785.499087][T29942] ? stack_trace_save+0x123/0x1f0 [ 2785.504101][T29942] __qdisc_run+0x245/0x420 [ 2785.508491][T29942] ? sch_direct_xmit+0x970/0x970 [ 2785.513522][T29942] ? pfifo_fast_enqueue+0x36e/0x580 [ 2785.518694][T29942] __dev_queue_xmit+0x11fa/0x2680 [ 2785.523692][T29942] ? dev_queue_xmit+0x20/0x20 [ 2785.528346][T29942] ? ip_finish_output2+0x936/0x1810 [ 2785.533515][T29942] ip_finish_output2+0xbdf/0x1810 [ 2785.538513][T29942] ? ip_fragment+0x210/0x210 [ 2785.543075][T29942] ? __ip_finish_output+0x4e1/0x6d0 [ 2785.548244][T29942] ip_mc_output+0x8b5/0x9f0 [ 2785.552718][T29942] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2785.558168][T29942] ? nf_hook_slow+0x1a6/0x1f0 [ 2785.562817][T29942] ? ip_mc_output+0x9f0/0x9f0 [ 2785.567474][T29942] ? ip_send_check+0xd0/0xd0 [ 2785.572035][T29942] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2785.577291][T29942] ? inet_rtm_getroute+0x2590/0x2590 [ 2785.582546][T29942] ? csum_partial+0x379/0x470 [ 2785.587193][T29942] ? siphash_3u32+0x22/0x240 [ 2785.591776][T29942] ? csum_partial+0x379/0x470 [ 2785.596425][T29942] ip_send_skb+0xaa/0x140 [ 2785.600727][T29942] udp_send_skb+0x8e9/0x1100 [ 2785.605293][T29942] udp_sendpage+0x2f2/0x5c0 [ 2785.609768][T29942] ? udplite_getfrag+0x70/0x70 [ 2785.614504][T29942] ? mutex_lock+0xa6/0x110 [ 2785.618897][T29942] ? inet_send_prepare+0x1b7/0x470 [ 2785.623979][T29942] ? udplite_getfrag+0x70/0x70 [ 2785.628739][T29942] inet_sendpage+0xd7/0x130 [ 2785.633213][T29942] ? inet_sendmsg+0xc0/0xc0 [ 2785.637690][T29942] sock_sendpage+0xd0/0x120 [ 2785.642167][T29942] pipe_to_sendpage+0x23b/0x300 [ 2785.646988][T29942] ? sock_fasync+0xf0/0xf0 [ 2785.651375][T29942] ? generic_splice_sendpage+0x210/0x210 [ 2785.656998][T29942] __splice_from_pipe+0x2d3/0x870 [ 2785.661996][T29942] ? generic_splice_sendpage+0x210/0x210 [ 2785.667600][T29942] generic_splice_sendpage+0x184/0x210 [ 2785.673138][T29942] ? iter_file_splice_write+0xf60/0xf60 [ 2785.678659][T29942] ? security_file_permission+0x128/0x300 [ 2785.684348][T29942] ? iter_file_splice_write+0xf60/0xf60 [ 2785.689863][T29942] __se_sys_splice+0x7ee/0x1b70 [ 2785.694707][T29942] ? fput_many+0x42/0x1a0 [ 2785.699009][T29942] ? ksys_write+0x25d/0x2c0 [ 2785.703483][T29942] ? file_open_root+0x450/0x450 [ 2785.708304][T29942] ? __x64_sys_splice+0xf0/0xf0 [ 2785.713348][T29942] ? __x64_sys_splice+0x1d/0xf0 [ 2785.718181][T29942] do_syscall_64+0xcb/0x150 [ 2785.722668][T29942] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2785.728547][T29942] RIP: 0033:0x45ca59 15:27:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB='\x00'/16], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x140, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x972d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62394eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c59c968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cf}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb87cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34679816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2007}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f6cb5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0541d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39075d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x546dcc37}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a2ea6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5782d45f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354dd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83c0d4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddffda1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r4, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5513f30d}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x8005) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) keyctl$set_timeout(0xf, 0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000000)=""/63) 15:27:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) getsockopt(r3, 0x969b, 0x100, &(0x7f0000000180)=""/182, &(0x7f0000000240)=0xb6) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2785.732420][T29942] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2785.752002][T29942] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2785.760387][T29942] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2785.768330][T29942] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2785.776277][T29942] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2785.784220][T29942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2785.792163][T29942] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:27:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000580)={0x1, 0x0, 0x2, 0xb7a, r2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) syz_usb_connect$cdc_ecm(0x0, 0x1de, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1cc, 0x1, 0x1, 0x3, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "16b8044ed6c1"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x7ff, 0x9, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0x8, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x0, 0x34dd}, @mdlm_detail={0x64, 0x24, 0x13, 0x1, "a14018938668e20c0020ceb060b6924556084c827baf7504785c8662feaa07350786b0c88c45a55bb1f1ae6ed55ebf52d6eb3791272d5b5a06aa39d5ec5f401b130cbcbadf2cc18f514a7d8f7bd87a0e43034d91daee9253133fed632f7cf8c2"}, @mdlm_detail={0x103, 0x24, 0x13, 0x1, "c2855678b0792b49fe735b0bc7827e1ccdf9def6b24841bf2020c1947dcbe8a77c9a58609b9f920e00b648ee82865d631e33514b724142ea27c5c935e00eb069a4fcddfa18a8259c5f633d7345b62d53c6a3a5edb8325807d23c8fcfa5723bb9490f3d2b4aff4702b2bc9b01cd74bee907129bab419a866221aff49b18aafb0246f42d6d66418e2c82be6ee342f953104e9b627e2b0b0c2bca940a0142648a2856b06b05800b68dcf5cb99a3579579fa776e05a87e36323565fbad1c66c887e822ed763b2cf8a9d9f59a543f987d71b63edcbb128bb8bfeb7643be0c5b79919304128375cdc4cd0cd92fbe17dfb6132782c44e308e6b773a3aee1cc454d373"}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x6, 0x4, 0x80}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x49}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x3f, 0x9, 0x63}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xff, 0x54, 0x1}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x8, 0x6, 0xbe, 0xff, 0x5b}, 0xf6, &(0x7f0000000680)={0x5, 0xf, 0xf6, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8c, "acc19496a35529e290b5e402dde262ae"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x1, 0x1000}, @generic={0xd6, 0x10, 0x2, "18c2b7fbc53a7041c874b02b6b4a52248e759de4e3dbef83497fbb22fd913fffeaf66e18765886b1762355c78e3602f6dc5e0831addefd950fba370b0336c68f3db9453a5d51beb61c1f80dc2c7f7326e4913f60459f555c92e2e5e6e3d5fe3380e587bef77c94e62ea41b4346f31752e02e29eab297d1cc26b20a325dc71a5874fd67a089d3f4aa7c3c465d971623d46612a2469f39c99238ca6b110c26d32542e396b3256de56de6b956b9d4985c56a03ae5e24b09e5187a0f158188a70e02241def4019c285434cf1f0c3196a639162efe7"}]}, 0x2, [{0x4f, &(0x7f0000000480)=@string={0x4f, 0x3, "0eebd519713153e53c5f6c8c658777ae549c443c7f99b2f3e1c7ba0e267c90a55369e72a03d0e5ab425b638c8ca6f38af140d177593857466bd3069727b99b4cd4a07bc0764c9489189ef4944f"}}, {0xb5, &(0x7f00000005c0)=@string={0xb5, 0x3, "3845bc12caef1742a6eb3093f5be05f7fde7172570fe87e9345540756ecc4bfa01e9b440e56a9dc1003a0ac815dfd82368a990c1618e87540ee798b826a3eb4ef81e635aa1b3a4b2a003bc5bcfb86197523d8d7e9d49cb76d91dc9c3221acfd5dc3548be785662d191f19dcbf6f54938b306dcecbcaf8feef78914494410429ba4cc83a6b9714c93300962616177c2b246221f1bc5ace3ae7f9d69792cebb5c553cd3c12996465996cfc9fb188cc85848d0b2c"}}]}) 15:27:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6(0xa, 0x4, 0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$binfmt_elf32(r2, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xff, 0x6, 0x20, 0x9, 0x0, 0x51ad53a6a8cb97b1, 0x2, 0x3cc, 0x38, 0x8c, 0x0, 0x9, 0x20, 0x1, 0x8, 0x4, 0xfe6e}, [{0x2, 0x76, 0x10001, 0xe47, 0x5, 0x7, 0x3}], "a58493a870308715c47d4badc57d81e177a17b19a4c79b9b90047de215f93ffb630db99ad42292ad7b76ccc2c72ab6c7800293272def77c1052d82e270ca16b8b0b7f11b859494c7879ac0adca2ffafcbb71a73ba99e92e5ac3bec6d2d4cef76c12a6e3945612d6621f54ee207ab7914c58793c279cb9d898bb08eae4ec90dda45298e037982c4025a0e4c16ee4b032bd7b9acf47706541b46e19ca2a1f3e59096408b4b480085319b8e5cd2b9be4723807823351f6c6d8aac7e6049d4332215cabb03c0bf10409b5ff750c41dca17e2e9abcbeef34be6f6b79a5f1a7d064c8fc1984aa83af41294a9", [[], [], [], [], [], [], [], []]}, 0x941) dup(r1) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@generic={0x29, "1986a4394ecdfe7ca3dd3e1d4378fb8f42eda1feb2a4b0acd6798b85e86acb391b05fbac060cd6974ad5dcb77f65582f3aaa0f54148c15c23143c56da7a4d6bb13824468f8eab62176b079d67d5500a1da32ad9d63610959e515bc884ff3f30030446b04dcd713687bd34729c5db5c5f9eda75c4a40db0134ba96238c9d8"}, 0x80, 0x0, 0x6}}, {{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x9, @local, 0x0, 0x1}, 0x80, 0x0}}], 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0x4b, 0x1, 0x1, "e74ba47b180ad77f0ac2baa066fbf05a", "5676ceefddacdcf972794c344e5f24981e3a898d8dff17062c824866a1f69e656da7a9d98ae68c1b2dc897f4b0b084cb3fbcaae02f5b"}, 0x4b, 0x3) [ 2785.910799][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2785.920204][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}, {&(0x7f0000000180)="04b7803308ebf2e848140712cabd42fa4052191ce43fedfe14b873c943f0c56b42fe85ec5f1007e1940f50f40886b61697d87015033aa1e434771275478066cc915c8d6830296b8594a9f17fe7ebded7725dc894f22c0decea5a6290270597847eab85d9b36b40740f989807e71b17b264", 0x71, 0x40}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:27:58 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 15:27:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x1800000, 0x80000001, 0x3}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8001, 0x942, 0x0, 0x4, 0x1a, 0x19, "eab89e24fd63fd8415411b2373b54caac926f6436c44f8db1759aa87022adca8f9f3d669a11988d8801f58369e62845dca24c5214af28f6e9fb1fa93ad889952", "4122278369ed192afd7952c4f0eaf2d767eb89410b9f5f6d0185e47377f8bd61717fa1fad505abca609d72561c4575be02feb0ff1050db7753adcdc4a345b20e", "affee1138a24d63a74ec8042937b67b6469d73d2ceea6cbf9f72065ec00e4781", [0x2]}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:58 executing program 0 (fault-call:11 fault-nth:63): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2786.083369][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2786.092115][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:27:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000000)={0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x10001) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, [], [{0x4, 0xfffff357, 0x200, 0x9, 0x7, 0x6}, {0x933, 0x3, 0x4, 0x8000, 0x7, 0xcd02}], [[], []]}) fchdir(r0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:27:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x8, 0x9000000, 0x1, 0x5}, 0x10) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2786.188874][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2786.202322][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2786.211202][T30010] FAULT_INJECTION: forcing a failure. [ 2786.211202][T30010] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.223843][T30010] CPU: 0 PID: 30010 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2786.233970][T30010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2786.244001][T30010] Call Trace: [ 2786.247306][T30010] dump_stack+0x14a/0x1ce [ 2786.251617][T30010] ? devkmsg_release+0x11c/0x11c [ 2786.256532][T30010] ? show_regs_print_info+0x12/0x12 [ 2786.261704][T30010] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2786.267667][T30010] should_fail+0x6fb/0x860 [ 2786.272059][T30010] ? setup_fault_attr+0x3d0/0x3d0 [ 2786.277056][T30010] ? sch_direct_xmit+0x23b/0x970 [ 2786.281971][T30010] ? __qdisc_run+0x245/0x420 [ 2786.286535][T30010] ? __dev_queue_xmit+0x11fa/0x2680 [ 2786.291707][T30010] ? ip_finish_output2+0xbdf/0x1810 [ 2786.296881][T30010] ? ip_mc_output+0x8b5/0x9f0 [ 2786.302229][T30010] ? udp_send_skb+0x8e9/0x1100 [ 2786.306968][T30010] ? udp_sendpage+0x2f2/0x5c0 [ 2786.311618][T30010] ? inet_sendpage+0xd7/0x130 [ 2786.316270][T30010] ? sock_sendpage+0xd0/0x120 [ 2786.320922][T30010] ? ___pskb_trim+0x19d/0xfa0 [ 2786.325581][T30010] should_failslab+0x5/0x20 [ 2786.330254][T30010] __kmalloc_track_caller+0x5d/0x2c0 [ 2786.335513][T30010] ? ___pskb_trim+0x19d/0xfa0 [ 2786.340165][T30010] pskb_expand_head+0x10d/0xfb0 [ 2786.343822][T17452] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2786.344996][T30010] ? memcpy+0x38/0x50 [ 2786.345008][T30010] ___pskb_trim+0x19d/0xfa0 [ 2786.345025][T30010] sk_filter_trim_cap+0x2bc/0x420 [ 2786.365894][T30010] sock_queue_rcv_skb+0x1f/0x50 [ 2786.370722][T30010] packet_rcv_spkt+0x36b/0x490 [ 2786.375462][T30010] ? packet_rcv+0x1410/0x1410 [ 2786.380115][T30010] dev_queue_xmit_nit+0x36c/0x9e0 [ 2786.385172][T30010] xmit_one+0x7b/0x460 [ 2786.389221][T30010] dev_hard_start_xmit+0xac/0x1b0 [ 2786.394272][T30010] sch_direct_xmit+0x23b/0x970 [ 2786.399009][T30010] ? nvmem_get_mac_address+0x310/0x310 [ 2786.404444][T30010] ? stack_trace_save+0x123/0x1f0 [ 2786.409444][T30010] __qdisc_run+0x245/0x420 [ 2786.413838][T30010] ? sch_direct_xmit+0x970/0x970 [ 2786.418770][T30010] ? pfifo_fast_enqueue+0x36e/0x580 [ 2786.423960][T30010] __dev_queue_xmit+0x11fa/0x2680 [ 2786.428971][T30010] ? dev_queue_xmit+0x20/0x20 [ 2786.433634][T30010] ? ip_finish_output2+0x936/0x1810 [ 2786.438822][T30010] ip_finish_output2+0xbdf/0x1810 [ 2786.443838][T30010] ? ip_fragment+0x210/0x210 [ 2786.448402][T30010] ? __ip_finish_output+0x4e1/0x6d0 [ 2786.453576][T30010] ip_mc_output+0x8b5/0x9f0 [ 2786.458103][T30010] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2786.463540][T30010] ? nf_hook_slow+0x1a6/0x1f0 [ 2786.468203][T30010] ? ip_mc_output+0x9f0/0x9f0 [ 2786.472862][T30010] ? ip_send_check+0xd0/0xd0 [ 2786.477441][T30010] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2786.482708][T30010] ? inet_rtm_getroute+0x2590/0x2590 [ 2786.487968][T30010] ? csum_partial+0x379/0x470 [ 2786.492731][T30010] ? siphash_3u32+0x22/0x240 [ 2786.497298][T30010] ? csum_partial+0x379/0x470 [ 2786.501953][T30010] ip_send_skb+0xaa/0x140 [ 2786.506262][T30010] udp_send_skb+0x8e9/0x1100 [ 2786.510836][T30010] udp_sendpage+0x2f2/0x5c0 [ 2786.515320][T30010] ? udplite_getfrag+0x70/0x70 [ 2786.520058][T30010] ? mutex_lock+0xa6/0x110 [ 2786.524451][T30010] ? inet_send_prepare+0x1b7/0x470 [ 2786.529535][T30010] ? udplite_getfrag+0x70/0x70 [ 2786.534334][T30010] inet_sendpage+0xd7/0x130 [ 2786.538812][T30010] ? inet_sendmsg+0xc0/0xc0 [ 2786.543448][T30010] sock_sendpage+0xd0/0x120 [ 2786.547934][T30010] pipe_to_sendpage+0x23b/0x300 [ 2786.552764][T30010] ? sock_fasync+0xf0/0xf0 [ 2786.557168][T30010] ? generic_splice_sendpage+0x210/0x210 [ 2786.562787][T30010] __splice_from_pipe+0x2d3/0x870 [ 2786.567793][T30010] ? generic_splice_sendpage+0x210/0x210 [ 2786.573565][T30010] generic_splice_sendpage+0x184/0x210 [ 2786.579003][T30010] ? iter_file_splice_write+0xf60/0xf60 [ 2786.583779][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2786.584528][T30010] ? security_file_permission+0x128/0x300 [ 2786.584536][T30010] ? iter_file_splice_write+0xf60/0xf60 [ 2786.584547][T30010] __se_sys_splice+0x7ee/0x1b70 [ 2786.605624][T30010] ? fput_many+0x42/0x1a0 [ 2786.609930][T30010] ? ksys_write+0x25d/0x2c0 [ 2786.614552][T30010] ? file_open_root+0x450/0x450 [ 2786.619439][T30010] ? __x64_sys_splice+0xf0/0xf0 [ 2786.624270][T30010] ? __x64_sys_splice+0x1d/0xf0 [ 2786.629112][T30010] do_syscall_64+0xcb/0x150 [ 2786.633601][T30010] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2786.639470][T30010] RIP: 0033:0x45ca59 [ 2786.643346][T30010] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2786.662934][T30010] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2786.671538][T30010] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2786.679493][T30010] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2786.687452][T30010] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2786.695404][T30010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2786.703362][T30010] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2786.703881][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2786.720856][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2786.730405][T17452] usb 2-1: config 0 descriptor?? [ 2786.785290][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2786.802511][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2787.253767][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2787.263672][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2787.275734][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2787.282768][T17452] usb 2-1: USB disconnect, device number 6 15:28:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed6d680270fff8", 0x10}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSETMODE(r2, 0x4b3a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0xffffffffffffffff, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x44, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x880) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48804}, 0x40000) 15:28:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000140)) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sendmsg$AUDIT_SET(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x3e9, 0x1, 0x70bd2c, 0x25dfdbff, {0x1, 0x0, 0x2, r2, 0x1405838b, 0x80000000, 0x100, 0x4, 0x0, 0x3}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0xc804}, 0x40090) 15:28:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 15:28:00 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:00 executing program 0 (fault-call:11 fault-nth:64): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) [ 2788.334223][T30038] FAT-fs (loop4): bogus number of FAT structure [ 2788.340714][T30038] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2788.397559][T30048] FAULT_INJECTION: forcing a failure. [ 2788.397559][T30048] name failslab, interval 1, probability 0, space 0, times 0 [ 2788.410479][T30048] CPU: 1 PID: 30048 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2788.416396][T30038] FAT-fs (loop4): bogus number of FAT structure [ 2788.420620][T30048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2788.420625][T30048] Call Trace: [ 2788.420643][T30048] dump_stack+0x14a/0x1ce [ 2788.420652][T30048] ? devkmsg_release+0x11c/0x11c [ 2788.420672][T30048] ? show_regs_print_info+0x12/0x12 [ 2788.444835][T30038] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2788.449444][T30048] ? stack_trace_save+0x123/0x1f0 [ 2788.449455][T30048] should_fail+0x6fb/0x860 [ 2788.449463][T30048] ? setup_fault_attr+0x3d0/0x3d0 [ 2788.449478][T30048] ? dst_alloc+0x137/0x4f0 [ 2788.480040][T30048] should_failslab+0x5/0x20 [ 2788.484533][T30048] kmem_cache_alloc+0x36/0x260 [ 2788.489293][T30048] dst_alloc+0x137/0x4f0 [ 2788.493572][T30048] ? __dev_queue_xmit+0x1501/0x2680 [ 2788.498765][T30048] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2788.504754][T30048] ? ip_route_output_key_hash+0x220/0x220 [ 2788.510447][T30048] ip_route_output_flow+0x150/0x2a0 [ 2788.515620][T30048] ? _local_bh_enable+0x30/0x30 [ 2788.520455][T30048] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2788.525903][T30048] ? __rcu_read_lock+0x50/0x50 [ 2788.530643][T30048] ? ip_finish_output2+0xbe6/0x1810 [ 2788.535814][T30048] ? selinux_sk_getsecid+0x24/0xb0 [ 2788.540953][T30048] udp_sendmsg+0x1803/0x2f40 [ 2788.545536][T30048] ? update_misfit_status+0x5e0/0x5e0 [ 2788.550895][T30048] ? ip_do_fragment+0x22c0/0x22c0 [ 2788.555900][T30048] ? udp_cmsg_send+0x340/0x340 [ 2788.560651][T30048] ? perf_pmu_sched_task+0x370/0x370 [ 2788.565914][T30048] ? find_next_bit+0xf7/0x120 [ 2788.570562][T30048] ? finish_task_switch+0x2be/0x4c0 [ 2788.575736][T30048] udp_sendpage+0x110/0x5c0 [ 2788.580220][T30048] ? udplite_getfrag+0x70/0x70 [ 2788.584958][T30048] ? mutex_lock+0xa6/0x110 [ 2788.589349][T30048] ? inet_send_prepare+0x1b7/0x470 [ 2788.594433][T30048] ? udplite_getfrag+0x70/0x70 [ 2788.599169][T30048] inet_sendpage+0xd7/0x130 [ 2788.603655][T30048] ? inet_sendmsg+0xc0/0xc0 [ 2788.608138][T30048] sock_sendpage+0xd0/0x120 [ 2788.612699][T30048] pipe_to_sendpage+0x23b/0x300 [ 2788.617671][T30048] ? sock_fasync+0xf0/0xf0 [ 2788.622072][T30048] ? generic_splice_sendpage+0x210/0x210 [ 2788.627682][T30048] __splice_from_pipe+0x2d3/0x870 [ 2788.632835][T30048] ? generic_splice_sendpage+0x210/0x210 [ 2788.638453][T30048] generic_splice_sendpage+0x184/0x210 [ 2788.643891][T30048] ? iter_file_splice_write+0xf60/0xf60 [ 2788.649414][T30048] ? security_file_permission+0x128/0x300 [ 2788.655115][T30048] ? iter_file_splice_write+0xf60/0xf60 [ 2788.660652][T30048] __se_sys_splice+0x7ee/0x1b70 [ 2788.665491][T30048] ? fput_many+0x42/0x1a0 [ 2788.669799][T30048] ? ksys_write+0x25d/0x2c0 [ 2788.674463][T30048] ? file_open_root+0x450/0x450 [ 2788.679294][T30048] ? __x64_sys_splice+0xf0/0xf0 [ 2788.684120][T30048] ? __x64_sys_splice+0x1d/0xf0 [ 2788.688947][T30048] do_syscall_64+0xcb/0x150 [ 2788.693439][T30048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2788.699312][T30048] RIP: 0033:0x45ca59 [ 2788.703182][T30048] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2788.722851][T30048] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2788.731246][T30048] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2788.739197][T30048] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 15:28:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@initdev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000001680)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x200, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000300)="e4e410fc3e64106dc8a764273530964fdc59593c5abcdd731927e6637d304c7e4c8576c3a90393b38ca3c134ac6dd8d52e069bd6ad008529b140197ffd986fe5735c7c9baa69cd673f5ee68297d23064ee82a2865e93b4944d375e5adefe5562d18efb2fe3373e02e00edd2681c52f63949b478b986cfd4551c3ff4cb9ae07957f9c8a911919a33408a8c7c7934461603f566b34ecc85d1874a047440055ea3a57c69a3f09721d83f0b2c32cfea6d4d888befb6d00a6233f37fe00db1cd3fb2066df56b05037cc7f65babf274e0a6ee5d46caf1242c7c23002c9fa47bf298e15e4876a994e40a000263c8e9c7033af3f5dd2c5facabd0c9c95d60fefb7d188b5119f8ca55b4684f02a96c17983f13187f9ab81ffbbb16121f998fb5eba87c3afcd73b69dfba4e9bc982c5fa5e61a3f92f78f3f3c34104969b5ab2fe7090fd722ff7a55d12866d106619b2ac47c7c9d710fe0e01e2f43eea8b575d0e353358ffe141d3143f34a2366376f2ac3082ad1803b3fce6700c10772249913b543fd892394972848770d2166537b8ddfc7dd9a606b1ad4563254b6b3b0c4632b92aba42c1d72029a3e1720c07396578f69ac0b12177c29203a2eea828c36b5ef18b7e8309f7a3251a0f340df22acae67ec1ae6bc1aac7ba186269f523e2f3824483e7b26189a04e0277fddc993525274c5498759885bb19bbb413758aecf3651b49bd6353e2d214675f0ecd69236d8854a2e3a88534e49ba076ed844a215f550ace5ee15b94e679ab5fac072d306e829402edf435ab2153b91103c0301191c50d18d0583d997cbc931a478622e8880036c3bc58e64810157818d59a1dc3a078bd69f3581551fdd1f833fb0b74f199c0514e9856c576d5a8b00d0bd3d8e1dd3a8f455a91d05b202786a94759415e6cebf221cd3b7292f6ed649fd36d3a66dfa8a7837c20ebde7b57fbfffbbf5129646fbfec31093aebff9612df3ab6df8d1f0368ebe0fdda012ab0d587931ca91695d36b5471b7dcce706cabd9d3892a222f96816f3af6659a53e94bb2a5ba8fa06f6cc68a99fbb7d84cef0a98597516ada9752cab084df20239abb0ed9c5280b71fb34f889735ff33a9a21ed983023d59212f559464ea167a9ff99f2d3ee3efe613c435a1bcac3826860aa61782bc23cce4da852cf44c4cbc54b637b3210633f8fb58c8381cd62559e9295873e410d383e7837d4f5f1d72ef1265c9e067e83379db38a7d07262e2dd71f98d1e561aa4f4b78578cd89952df0e0a5530e98c5669eec3bac233e7a0ad45ee3789b3fe2a4044cdd7cffa3ed2327f00973c1b03986fd131770615a8d2ef9d06e4c2aea7706be27a99308dc124b1df03ecab515ae3dd2395f960603e4a1c6f79accf60eb5564a41fa1343f6aaf15f4307ed7df048c0d2f01c145b0541b802efb70e972de0b6c5e3189770cd6bc2d7f1e0d08c9460be8c16a01ffd6c29b5c4a44d5e9f85b515fc06113ece1b913da258b3b152e7852d084fafe0f4002684de34b85c091262d6e37858482d641e35d8749872a3e42bf158e4213f1da29cd207d6007a5b38bbf3376e16a275ab60b9077e507867315d34411c4c3660f7d452678ab2dcb774b20992cee60706b1de07c9571d493915735b13774b8866b1bf304f5499c666ced8e6f853f9447c8b7c038790f20dc01162cb3c0483a139588a35434d7822596bce0d2775c07163c97fef2ccbd8a247365f78a08e78f83b5f918920b6b03bd698ee801b1cb894e0a7d44fc1fe8e34144f4003c326441bd07f794df84cb7a7c0eb2abf908ba79f808be120335adbb6fa467f0a2b35a2f4c889f847c27e14c00b4373edcd8f7f8c00eb362ad08589c4e1bc2ecbbbcf7165b075e85fbe0ef48d94ec01a75caed11f2bfa65c0d8b7807b01b3921346403ee2e2191be672b77f30dc28fac9aade10dc376b94af0ba386ee16adc96302faadaf39bbaaa462a99d3a0b797ea6657071e09b4b0e5ee25129d01bab64981d570497b3a2e9f49dd3fd24dbf549403ffdfc688ca30e7b85059c5ce76d02d1e2511c215142a0d5fca0f965e1d0f4f6a2bf81c2f046cb7957a907589a31af37e8601d90e3d6ac4d511648e6f861eb442025f73671d08d9279c609bec4abff7d7c46b8ebc36ab2b89eb5771973f6f3444090a333cfcda2914df1b07957fa6227c2a80c18fa1daaeb00a1a70691715d3d21d4c8abd0dad51647f148c9d5a97156172d25858ff59d0d227b427fd3a712791da5e2b55c5b7747a2b5ec727dddbcd4a768b32c147da278a09fc61798e27a68065ee7bfa04debf3e863980bd53cd786e04afe0e385111694359022663cbc3b57924397bbacaf94cfd165af011809686f6156165e0b1dfec83aabd22f27e72481075af31fbc1e8b27926569108f7e6a224612d1a0b19750641958fe785a3504a3ff90391dcc20bb8445d1950a73f054602fee5e2cac49922f40a85cedd4c3b3206ce672442b1de75a47e6f720c6bcd0ecb6bbe6df83100cce7139c708dad82f7c1659b35774f6e3a4990b3373ad6b23f48c441dc8c59f2e5deb62419e51607999d83196fd279fcc7a6d943fe4cf0e9fdbbaacd040b6263f5cd082d1f52c4399c62dfb2163d64456efba0af56cf13aad59f51c1b334c5996f845a5dad6da88d4d605f0833a8059de5d38c56c05e17eca59da953a049a885be61fd33a34f491aa5165fc6fef96e8bf1eecd2df3d292978f84ea89e9f1a32aa74bf1a3efdc1337f325c7248d605682b8a40415bee69481b8885f58814b17b86b79e86722ca03b18170453d5475afb880b9d87396854f066334ed983d5d77666e51d18724ca25e57ab674df712dd9238b841dea916a31e458891b561ac73cb66c4991933b7755ac0cfcc7d43b0106ac95d2836083dd907f6548ed96fc8818156adb32f6a5083fcd64eeda97322357c34a9ee61ebe5b845deff9bb140d367eb75dedefb03c5038350a23b2e14ed498f4edbbd6c6f1bb5231b5e32bcb8570e01ce42472ba235db267fb7632959180d766d76144d3a5a7cfd04ff56c68024152e09e877a82e831ab551e7a6655248b1eceddbfaac7195cc0af31c23be556f4866bae6d314cf19af50bb52567afd63568eacd6d387421cd88f7df5be8f3490b12df23487a1bbea160fc8817701f08cf370b90cf01e43c5f918a91dc6e4365b597190bd9cbfee76259047f876e59530856b46384bcc198a560acdb8017eac0330dc5a7363140ed0fdc79f4ce384d41ecafef2f929032ac235df7d06e19d1ef44860cfe2b526ae6273ddaaf6e5c8f63be93d059b7f4939dd41d75d053d4bd6206bc8ac75514a4ebfa86b664ae60df66cf14e45bcc4d61cca82d370075d210d97fe565ebf1484744af4e4a031b7e5132c4ef1a6674d7a9e50a0fe1b0bfb80f21eb83cd359d856eb8cbaf696dd31edc3a7c4e1a9777cb78dfd91ba900b9476a5096ff048be5dcca29dd865d0201844222bb39f5674f1c980c0535caab06f72ad49bded87f27bae5d1ca4ad6582e641cab4ea8f8a2bf9f3a79d69e069a316b1058b154e57d9df2b533756a4690f1a36d3cd43188f7d8f7bfd189f9d8896a11584af632fe005528acadbbdd53d2a2b4a55b16c5b669bb5be037819195025416b99859950b5917f9b2fcafe4ef7815ab7e579f0d16c6d6aef8f0352da11f8d0689ecdb2502223b4f195db3b9983c552355eb3b2a480ed54fa61f2ddedf4f7ff48ba69375712dfd6f88e912442a23c84a1d21e02c7b386f51dc24e51eb392f0a27ae95ada49f5a96b8cb224c774d08b56ea3279aede5c2bac33ba3d199f5318f71c12b9339bf88737f7c9081e25dcc3aa864ef98bdcc052acde757c1f3c403dcd09b302d81e19da094fe5be7d3140edac88abbbf2b639c3fb609da19a9acbc496766dfe3f47801d42876c152bac70f0869fab6770329528550c01f4149c08dce6fa51c34fdff63915f95ac695bf0de109e79db3e1006b48d95a6a26a3bcbfbb95fdb07de5f90ed3d70a91987e29ac72632f88cf6535da6b0c26029e3a86bbe6691123eea808f082c5865b4939ad388de65992339f8886ef0ce7cece609528543fe398e8f0d17e40263cb5fb97d3ad87cd46685682a513ce300bac371a24883daa3961b7ed2aa69ada47f352bfce21ef8016297d2b3401fa3d0950df9a97d8b538c8f0ef04662370d0983e30f37e3dc3f85ddb279d9f6845f8f49ff63f1eabbee47406245f77ce1899e17dc3c61257ce9f0fdea22d4e82f183fe49f5a02df0f8fcce643f793843cf22a42c4d0b087dda90c0e2ac18d6bf4b86126087ce3c65c86ae7269a6bfc1871e27ee9984126ad8d1f09b58bb8b72f02c1120e909130b6051bde836c9c5028162eab24b50d0beb23d8314c597688a8ae0e40d12f9f185b1792bbd0eda4d2c3dd103fab7cd4db886f4395e56577afd1f832a7105521b30749d6314fd531afedbf9baa939c224337dcf99b0a5eaf6a8cda305dbe4780aa27b43155a00d61ebcd0d712cbb9126823a23bc01c86ecea3f15583ca7d1103df5b28796cf15e7f5d6f51039acd1a67d6ed0c1b13f41b37134b7326efb60d1042fe324f9ef150a8cb9cc7ced216e41062e6e5cc065422af87d72fe4cec69c8759130a39785aa8fc12e7fe7e3613017a80a947e32f38130dd563f002dce145dc6e2164e6a37a2638015df7435f2a7ead9af0004ea9d0b2672c5eb55067eaf8c491647a96d21c8da9d2812852a6d07bc1d21e628dc78a8622c6141386cc4ccf5fc8d0719a362f7ba0f6a5eb257a660cdc1018d1b73e13411049fb18e92223c008eda86f59956935356dd8f7e19d6da6042fa4012163e520d59ce8b709f5d14758d1feddcaba08f047ae4e63d4c1e63c713d2c8ae3ca1505433c46c93373cae617e268a344dfe06067bf26b6ebef13b6be3c5d31721ba080e6f63c7c38c2592daf802b2cffa40cf4fcb55361afdcdb5dd0bdcabb88b7e57405bc89ccd37b192118a8a0912f2dbe414d5622a167d811866aa938931062e575ed0e0d14f7cf05bda94345e210d41e4c8931464488311dd4c41a2219c2c1cb17b5a05746fbe345599d4949d48454ce202a3544f8a6de2bb11b2c5ff37a657439cc2cc405269cac8099b2db0b20f1f703ce769546c7b30957c7dd9361427cd2484260423bfd95f2243931e873c8edc88f4d38bbed87c2ba74f6b66ab7790f2121ec64709a09e02e0ee6ca24cfefb4d07180fdb317623ebade5333f5c70f07138f88f04c5ca4b5e18544cc54bf36b4a7c9e807196708eef09fb19041ac392a35681049a7696dfc343579c5763362b1e0d230c4b5c826dc6e7b60e75d24c7fa02ac6f798f83bf5e246c07f8720c0128c5475fc2ca0af99f0c3fa352dc5c92e78c8cf54eabb67be4e92565b5c1b20011b154d34c5f10afb4e97d84964f510614ff455fc4a46d244e4e3e27b25c61b8c42273e34268161902d765cc743f05eae8777db7f15529b77d6aa30a2e26897bd51e705cb42b324b399e1701430ace3a6914f4e922669813a8f8d5b5e9328a14cc931a59a057858b1804afbf2942371d99903fbb9bee0c4572cb8f066b20f199859ccaf47d9cc340ea5befe1052cb2877a4af347a51139d3aefe1aa723a5800d3e82b4763edb71c70ac2bd955dae0bfd5a05b803e32ff2892caef97d6a0fab41a26f7ad5e9419906db9238551dd6a7a757e2b66f198bcfcdf823b75d6fb517dec0fa5a5aaded6455a59a9599248355c6263e0883a68bfd8eb47524221bf6113c8357f44c2c0587958f9ba751c2f733cda0a2985b0fc", 0x1000, 0x35}, {&(0x7f00000001c0)="f050309ec0ab326544a0fac2eebe27dd5299e4828207d1f4b812233e00e6d055e33a939c4c3daa2ccf1d8f3d54c42b146ec515", 0x33, 0x8000}, {&(0x7f0000000200)="75a57251b9248a59e262f66fec9218dbcffe803055befd458baa0e75368d071a1f9090dd68bebb9ba64f08484da7123d6ab565eab671dbf68f7c872b35fed6af592bc104db47e8e0969dcebe8ececf6b5e84a94f80cdf76c524b86ad907b92efbff7dd166e9c5d942f0cfc0a7c543a1a5bfe8117", 0x74, 0x72a}, {&(0x7f0000001300)="4da890289edb65c87d973b41230edfe88d676fb5336c42ee250834aa6fa822a372adf61ede3ba1a6df0160fad1d84ec7f5436c473b83f4b71eb684de3956373d9c5157cc7f669f5ae72d36d10d7ef64417453605ad48b3917bf69658a46e5b26e7ba4276dee8f0deee5a7eafa7808da9d61e732eac9a845c0262f036f911ea1eafe699b1df4c1589db62e47cd7a68d7eabe7", 0x92, 0x8000}, {&(0x7f00000013c0)="2da9c9b4d175fa57f4c59bbc97e53c7ab22b7005630464e26381ee8bef35971bbca1a3c0245243df4d1dfda70758e1c1d230acdfcfdf47c389d7a4aa6c973673bd0650f81e5c2bcaf2ac4a9b4aff9d0757c3df5f11c6", 0x56, 0xa10}, {&(0x7f0000001440)="ededc062a90c2a800d0e9bb0e574dc8b97c19c435c504bb8e2f3c6520a78b1118d55c149cec938daaa0d33402a1a6c6b21618b18cecf4c03d0ff9e104102603f92fafa6b19b68d190c41f09d1a", 0x4d, 0x408}], 0x8010, &(0x7f00000016c0)=ANY=[@ANYBLOB='stripe=0x0000000000000000,dont_measure,appraise_type=imasig,subj_user=cpuacct.usage_sys\x00,euid>', @ANYRESDEC=r1, @ANYBLOB="2c6673632cdbedcb6b6feb3873657569643d", @ANYRESDEC=r4, @ANYBLOB=',obj_user=%**-+]],\x00']) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2788.747147][T30048] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2788.755096][T30048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2788.763048][T30048] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x80000}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000200)='vfat\x00') fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_SELLOADLUT(r3, 0x541c, &(0x7f0000000240)={0x5, 0x1, 0x5, 0x3c, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000000)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) accept$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 15:28:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000340)={0xd399, 0x5d, 0x8a8e, 0xfeff, 0x1b, "f8b27d36f196a97d"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000300)) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="620000000104010200000000000000000700000408000340000100000500010001000000080005400000f0840a000200ffffffc0010000000a0002000000000802000000"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2788.909439][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2788.918361][T17452] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2788.926392][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000140)='./file0/file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb3c90ed6f66732e66610000020401ed01000270fff8", 0x16, 0x100000000000000}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000180)=0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'lo\x00', {0x2}, 0x5}) [ 2789.025405][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2789.034388][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:01 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2789.163642][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2789.283650][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2789.292763][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2789.301763][T17452] usb 2-1: config 0 descriptor?? [ 2789.823580][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2789.833960][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2789.847306][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2789.854398][T17452] usb 2-1: USB disconnect, device number 7 15:28:03 executing program 0 (fault-call:11 fault-nth:65): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:03 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000000)={0x1, 0x8, 0x7fffffff}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0xaaaab61, &(0x7f0000000080), 0x2010082, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x0, 0x22, 0x5e, {0x5e, 0x4, "6936684946f9135b1af2452b9a868e90445493f3461e8335691636b6d1cd4ef1b7215f6ef5b184fb0d34e8068abe2487df7f0c5e0e9e394482274efd4cdc8a78976f93d91924597c0498865343b95babdfc41bfa918029776cfc9400"}}, &(0x7f0000000200)={0x0, 0x3, 0x11, @string={0x11, 0x3, "dc45ebb786352bf56d84e32f4fe6fb"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x20, 0x15, 0x1d, "b676c63490cded7f519f10a211c98ca8f7f75c6d1bef3dcad8282dada0"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2e}, &(0x7f0000000380)={0x20, 0x81, 0x3, "c96b6e"}, &(0x7f00000003c0)={0x20, 0x82, 0x3, "16afa5"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "be3b"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "ee7d2969"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "58a673"}}) fchdir(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10004, 0x100000001, 0x3, 0x1, 0x0, 0x2}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000180)=@hci={0x1f, 0x2, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp={0x2c, 0xd, 0x0, 0x21}, 0x80, 0x0}}], 0x2, 0x0) 15:28:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:03 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x9, 0x151400) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000001c0)=0xffffff1b, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000fb400a001380bef57d9f81676d4c"], 0x16) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r4, &(0x7f0000000280)=[{&(0x7f0000000180)="14d05807f05f4407dc0b10fdfa07d70646ce4e3d341deaf7b34529c5389f30409127268661034309"}, {&(0x7f00000001c0)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538dd2c7b3d2945568d58ee31efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3", 0x45}, {&(0x7f00000002c0)="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"}], 0x1000000000000143, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:03 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_FONTX(r3, 0x4b6c, &(0x7f0000000000)={0x16, 0x1d, &(0x7f0000001080)="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"}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x8880) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 2791.410261][T30124] FAULT_INJECTION: forcing a failure. [ 2791.410261][T30124] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.441816][T30124] CPU: 0 PID: 30124 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2791.451987][T30124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2791.462035][T30124] Call Trace: [ 2791.465322][T30124] dump_stack+0x14a/0x1ce [ 2791.469641][T30124] ? devkmsg_release+0x11c/0x11c [ 2791.474565][T30124] ? __kernel_text_address+0x93/0x110 [ 2791.479926][T30124] ? show_regs_print_info+0x12/0x12 [ 2791.485117][T30124] ? unwind_get_return_address+0x48/0x90 [ 2791.490742][T30124] ? arch_stack_walk+0xd8/0x120 [ 2791.495596][T30124] should_fail+0x6fb/0x860 [ 2791.500015][T30124] ? setup_fault_attr+0x3d0/0x3d0 [ 2791.505038][T30124] ? stack_trace_save+0x123/0x1f0 [ 2791.510151][T30124] ? stack_trace_snprint+0x150/0x150 [ 2791.515440][T30124] ? __alloc_skb+0x88/0x4d0 [ 2791.519932][T30124] should_failslab+0x5/0x20 [ 2791.524428][T30124] kmem_cache_alloc+0x36/0x260 [ 2791.529211][T30124] __alloc_skb+0x88/0x4d0 [ 2791.533525][T30124] ? __kasan_kmalloc+0x189/0x1c0 [ 2791.538451][T30124] alloc_skb_with_frags+0xb1/0x580 [ 2791.543549][T30124] ? sock_sendpage+0xd0/0x120 [ 2791.548328][T30124] ? pipe_to_sendpage+0x23b/0x300 [ 2791.553355][T30124] ? __splice_from_pipe+0x2d3/0x870 [ 2791.558551][T30124] ? generic_splice_sendpage+0x184/0x210 [ 2791.564173][T30124] ? do_syscall_64+0xcb/0x150 [ 2791.568841][T30124] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.574895][T30124] sock_alloc_send_pskb+0x87e/0xcc0 [ 2791.580088][T30124] ? sock_kzfree_s+0x50/0x50 [ 2791.584669][T30124] ? rt_set_nexthop+0x48b/0x1140 [ 2791.589600][T30124] __ip_append_data+0x1fb9/0x3170 [ 2791.594621][T30124] ? ip_do_fragment+0x22c0/0x22c0 [ 2791.599633][T30124] ? inet_rtm_getroute+0x2590/0x2590 [ 2791.604925][T30124] ? ip_setup_cork+0x810/0x810 [ 2791.609683][T30124] ? ip_setup_cork+0x46b/0x810 [ 2791.614435][T30124] ? sock_def_destruct+0x10/0x10 [ 2791.619363][T30124] ip_append_data+0x12c/0x1a0 [ 2791.624035][T30124] ? ip_do_fragment+0x22c0/0x22c0 [ 2791.629046][T30124] udp_sendmsg+0x3ef/0x2f40 [ 2791.633553][T30124] ? ip_do_fragment+0x22c0/0x22c0 [ 2791.638565][T30124] ? udp_cmsg_send+0x340/0x340 [ 2791.643317][T30124] ? _raw_spin_lock+0xa1/0x170 [ 2791.648078][T30124] ? perf_pmu_sched_task+0x370/0x370 [ 2791.653348][T30124] ? switch_mm_irqs_off+0x509/0xa10 [ 2791.658538][T30124] ? switch_mm+0x100/0x100 [ 2791.662950][T30124] ? _raw_spin_unlock_irq+0x5/0x20 [ 2791.668050][T30124] ? finish_task_switch+0x235/0x4c0 [ 2791.673239][T30124] udp_sendpage+0x110/0x5c0 [ 2791.677731][T30124] ? udplite_getfrag+0x70/0x70 [ 2791.682483][T30124] ? mutex_lock+0xa6/0x110 [ 2791.686890][T30124] ? inet_send_prepare+0x1b7/0x470 [ 2791.692252][T30124] ? udplite_getfrag+0x70/0x70 [ 2791.697003][T30124] inet_sendpage+0xd7/0x130 [ 2791.701491][T30124] ? inet_sendmsg+0xc0/0xc0 [ 2791.705978][T30124] sock_sendpage+0xd0/0x120 [ 2791.710578][T30124] pipe_to_sendpage+0x23b/0x300 [ 2791.715432][T30124] ? sock_fasync+0xf0/0xf0 [ 2791.719847][T30124] ? generic_splice_sendpage+0x210/0x210 [ 2791.725492][T30124] __splice_from_pipe+0x2d3/0x870 [ 2791.730515][T30124] ? generic_splice_sendpage+0x210/0x210 [ 2791.736134][T30124] generic_splice_sendpage+0x184/0x210 [ 2791.741580][T30124] ? iter_file_splice_write+0xf60/0xf60 [ 2791.747136][T30124] ? security_file_permission+0x128/0x300 [ 2791.752850][T30124] ? iter_file_splice_write+0xf60/0xf60 [ 2791.758400][T30124] __se_sys_splice+0x7ee/0x1b70 [ 2791.763363][T30124] ? fput_many+0x42/0x1a0 [ 2791.767699][T30124] ? ksys_write+0x25d/0x2c0 [ 2791.772192][T30124] ? __x64_sys_splice+0xf0/0xf0 [ 2791.777039][T30124] ? do_syscall_64+0x80/0x150 [ 2791.781714][T30124] ? __x64_sys_splice+0x1d/0xf0 [ 2791.786563][T30124] do_syscall_64+0xcb/0x150 [ 2791.791061][T30124] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2791.796943][T30124] RIP: 0033:0x45ca59 [ 2791.800828][T30124] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2791.820422][T30124] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2791.828843][T30124] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2791.836809][T30124] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2791.844768][T30124] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2791.852727][T30124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 15:28:04 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2791.860690][T30124] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2792.033358][T17452] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2792.040887][ T6598] usb 5-1: new high-speed USB device number 46 using dummy_hcd 15:28:04 executing program 0 (fault-call:11 fault-nth:66): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2792.270478][T30145] FAULT_INJECTION: forcing a failure. [ 2792.270478][T30145] name failslab, interval 1, probability 0, space 0, times 0 [ 2792.283391][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2792.288645][T30145] CPU: 1 PID: 30145 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2792.298780][T30145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2792.308821][T30145] Call Trace: [ 2792.312106][T30145] dump_stack+0x14a/0x1ce [ 2792.316429][T30145] ? devkmsg_release+0x11c/0x11c [ 2792.321354][T30145] ? show_regs_print_info+0x12/0x12 [ 2792.326541][T30145] ? stack_trace_save+0x123/0x1f0 [ 2792.331556][T30145] should_fail+0x6fb/0x860 [ 2792.335959][T30145] ? setup_fault_attr+0x3d0/0x3d0 [ 2792.340972][T30145] ? dst_alloc+0x137/0x4f0 [ 2792.345374][T30145] should_failslab+0x5/0x20 [ 2792.349867][T30145] kmem_cache_alloc+0x36/0x260 [ 2792.354620][T30145] dst_alloc+0x137/0x4f0 [ 2792.358851][T30145] ? __dev_queue_xmit+0x1501/0x2680 [ 2792.364038][T30145] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2792.370011][T30145] ? ip_route_output_key_hash+0x220/0x220 [ 2792.375722][T30145] ip_route_output_flow+0x150/0x2a0 [ 2792.380911][T30145] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2792.386391][T30145] ? __rcu_read_lock+0x50/0x50 [ 2792.391151][T30145] ? selinux_sk_getsecid+0x24/0xb0 [ 2792.396248][T30145] udp_sendmsg+0x1803/0x2f40 [ 2792.400837][T30145] ? ttwu_do_wakeup+0x154/0x5b0 [ 2792.405677][T30145] ? ip_do_fragment+0x22c0/0x22c0 [ 2792.410687][T30145] ? udp_cmsg_send+0x340/0x340 [ 2792.415441][T30145] ? __cgroup_account_cputime+0x2ba/0x2e0 [ 2792.421157][T30145] ? pick_next_task_fair+0x4bf/0x850 [ 2792.426436][T30145] udp_sendpage+0x110/0x5c0 [ 2792.430931][T30145] ? udplite_getfrag+0x70/0x70 [ 2792.435679][T30145] ? mutex_lock+0xa6/0x110 [ 2792.440083][T30145] ? inet_send_prepare+0x1b7/0x470 [ 2792.445180][T30145] ? udplite_getfrag+0x70/0x70 [ 2792.449929][T30145] inet_sendpage+0xd7/0x130 [ 2792.454422][T30145] ? inet_sendmsg+0xc0/0xc0 [ 2792.458909][T30145] sock_sendpage+0xd0/0x120 [ 2792.463403][T30145] pipe_to_sendpage+0x23b/0x300 [ 2792.468238][T30145] ? sock_fasync+0xf0/0xf0 [ 2792.472641][T30145] ? generic_splice_sendpage+0x210/0x210 [ 2792.478266][T30145] __splice_from_pipe+0x2d3/0x870 [ 2792.483275][T30145] ? generic_splice_sendpage+0x210/0x210 [ 2792.488893][T30145] generic_splice_sendpage+0x184/0x210 [ 2792.494337][T30145] ? iter_file_splice_write+0xf60/0xf60 [ 2792.499868][T30145] ? security_file_permission+0x128/0x300 [ 2792.505570][T30145] ? iter_file_splice_write+0xf60/0xf60 [ 2792.511097][T30145] __se_sys_splice+0x7ee/0x1b70 [ 2792.516642][T30145] ? fput_many+0x42/0x1a0 [ 2792.520975][T30145] ? ksys_write+0x25d/0x2c0 [ 2792.525470][T30145] ? __x64_sys_splice+0xf0/0xf0 [ 2792.530310][T30145] ? __x64_sys_splice+0x1d/0xf0 [ 2792.535148][T30145] do_syscall_64+0xcb/0x150 [ 2792.540342][T30145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2792.546320][T30145] RIP: 0033:0x45ca59 [ 2792.550215][T30145] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2792.569811][T30145] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2792.578215][T30145] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2792.586258][T30145] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2792.594214][T30145] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2792.602171][T30145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2792.610128][T30145] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2792.623423][ T6598] usb 5-1: device descriptor read/64, error 18 [ 2792.723501][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2792.732811][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2792.744837][T17452] usb 2-1: config 0 descriptor?? [ 2793.013283][ T6598] usb 5-1: device descriptor read/64, error 18 [ 2793.263295][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2793.274545][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2793.286415][ T6598] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 2793.294104][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2793.301404][T17452] usb 2-1: USB disconnect, device number 8 [ 2793.563238][ T6598] usb 5-1: device descriptor read/64, error 18 [ 2793.953216][ T6598] usb 5-1: device descriptor read/64, error 18 [ 2794.073765][ T6598] usb usb5-port1: attempt power cycle 15:28:06 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000003c0)=@req3={0xc000000, 0xffffffff, 0x4, 0x9, 0x56800000, 0x7fffffff, 0x2}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="81000000", @ANYRES16=r2, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4800}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r4, 0x4008700e, 0x6) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:06 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:06 executing program 0 (fault-call:11 fault-nth:67): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:06 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:06 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000ac0)={0x6c, r4, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0xc0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x118, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd1ef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000001}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @private2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1f, @local, 0x47}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='rdma.current\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$cont(0x18, r2, 0xffffffffffffffff, 0x3) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:06 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2794.406928][T30172] tipc: Enabling of bearer rejected, failed to enable media [ 2794.428938][T30178] FAULT_INJECTION: forcing a failure. [ 2794.428938][T30178] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.429231][T30181] tipc: Enabling of bearer rejected, failed to enable media [ 2794.445325][T30178] CPU: 0 PID: 30178 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2794.459977][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2794.470028][T30178] Call Trace: [ 2794.473447][T30178] dump_stack+0x14a/0x1ce [ 2794.477764][T30178] ? devkmsg_release+0x11c/0x11c [ 2794.482683][T30178] ? show_regs_print_info+0x12/0x12 [ 2794.487856][T30178] should_fail+0x6fb/0x860 [ 2794.492247][T30178] ? setup_fault_attr+0x3d0/0x3d0 [ 2794.497254][T30178] ? skb_clone+0x1b2/0x370 [ 2794.501655][T30178] should_failslab+0x5/0x20 [ 2794.506145][T30178] kmem_cache_alloc+0x36/0x260 [ 2794.510886][T30178] skb_clone+0x1b2/0x370 [ 2794.515105][T30178] ip_mc_output+0x1d1/0x9f0 [ 2794.519648][T30178] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2794.525083][T30178] ? nf_hook_slow+0x1a6/0x1f0 [ 2794.529737][T30178] ? __ip_local_out+0x33b/0x470 [ 2794.534563][T30178] ? ip_send_check+0xd0/0xd0 [ 2794.539125][T30178] ? __ip_local_out+0x470/0x470 [ 2794.543964][T30178] ? inet_rtm_getroute+0x2590/0x2590 [ 2794.549226][T30178] ? csum_partial+0x379/0x470 [ 2794.553892][T30178] ? siphash_3u32+0x22/0x240 [ 2794.558467][T30178] ? csum_partial+0x379/0x470 [ 2794.563123][T30178] ip_send_skb+0xaa/0x140 [ 2794.567434][T30178] udp_send_skb+0x8e9/0x1100 [ 2794.572000][T30178] udp_sendpage+0x2f2/0x5c0 [ 2794.576477][T30178] ? udplite_getfrag+0x70/0x70 [ 2794.581217][T30178] ? mutex_lock+0xa6/0x110 [ 2794.585612][T30178] ? inet_send_prepare+0x1b7/0x470 [ 2794.590758][T30178] ? udplite_getfrag+0x70/0x70 [ 2794.595496][T30178] inet_sendpage+0xd7/0x130 [ 2794.599975][T30178] ? inet_sendmsg+0xc0/0xc0 [ 2794.604452][T30178] sock_sendpage+0xd0/0x120 [ 2794.608938][T30178] pipe_to_sendpage+0x23b/0x300 [ 2794.613772][T30178] ? sock_fasync+0xf0/0xf0 [ 2794.618165][T30178] ? generic_splice_sendpage+0x210/0x210 [ 2794.623782][T30178] __splice_from_pipe+0x2d3/0x870 [ 2794.628857][T30178] ? generic_splice_sendpage+0x210/0x210 [ 2794.634525][T30178] generic_splice_sendpage+0x184/0x210 [ 2794.639990][T30178] ? iter_file_splice_write+0xf60/0xf60 [ 2794.645525][T30178] ? security_file_permission+0x128/0x300 [ 2794.651221][T30178] ? iter_file_splice_write+0xf60/0xf60 [ 2794.656744][T30178] __se_sys_splice+0x7ee/0x1b70 [ 2794.661572][T30178] ? fput_many+0x42/0x1a0 [ 2794.665876][T30178] ? ksys_write+0x25d/0x2c0 [ 2794.670353][T30178] ? __x64_sys_splice+0xf0/0xf0 [ 2794.675275][T30178] ? __x64_sys_splice+0x1d/0xf0 [ 2794.680100][T30178] do_syscall_64+0xcb/0x150 [ 2794.684598][T30178] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2794.690474][T30178] RIP: 0033:0x45ca59 [ 2794.694347][T30178] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2794.714098][T30178] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2794.722547][T30178] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2794.730506][T30178] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2794.738479][T30178] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2794.746427][T30178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 15:28:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/66, 0x42) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:07 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:07 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000180)={0x4, 0x2, 0xbd8, 0x0, 0x2}) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000200)=0x1) 15:28:07 executing program 2: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2794.754376][T30178] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2794.770230][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2794.786790][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:07 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2794.879835][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2794.888727][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2794.913147][T17452] usb 2-1: new high-speed USB device number 9 using dummy_hcd 15:28:07 executing program 0 (fault-call:11 fault-nth:68): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2795.173132][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2795.260147][T30213] FAULT_INJECTION: forcing a failure. [ 2795.260147][T30213] name failslab, interval 1, probability 0, space 0, times 0 [ 2795.272929][T30213] CPU: 0 PID: 30213 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2795.283059][T30213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2795.293099][T30213] Call Trace: [ 2795.293174][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2795.296381][T30213] dump_stack+0x14a/0x1ce [ 2795.296395][T30213] ? devkmsg_release+0x11c/0x11c [ 2795.305660][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2795.309709][T30213] ? inet_sendpage+0xd7/0x130 [ 2795.309719][T30213] ? show_regs_print_info+0x12/0x12 [ 2795.309731][T30213] should_fail+0x6fb/0x860 [ 2795.315992][T17452] usb 2-1: config 0 descriptor?? [ 2795.322636][T30213] ? setup_fault_attr+0x3d0/0x3d0 [ 2795.322648][T30213] ? dst_alloc+0x137/0x4f0 [ 2795.322660][T30213] should_failslab+0x5/0x20 [ 2795.355675][T30213] kmem_cache_alloc+0x36/0x260 [ 2795.360421][T30213] dst_alloc+0x137/0x4f0 [ 2795.364659][T30213] rt_dst_clone+0x53/0x670 [ 2795.369070][T30213] ip_mc_finish_output+0xad/0x3a0 [ 2795.374092][T30213] ip_mc_output+0x3fb/0x9f0 [ 2795.378571][T30213] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2795.384003][T30213] ? nf_hook_slow+0x1a6/0x1f0 [ 2795.388654][T30213] ? ip_mc_output+0x9f0/0x9f0 [ 2795.393388][T30213] ? ip_send_check+0xd0/0xd0 [ 2795.397972][T30213] ? __ip_local_out+0x470/0x470 [ 2795.402897][T30213] ? inet_rtm_getroute+0x2590/0x2590 [ 2795.408160][T30213] ? csum_partial+0x379/0x470 [ 2795.412816][T30213] ? siphash_3u32+0x22/0x240 [ 2795.417427][T30213] ? csum_partial+0x379/0x470 [ 2795.422079][T30213] ip_send_skb+0xaa/0x140 [ 2795.426398][T30213] udp_send_skb+0x8e9/0x1100 [ 2795.430976][T30213] udp_sendpage+0x2f2/0x5c0 [ 2795.435461][T30213] ? udplite_getfrag+0x70/0x70 [ 2795.440220][T30213] ? mutex_lock+0xa6/0x110 [ 2795.444613][T30213] ? inet_send_prepare+0x1b7/0x470 [ 2795.449701][T30213] ? udplite_getfrag+0x70/0x70 [ 2795.454458][T30213] inet_sendpage+0xd7/0x130 [ 2795.459075][T30213] ? inet_sendmsg+0xc0/0xc0 [ 2795.463585][T30213] sock_sendpage+0xd0/0x120 [ 2795.468126][T30213] pipe_to_sendpage+0x23b/0x300 [ 2795.472960][T30213] ? sock_fasync+0xf0/0xf0 [ 2795.477356][T30213] ? generic_splice_sendpage+0x210/0x210 [ 2795.482963][T30213] __splice_from_pipe+0x2d3/0x870 [ 2795.488040][T30213] ? generic_splice_sendpage+0x210/0x210 [ 2795.493652][T30213] generic_splice_sendpage+0x184/0x210 [ 2795.499089][T30213] ? iter_file_splice_write+0xf60/0xf60 [ 2795.504617][T30213] ? security_file_permission+0x128/0x300 [ 2795.510386][T30213] ? iter_file_splice_write+0xf60/0xf60 [ 2795.515978][T30213] __se_sys_splice+0x7ee/0x1b70 [ 2795.520807][T30213] ? fput_many+0x42/0x1a0 [ 2795.525113][T30213] ? ksys_write+0x25d/0x2c0 [ 2795.529598][T30213] ? file_open_root+0x450/0x450 [ 2795.534445][T30213] ? __x64_sys_splice+0xf0/0xf0 [ 2795.539288][T30213] ? __x64_sys_splice+0x1d/0xf0 [ 2795.544122][T30213] do_syscall_64+0xcb/0x150 [ 2795.548618][T30213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2795.554490][T30213] RIP: 0033:0x45ca59 [ 2795.558373][T30213] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2795.577961][T30213] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2795.586381][T30213] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2795.594335][T30213] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2795.602376][T30213] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2795.610345][T30213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2795.618301][T30213] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2795.703181][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2795.713261][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2795.722761][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2795.731751][T17452] usb 2-1: USB disconnect, device number 9 15:28:08 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x30000, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f00000001c0)={'gretap0\x00', {0x2, 0x4e23, @local}}) fchdir(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0xf00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000200)={0x3, 'veth1_to_batadv\x00', {0x5}, 0x400}) r5 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:08 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:08 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x3, @broadcast}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2796.573011][T17682] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2796.813031][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2796.933066][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2796.942103][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2796.952666][T17682] usb 2-1: config 0 descriptor?? [ 2797.243013][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2797.252954][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2797.262448][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2797.269644][T17682] usb 2-1: USB disconnect, device number 10 15:28:09 executing program 2: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:09 executing program 0 (fault-call:11 fault-nth:69): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@caif=@dbg={0x25, 0x15, 0x7f}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x1}, 0x80, 0x0}}], 0x2, 0x0) 15:28:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0xc, 0x53, {0x53, 0x2, "0d9d33e94fff596289398fbe64035ed897bd3f4a6b49ab7ac66db1f89686e81a58c1f662d7f1fc40462f80004777a273648ae6752dea2e2f56f550b6a83c6ae0e050b55daf3d71bc2da9a2e99399d3a06f"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x20, 0x14, 0x8e, "273ad87d1b61d8d91d3637e853e9da285d7403ccf4a18b12cc66bd7fca66f3032fdf2f95bf17853598828d61a8924f588588d30afae28e4e816795df0d0850c0675409646f55647d2066432b9d78018c2eb8da1532007388f43311942a6da0d0b574119910bf815445eeafadacc5bee5a0323325e8b0a53076a6d9b615b66019423e0675c345e36642a7cbf50ea6"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0xaf5, 0x6, 0x401, 0x7, 0x9, 0x4764, 0xfeff, 0xb3c4, 0x7, 0x0, 0x3927, 0x100}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0xfb7e}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x2}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) flock(r0, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="6ffe000000000000000003000000580001800d0001007564703a73797a310000000044000400200001000a00000000000000fec000000000000000000000000000bb00000000200002000a00000000000000fe8000000000000000000000000000aa000000008dc13153dc9304777998e93c19791d1e8f7d32029be422dd4dd1cc6be28aaa2c70b492827183bb86e7528aa4117e77f2dbb8e1850c13e0d81e0dce748fe4a9fa08c127a54579dbfa17da88adb57e64342f508ea4f2d1120d2b1eb5356b897803614cc02fc3ea74ef983f72003d974c8786cb52da43956c6057f6e03d0f3aee4d6e19b4fc1af3f9b81ebe246cdb4208e7b17c7edf7423bbbafc5952ee881761df0f93dea36368552bdb6f98455585eff9d40b703d63851c74cb141906854f63773158c2738077cce376481503b07f614419728df4ad83f63f6182c65cfc552d4274219c70a516c79bc00ef16fb98a9aff25f519ea46b5e0"], 0x6c}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)={0x164, r4, 0x226, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec92}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x45}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ed}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1c}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x2010) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2797.470766][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2797.481181][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2797.491779][T30255] FAULT_INJECTION: forcing a failure. [ 2797.491779][T30255] name failslab, interval 1, probability 0, space 0, times 0 [ 2797.499179][T30259] tipc: Enabling of bearer rejected, failed to enable media [ 2797.504447][T30255] CPU: 0 PID: 30255 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2797.523430][T30255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2797.533496][T30255] Call Trace: [ 2797.536787][T30255] dump_stack+0x14a/0x1ce [ 2797.541125][T30255] ? devkmsg_release+0x11c/0x11c [ 2797.546062][T30255] ? __kmalloc_track_caller+0x201/0x2c0 [ 2797.551603][T30255] ? show_regs_print_info+0x12/0x12 [ 2797.556807][T30255] ? __ip_append_data+0x1fb9/0x3170 [ 2797.562006][T30255] ? udp_sendmsg+0x3ef/0x2f40 [ 2797.566681][T30255] ? memset+0x1f/0x40 [ 2797.570665][T30255] should_fail+0x6fb/0x860 [ 2797.575080][T30255] ? setup_fault_attr+0x3d0/0x3d0 [ 2797.580105][T30255] ? arch_stack_walk+0xb8/0x120 [ 2797.584956][T30255] ? skb_clone+0x1b2/0x370 [ 2797.589460][T30255] should_failslab+0x5/0x20 [ 2797.593960][T30255] kmem_cache_alloc+0x36/0x260 [ 2797.598732][T30255] skb_clone+0x1b2/0x370 [ 2797.602977][T30255] dev_queue_xmit_nit+0x279/0x9e0 [ 2797.607996][T30255] ? validate_xmit_skb+0x630/0xc60 [ 2797.613109][T30255] xmit_one+0x7b/0x460 [ 2797.617172][T30255] dev_hard_start_xmit+0xac/0x1b0 [ 2797.622207][T30255] sch_direct_xmit+0x23b/0x970 [ 2797.626971][T30255] ? nvmem_get_mac_address+0x310/0x310 [ 2797.632425][T30255] ? stack_trace_save+0x123/0x1f0 [ 2797.637555][T30255] __qdisc_run+0x245/0x420 [ 2797.641978][T30255] ? sch_direct_xmit+0x970/0x970 [ 2797.646915][T30255] ? pfifo_fast_enqueue+0x36e/0x580 [ 2797.652116][T30255] __dev_queue_xmit+0x11fa/0x2680 [ 2797.657148][T30255] ? dev_queue_xmit+0x20/0x20 [ 2797.661840][T30255] ? ip_finish_output2+0x936/0x1810 [ 2797.667039][T30255] ip_finish_output2+0xbdf/0x1810 [ 2797.672065][T30255] ? ip_fragment+0x210/0x210 [ 2797.676784][T30255] ? __ip_finish_output+0x4e1/0x6d0 [ 2797.681991][T30255] ip_mc_output+0x8b5/0x9f0 [ 2797.686498][T30255] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2797.691958][T30255] ? nf_hook_slow+0x1a6/0x1f0 [ 2797.696639][T30255] ? ip_mc_output+0x9f0/0x9f0 [ 2797.701315][T30255] ? ip_send_check+0xd0/0xd0 [ 2797.705906][T30255] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2797.711189][T30255] ? inet_rtm_getroute+0x2590/0x2590 [ 2797.716475][T30255] ? csum_partial+0x379/0x470 [ 2797.721159][T30255] ? siphash_3u32+0x22/0x240 [ 2797.725748][T30255] ? csum_partial+0x379/0x470 [ 2797.730430][T30255] ip_send_skb+0xaa/0x140 [ 2797.734905][T30255] udp_send_skb+0x8e9/0x1100 [ 2797.739499][T30255] udp_sendpage+0x2f2/0x5c0 [ 2797.744003][T30255] ? udplite_getfrag+0x70/0x70 [ 2797.748761][T30255] ? mutex_lock+0xa6/0x110 [ 2797.753177][T30255] ? inet_send_prepare+0x1b7/0x470 [ 2797.758285][T30255] ? udplite_getfrag+0x70/0x70 [ 2797.763039][T30255] inet_sendpage+0xd7/0x130 [ 2797.767537][T30255] ? inet_sendmsg+0xc0/0xc0 [ 2797.772037][T30255] sock_sendpage+0xd0/0x120 [ 2797.776550][T30255] pipe_to_sendpage+0x23b/0x300 [ 2797.781401][T30255] ? sock_fasync+0xf0/0xf0 [ 2797.785817][T30255] ? generic_splice_sendpage+0x210/0x210 [ 2797.791447][T30255] __splice_from_pipe+0x2d3/0x870 [ 2797.796475][T30255] ? generic_splice_sendpage+0x210/0x210 [ 2797.802110][T30255] generic_splice_sendpage+0x184/0x210 [ 2797.807574][T30255] ? iter_file_splice_write+0xf60/0xf60 [ 2797.813125][T30255] ? security_file_permission+0x128/0x300 [ 2797.818842][T30255] ? iter_file_splice_write+0xf60/0xf60 [ 2797.824390][T30255] __se_sys_splice+0x7ee/0x1b70 [ 2797.829243][T30255] ? fput_many+0x42/0x1a0 [ 2797.833574][T30255] ? ksys_write+0x25d/0x2c0 [ 2797.838081][T30255] ? file_open_root+0x450/0x450 [ 2797.842930][T30255] ? __x64_sys_splice+0xf0/0xf0 [ 2797.847776][T30255] ? __x64_sys_splice+0x1d/0xf0 [ 2797.852627][T30255] do_syscall_64+0xcb/0x150 [ 2797.857131][T30255] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2797.863017][T30255] RIP: 0033:0x45ca59 [ 2797.866905][T30255] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2797.886501][T30255] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2797.894909][T30255] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2797.902876][T30255] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2797.910842][T30255] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 15:28:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:10 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2797.918811][T30255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2797.926777][T30255] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, 0x0}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, 0x0}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x6, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, 0x0}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:10 executing program 0 (fault-call:11 fault-nth:70): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000201000000000000000000000200000806001240000100000008001540000000030800154000000003100005800a000100512e3933310000000800154000000002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2798.262882][T17452] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2798.356763][T30287] FAULT_INJECTION: forcing a failure. [ 2798.356763][T30287] name failslab, interval 1, probability 0, space 0, times 0 [ 2798.369416][T30287] CPU: 1 PID: 30287 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2798.379563][T30287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2798.389612][T30287] Call Trace: [ 2798.392906][T30287] dump_stack+0x14a/0x1ce [ 2798.397237][T30287] ? devkmsg_release+0x11c/0x11c [ 2798.402175][T30287] ? __se_sys_splice+0x7ee/0x1b70 [ 2798.407194][T30287] ? show_regs_print_info+0x12/0x12 [ 2798.412387][T30287] should_fail+0x6fb/0x860 [ 2798.416800][T30287] ? setup_fault_attr+0x3d0/0x3d0 [ 2798.421821][T30287] ? alloc_skb_for_msg+0x220/0x220 [ 2798.426927][T30287] ? skb_clone+0x1b2/0x370 [ 2798.431339][T30287] should_failslab+0x5/0x20 [ 2798.435835][T30287] kmem_cache_alloc+0x36/0x260 [ 2798.440598][T30287] skb_clone+0x1b2/0x370 [ 2798.444838][T30287] packet_rcv_spkt+0x129/0x490 [ 2798.449597][T30287] ? skb_clone+0x1f4/0x370 [ 2798.454007][T30287] ? packet_rcv+0x1410/0x1410 [ 2798.458680][T30287] dev_queue_xmit_nit+0x36c/0x9e0 [ 2798.463702][T30287] xmit_one+0x7b/0x460 [ 2798.467761][T30287] dev_hard_start_xmit+0xac/0x1b0 [ 2798.472778][T30287] sch_direct_xmit+0x23b/0x970 [ 2798.477540][T30287] ? nvmem_get_mac_address+0x310/0x310 [ 2798.482991][T30287] ? stack_trace_save+0x123/0x1f0 [ 2798.488011][T30287] __qdisc_run+0x245/0x420 [ 2798.492425][T30287] ? sch_direct_xmit+0x970/0x970 [ 2798.497359][T30287] ? pfifo_fast_enqueue+0x36e/0x580 [ 2798.502562][T30287] __dev_queue_xmit+0x11fa/0x2680 [ 2798.507591][T30287] ? dev_queue_xmit+0x20/0x20 [ 2798.512279][T30287] ? ip_finish_output2+0x936/0x1810 [ 2798.517479][T30287] ip_finish_output2+0xbdf/0x1810 [ 2798.522510][T30287] ? ip_fragment+0x210/0x210 [ 2798.527106][T30287] ? __ip_finish_output+0x4e1/0x6d0 [ 2798.532310][T30287] ip_mc_output+0x8b5/0x9f0 [ 2798.536829][T30287] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2798.542289][T30287] ? nf_hook_slow+0x1a6/0x1f0 [ 2798.546972][T30287] ? ip_mc_output+0x9f0/0x9f0 [ 2798.551650][T30287] ? ip_send_check+0xd0/0xd0 [ 2798.556246][T30287] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2798.561533][T30287] ? inet_rtm_getroute+0x2590/0x2590 [ 2798.566820][T30287] ? csum_partial+0x379/0x470 [ 2798.571501][T30287] ? siphash_3u32+0x22/0x240 [ 2798.576098][T30287] ? csum_partial+0x379/0x470 [ 2798.580779][T30287] ip_send_skb+0xaa/0x140 [ 2798.585108][T30287] udp_send_skb+0x8e9/0x1100 [ 2798.590246][T30287] udp_sendpage+0x2f2/0x5c0 [ 2798.594755][T30287] ? udplite_getfrag+0x70/0x70 [ 2798.599520][T30287] ? mutex_lock+0xa6/0x110 [ 2798.603939][T30287] ? inet_send_prepare+0x1b7/0x470 [ 2798.609056][T30287] ? udplite_getfrag+0x70/0x70 [ 2798.613824][T30287] inet_sendpage+0xd7/0x130 [ 2798.618326][T30287] ? inet_sendmsg+0xc0/0xc0 [ 2798.622829][T30287] sock_sendpage+0xd0/0x120 [ 2798.627332][T30287] pipe_to_sendpage+0x23b/0x300 [ 2798.632184][T30287] ? sock_fasync+0xf0/0xf0 [ 2798.636597][T30287] ? generic_splice_sendpage+0x210/0x210 [ 2798.642225][T30287] __splice_from_pipe+0x2d3/0x870 [ 2798.647255][T30287] ? generic_splice_sendpage+0x210/0x210 [ 2798.652889][T30287] generic_splice_sendpage+0x184/0x210 [ 2798.658352][T30287] ? iter_file_splice_write+0xf60/0xf60 [ 2798.663905][T30287] ? security_file_permission+0x128/0x300 [ 2798.669625][T30287] ? iter_file_splice_write+0xf60/0xf60 [ 2798.675172][T30287] __se_sys_splice+0x7ee/0x1b70 [ 2798.680022][T30287] ? fput_many+0x42/0x1a0 [ 2798.684362][T30287] ? ksys_write+0x25d/0x2c0 [ 2798.688867][T30287] ? file_open_root+0x450/0x450 [ 2798.693723][T30287] ? __x64_sys_splice+0xf0/0xf0 [ 2798.698578][T30287] ? __x64_sys_splice+0x1d/0xf0 [ 2798.703438][T30287] do_syscall_64+0xcb/0x150 [ 2798.707947][T30287] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2798.713839][T30287] RIP: 0033:0x45ca59 [ 2798.717729][T30287] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2798.737327][T30287] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2798.745735][T30287] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2798.753712][T30287] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2798.761681][T30287] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2798.769657][T30287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2798.777630][T30287] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2798.912833][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2799.032880][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2799.041996][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2799.051147][T17452] usb 2-1: config 0 descriptor?? [ 2799.342850][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2799.352793][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2799.362289][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2799.370821][T17452] usb 2-1: USB disconnect, device number 11 15:28:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001240)={r1, &(0x7f0000000140)="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", &(0x7f0000001140)=""/227}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:12 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SET_ENDIAN(0x14, 0x1) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0, 0x8}, 0x80, 0x0}}], 0x2, 0x0) 15:28:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r5, 0x3, 0x3, @broadcast}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="44020008", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf2501000000650003000100000008000300050000000800030007000000080002000200000008000300000000000000030004000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000044}, 0x80c5) fchdir(r2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'macvtap0\x00', {0x2, 0x7, @private=0xa010102}}) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 15:28:12 executing program 0 (fault-call:11 fault-nth:71): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:12 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@ethernet={0x1}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3b}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2800.484447][T30299] FAT-fs (loop4): bogus number of reserved sectors [ 2800.491028][T30299] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2800.552581][T30312] FAULT_INJECTION: forcing a failure. [ 2800.552581][T30312] name failslab, interval 1, probability 0, space 0, times 0 [ 2800.570314][T30312] CPU: 1 PID: 30312 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2800.580485][T30312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2800.590529][T30312] Call Trace: [ 2800.593800][T30312] dump_stack+0x14a/0x1ce [ 2800.598106][T30312] ? devkmsg_release+0x11c/0x11c [ 2800.603014][T30312] ? inet_sendpage+0xd7/0x130 [ 2800.607664][T30312] ? show_regs_print_info+0x12/0x12 [ 2800.612833][T30312] should_fail+0x6fb/0x860 [ 2800.617221][T30312] ? setup_fault_attr+0x3d0/0x3d0 [ 2800.622221][T30312] ? dst_alloc+0x137/0x4f0 [ 2800.626609][T30312] should_failslab+0x5/0x20 [ 2800.631097][T30312] kmem_cache_alloc+0x36/0x260 [ 2800.635849][T30312] dst_alloc+0x137/0x4f0 [ 2800.640082][T30312] rt_dst_clone+0x53/0x670 [ 2800.644485][T30312] ip_mc_finish_output+0xad/0x3a0 [ 2800.649485][T30312] ip_mc_output+0x3fb/0x9f0 [ 2800.653981][T30312] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2800.659423][T30312] ? nf_hook_slow+0x1a6/0x1f0 [ 2800.664085][T30312] ? ip_mc_output+0x9f0/0x9f0 [ 2800.668738][T30312] ? ip_send_check+0xd0/0xd0 [ 2800.673304][T30312] ? __ip_local_out+0x470/0x470 [ 2800.678129][T30312] ? inet_rtm_getroute+0x2590/0x2590 [ 2800.683395][T30312] ? csum_partial+0x379/0x470 [ 2800.688050][T30312] ? siphash_3u32+0x22/0x240 [ 2800.692614][T30312] ? csum_partial+0x379/0x470 [ 2800.697262][T30312] ip_send_skb+0xaa/0x140 [ 2800.701565][T30312] udp_send_skb+0x8e9/0x1100 [ 2800.706148][T30312] udp_sendpage+0x2f2/0x5c0 [ 2800.710635][T30312] ? udplite_getfrag+0x70/0x70 [ 2800.715376][T30312] ? mutex_lock+0xa6/0x110 [ 2800.719769][T30312] ? inet_send_prepare+0x1b7/0x470 [ 2800.724864][T30312] ? udplite_getfrag+0x70/0x70 [ 2800.729642][T30312] inet_sendpage+0xd7/0x130 [ 2800.734171][T30312] ? inet_sendmsg+0xc0/0xc0 [ 2800.738676][T30312] sock_sendpage+0xd0/0x120 [ 2800.743154][T30312] pipe_to_sendpage+0x23b/0x300 [ 2800.747984][T30312] ? sock_fasync+0xf0/0xf0 [ 2800.752371][T30312] ? generic_splice_sendpage+0x210/0x210 [ 2800.757984][T30312] __splice_from_pipe+0x2d3/0x870 [ 2800.762990][T30312] ? generic_splice_sendpage+0x210/0x210 [ 2800.768594][T30312] generic_splice_sendpage+0x184/0x210 [ 2800.774025][T30312] ? iter_file_splice_write+0xf60/0xf60 [ 2800.779546][T30312] ? security_file_permission+0x128/0x300 [ 2800.785238][T30312] ? iter_file_splice_write+0xf60/0xf60 [ 2800.790757][T30312] __se_sys_splice+0x7ee/0x1b70 [ 2800.795584][T30312] ? fput_many+0x42/0x1a0 [ 2800.799891][T30312] ? ksys_write+0x25d/0x2c0 [ 2800.804382][T30312] ? file_open_root+0x450/0x450 [ 2800.809214][T30312] ? __x64_sys_splice+0xf0/0xf0 [ 2800.814046][T30312] ? __x64_sys_splice+0x1d/0xf0 [ 2800.818921][T30312] do_syscall_64+0xcb/0x150 [ 2800.823516][T30312] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2800.829409][T30312] RIP: 0033:0x45ca59 [ 2800.833278][T30312] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 15:28:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) 15:28:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0xe8}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2800.852857][T30312] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2800.861243][T30312] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2800.869210][T30312] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2800.877190][T30312] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2800.885141][T30312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2800.893091][T30312] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_usb_connect$uac1(0x0, 0xcc, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x1f, 0x90, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffa, 0xff}, [@processing_unit={0x8, 0x24, 0x7, 0x2, 0x1, 0x5, "92"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0xc, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x1, 0x3f, 0x3}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x20, "c4"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3f, 0x4, 0x6, 0x80, 'W', 'Gso'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0x80, 0xfa, "44fd84f4"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x3, 0x7, {0x7, 0x25, 0x1, 0x4, 0x1, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x1, 0x1, 0x4, 0x4, "f9d7ffd21920e4"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9, 0x81, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x88, 0xff, 0x5, {0x7, 0x25, 0x1, 0x1, 0x9, 0x400}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x81, 0x4, 0x81, 0x40, 0x1}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x448}}, {0xc, &(0x7f0000000500)=@string={0xc, 0x3, "9a28064215e423b72a2e"}}, {0xaa, &(0x7f0000000540)=@string={0xaa, 0x3, "23982a4fcc47b9476d33744af64dfdb2f4c2dd5e95254f9e8ec7389a022ef7938b352eb1a580b5bce9a6d9643b8d06db0459f4584de87a1a8a222b61ac64d4feabf94344464e5820bf2c9bbf734172754be122eabd101e6b7d9b9e37b086b016b4ae51f1377fc9fbfedf6666ee356c33423306fe8d6db75c0ca311b8205a6ba4a7cf20a0fd282633b548ea466667c6b512763c569219449ab38bf9456dd6f3d9225333d1e88a502d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x447}}]}) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) getpeername$netlink(r1, &(0x7f0000000140), &(0x7f0000000180)=0xc) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) keyctl$session_to_parent(0x12) write$binfmt_misc(r1, &(0x7f00000001c0)={'syz0', "8e12482b9f5f67ba164e1a27b77d36b0e7377496cb2077b77423df17cd354a501a16e2c477a2d4be594d0c"}, 0x2f) ptrace$cont(0x7, r2, 0x0, 0x0) write$P9_RAUTH(r1, &(0x7f0000000200)={0x14, 0x67, 0x1, {0x8, 0x1, 0x4}}, 0x14) 15:28:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x80000002, 0x0) [ 2800.925872][T30299] FAT-fs (loop4): bogus number of reserved sectors [ 2800.932540][T30299] FAT-fs (loop4): Can't find a valid FAT filesystem 15:28:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000180)="52823d124ef5b395868d69410e0a82233220b9090118a12b840f5a194394c144f7466f6b0ae9793984922115ad02dee848200984165679816051617c939c4843e08cdfad7b82306265d345cd874ab997d7589086f4071f94fc3295673454dd09617e464499018f621901f23f2c339dfb332ce64aa5123af363ee8f12705d1f410c13a6dcf09fee390b5906915f0c19884b992e3a8fad3e6a2fae782301dab40dde8d4e6752564710", &(0x7f0000000300)=""/105}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:13 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:13 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'geneve1\x00', {0x4}, 0x1}) 15:28:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000180)="63880cf098d75e64ea99f03e4885add9312b52c2015d07860f7a1fbfb9da4c46a7be48f1bfe7c08b32a0e9d9a7348685734dfdfd38c5cd916a0841d38edbd0f1cfb6c10f23d3b9e0d76e1080e1b6e610346948f4e6736e4572e11dd275ba622867f0645d572eca0bc64ac8db56c401b34e", &(0x7f0000000300)=""/191, &(0x7f00000003c0)="1430bf6df5df9d5b563584c859e13333d828e0930e2b3968ec48633efc3a55e83eaf4bd0b7bb968ef86643a4ef3735dcec02bc6f09ddc91f94f69638241e3332ba50a34ae20952ee91d07ce0ab0a3501f898b0a18db77313c7ec6e7e93df65c192d855b25a18ac9a00a0cbab6b84348734ca425d85bd5fd930b48ab42a969f00d93573a692297bfcc98249da867fb00ee407", &(0x7f0000000480)="3eede80375b0b7111e4b9c2fd527d9b5ef2ddab54dd993ed89c94c1c39450b7ad6645c2624f2c49b129d278f8039c71d0ad2f8c0bb215eb52bac0f8c0218622bc53a288847a481e1998eca71906da575f12f065e6b257a22ef247a38bcff2acdff20cba8ab38cd2065167a4cfb2702cf53e650fba2852100a0268565079d0f145d43377687d20aea1c97467657c7ee6392fde5cf8920d4e9ed", 0x6, r3, 0x4}, 0x38) [ 2801.043384][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2801.052366][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2801.059336][T17452] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2801.141287][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2801.150202][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:13 executing program 0 (fault-call:11 fault-nth:72): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2801.272713][T17682] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2801.302676][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2801.389007][T30362] FAULT_INJECTION: forcing a failure. [ 2801.389007][T30362] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.401629][T30362] CPU: 1 PID: 30362 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2801.411799][T30362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2801.421979][T30362] Call Trace: [ 2801.425254][T30362] dump_stack+0x14a/0x1ce [ 2801.429587][T30362] ? devkmsg_release+0x11c/0x11c [ 2801.434500][T30362] ? show_regs_print_info+0x12/0x12 [ 2801.439696][T30362] ? stack_trace_save+0x123/0x1f0 [ 2801.444708][T30362] should_fail+0x6fb/0x860 [ 2801.449111][T30362] ? setup_fault_attr+0x3d0/0x3d0 [ 2801.454115][T30362] ? dst_alloc+0x137/0x4f0 [ 2801.458506][T30362] should_failslab+0x5/0x20 [ 2801.462986][T30362] kmem_cache_alloc+0x36/0x260 [ 2801.467726][T30362] dst_alloc+0x137/0x4f0 [ 2801.471943][T30362] ? __dev_queue_xmit+0x1501/0x2680 [ 2801.477124][T30362] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2801.483154][T30362] ? ip_route_output_key_hash+0x220/0x220 [ 2801.488858][T30362] ip_route_output_flow+0x150/0x2a0 [ 2801.494052][T30362] ? _local_bh_enable+0x30/0x30 [ 2801.498878][T30362] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2801.504369][T30362] ? __rcu_read_lock+0x50/0x50 [ 2801.509116][T30362] ? ip_finish_output2+0xbe6/0x1810 [ 2801.514296][T30362] ? selinux_sk_getsecid+0x24/0xb0 [ 2801.519443][T30362] udp_sendmsg+0x1803/0x2f40 [ 2801.524036][T30362] ? update_misfit_status+0x5e0/0x5e0 [ 2801.529493][T30362] ? ip_do_fragment+0x22c0/0x22c0 [ 2801.534498][T30362] ? udp_cmsg_send+0x340/0x340 [ 2801.539250][T30362] ? perf_pmu_sched_task+0x370/0x370 [ 2801.544546][T30362] ? find_next_bit+0xf7/0x120 [ 2801.549207][T30362] ? finish_task_switch+0x2be/0x4c0 [ 2801.554387][T30362] udp_sendpage+0x110/0x5c0 [ 2801.558874][T30362] ? udplite_getfrag+0x70/0x70 [ 2801.563667][T30362] ? mutex_lock+0xa6/0x110 [ 2801.568067][T30362] ? inet_send_prepare+0x1b7/0x470 [ 2801.573160][T30362] ? udplite_getfrag+0x70/0x70 [ 2801.577909][T30362] inet_sendpage+0xd7/0x130 [ 2801.582392][T30362] ? inet_sendmsg+0xc0/0xc0 [ 2801.586922][T30362] sock_sendpage+0xd0/0x120 [ 2801.591460][T30362] pipe_to_sendpage+0x23b/0x300 [ 2801.596289][T30362] ? sock_fasync+0xf0/0xf0 [ 2801.600679][T30362] ? generic_splice_sendpage+0x210/0x210 [ 2801.606283][T30362] __splice_from_pipe+0x2d3/0x870 [ 2801.611283][T30362] ? generic_splice_sendpage+0x210/0x210 [ 2801.616893][T30362] generic_splice_sendpage+0x184/0x210 [ 2801.622325][T30362] ? iter_file_splice_write+0xf60/0xf60 [ 2801.627849][T30362] ? security_file_permission+0x128/0x300 [ 2801.633560][T30362] ? iter_file_splice_write+0xf60/0xf60 [ 2801.639096][T30362] __se_sys_splice+0x7ee/0x1b70 [ 2801.643921][T30362] ? fput_many+0x42/0x1a0 [ 2801.648224][T30362] ? ksys_write+0x25d/0x2c0 [ 2801.652708][T30362] ? file_open_root+0x450/0x450 [ 2801.657543][T30362] ? __x64_sys_splice+0xf0/0xf0 [ 2801.662365][T30362] ? __x64_sys_splice+0x1d/0xf0 [ 2801.667192][T30362] do_syscall_64+0xcb/0x150 [ 2801.671670][T30362] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2801.677533][T30362] RIP: 0033:0x45ca59 [ 2801.681401][T30362] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2801.700983][T30362] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2801.709372][T30362] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2801.717326][T30362] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2801.725271][T30362] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2801.733573][T30362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2801.741522][T30362] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2801.762675][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2801.771769][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2801.780759][T17452] usb 2-1: config 0 descriptor?? [ 2801.882647][T17682] usb 6-1: Using ep0 maxpacket: 16 [ 2802.082659][T17682] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2802.092860][T17682] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2802.262684][T17682] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2802.271788][T17682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2802.279915][T17682] usb 6-1: Product: 䀊 [ 2802.282679][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2802.284273][T17682] usb 6-1: Manufacturer: Ы [ 2802.295913][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2802.298662][T17682] usb 6-1: SerialNumber: Т [ 2802.312211][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2802.322047][T17452] usb 2-1: USB disconnect, device number 12 [ 2802.672680][T17682] usb 6-1: 0:2 : does not exist [ 2802.679741][T17682] usb 6-1: USB disconnect, device number 58 15:28:15 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:15 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) splice(r1, 0x0, r3, 0x0, 0x5f, 0x0) shutdown(r2, 0x1) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) 15:28:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x482000, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x312}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f14fd12aaaea5aa61583315eb4d65eda93cccba00e", @ANYRES16=r5, @ANYBLOB="050a0000000000000000340000000c005a8008000a0004000100"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000005c2c66c64398b07839735d7ce6186c43ea5624fd25e6a1c54f254e8a10c659", @ANYRES16=r5, @ANYBLOB="000226bd7000fcdbdf25160000000a000600ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) unlinkat(r8, &(0x7f0000000180)='./file0\x00', 0x200) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f0000000f80)="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", 0x1000) 15:28:15 executing program 0 (fault-call:11 fault-nth:73): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) 15:28:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x8, 0x4, 0x4, 0x2ba, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000ffdbdf25010000000000001009410000004c00180000000265746800000000000000000000000000000000000000000000000000000000000039d50878180bb50ef756e32e780000000000000000000000000000000000000000000000000000000000000900000000"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x200000c5) wait4(0x0, 0x0, 0x0, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000140)=0xdf4a) 15:28:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x24ba1dc0}) [ 2802.919765][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2802.928619][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2802.938904][T30405] FAULT_INJECTION: forcing a failure. [ 2802.938904][T30405] name failslab, interval 1, probability 0, space 0, times 0 [ 2802.951669][T30405] CPU: 1 PID: 30405 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 15:28:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x3, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) fcntl$getflags(0xffffffffffffffff, 0x3) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2802.961815][T30405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2802.971880][T30405] Call Trace: [ 2802.975176][T30405] dump_stack+0x14a/0x1ce [ 2802.979508][T30405] ? devkmsg_release+0x11c/0x11c [ 2802.984444][T30405] ? __kernel_text_address+0x93/0x110 [ 2802.989817][T30405] ? show_regs_print_info+0x12/0x12 [ 2802.995019][T30405] ? unwind_get_return_address+0x48/0x90 [ 2803.000661][T30405] ? arch_stack_walk+0xd8/0x120 [ 2803.005525][T30405] should_fail+0x6fb/0x860 [ 2803.009945][T30405] ? setup_fault_attr+0x3d0/0x3d0 [ 2803.015243][T30405] ? stack_trace_save+0x123/0x1f0 [ 2803.020277][T30405] ? stack_trace_snprint+0x150/0x150 [ 2803.025568][T30405] ? __alloc_skb+0x88/0x4d0 [ 2803.030074][T30405] should_failslab+0x5/0x20 [ 2803.034583][T30405] kmem_cache_alloc+0x36/0x260 [ 2803.039353][T30405] __alloc_skb+0x88/0x4d0 [ 2803.043697][T30405] ? __kasan_kmalloc+0x189/0x1c0 [ 2803.048638][T30405] alloc_skb_with_frags+0xb1/0x580 [ 2803.053756][T30405] ? sock_sendpage+0xd0/0x120 [ 2803.058434][T30405] ? pipe_to_sendpage+0x23b/0x300 [ 2803.063459][T30405] ? __splice_from_pipe+0x2d3/0x870 [ 2803.068657][T30405] ? generic_splice_sendpage+0x184/0x210 [ 2803.074289][T30405] ? do_syscall_64+0xcb/0x150 [ 2803.078969][T30405] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2803.085040][T30405] sock_alloc_send_pskb+0x87e/0xcc0 [ 2803.090276][T30405] ? sock_kzfree_s+0x50/0x50 [ 2803.094881][T30405] ? rt_set_nexthop+0x48b/0x1140 [ 2803.099835][T30405] __ip_append_data+0x1fb9/0x3170 [ 2803.104878][T30405] ? ip_do_fragment+0x22c0/0x22c0 [ 2803.109910][T30405] ? inet_rtm_getroute+0x2590/0x2590 [ 2803.115199][T30405] ? ip_setup_cork+0x810/0x810 [ 2803.119967][T30405] ? ip_setup_cork+0x46b/0x810 [ 2803.124731][T30405] ? sock_def_destruct+0x10/0x10 [ 2803.129672][T30405] ip_append_data+0x12c/0x1a0 [ 2803.134357][T30405] ? ip_do_fragment+0x22c0/0x22c0 [ 2803.139382][T30405] udp_sendmsg+0x3ef/0x2f40 [ 2803.143889][T30405] ? update_load_avg+0x410/0x8f0 [ 2803.148835][T30405] ? update_misfit_status+0x5e0/0x5e0 [ 2803.154211][T30405] ? ip_do_fragment+0x22c0/0x22c0 [ 2803.159236][T30405] ? udp_cmsg_send+0x340/0x340 [ 2803.164003][T30405] ? perf_pmu_sched_task+0x370/0x370 [ 2803.169290][T30405] ? find_next_bit+0xf7/0x120 [ 2803.173966][T30405] ? finish_task_switch+0x2be/0x4c0 [ 2803.179168][T30405] udp_sendpage+0x110/0x5c0 [ 2803.183677][T30405] ? udplite_getfrag+0x70/0x70 [ 2803.188439][T30405] ? mutex_lock+0xa6/0x110 [ 2803.192868][T30405] ? inet_send_prepare+0x1b7/0x470 [ 2803.197980][T30405] ? udplite_getfrag+0x70/0x70 [ 2803.202740][T30405] inet_sendpage+0xd7/0x130 [ 2803.207246][T30405] ? inet_sendmsg+0xc0/0xc0 [ 2803.211751][T30405] sock_sendpage+0xd0/0x120 [ 2803.216261][T30405] pipe_to_sendpage+0x23b/0x300 [ 2803.221116][T30405] ? sock_fasync+0xf0/0xf0 [ 2803.225533][T30405] ? generic_splice_sendpage+0x210/0x210 [ 2803.231173][T30405] __splice_from_pipe+0x2d3/0x870 [ 2803.236203][T30405] ? generic_splice_sendpage+0x210/0x210 [ 2803.241835][T30405] generic_splice_sendpage+0x184/0x210 [ 2803.247297][T30405] ? iter_file_splice_write+0xf60/0xf60 [ 2803.252848][T30405] ? security_file_permission+0x128/0x300 [ 2803.258566][T30405] ? iter_file_splice_write+0xf60/0xf60 [ 2803.264111][T30405] __se_sys_splice+0x7ee/0x1b70 [ 2803.268975][T30405] ? fput_many+0x42/0x1a0 [ 2803.273321][T30405] ? ksys_write+0x25d/0x2c0 [ 2803.277834][T30405] ? __x64_sys_splice+0xf0/0xf0 [ 2803.282690][T30405] ? __x64_sys_splice+0x1d/0xf0 [ 2803.287548][T30405] do_syscall_64+0xcb/0x150 [ 2803.292059][T30405] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2803.297954][T30405] RIP: 0033:0x45ca59 [ 2803.301854][T30405] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2803.321493][T30405] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2803.329902][T30405] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2803.337872][T30405] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2803.345839][T30405] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2803.353818][T30405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2803.361788][T30405] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:15 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:15 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) prctl$PR_SET_FP_MODE(0x2d, 0x3) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000000)={0x35, 0x6, 0xe, 0x1f, 0x2, 0x5, 0x1, 0x10f, 0xffffffffffffffff}) [ 2803.445016][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2803.458589][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2803.522502][T17452] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2803.674667][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2803.692922][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2803.782477][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2803.912532][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2803.921700][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2803.931294][T17452] usb 2-1: config 0 descriptor?? [ 2804.402562][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2804.412756][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2804.426338][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2804.433647][T17452] usb 2-1: USB disconnect, device number 13 15:28:17 executing program 0 (fault-call:11 fault-nth:74): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000300)={0x7, 0x401, 0x2, 0x2, 0x9, [{0xd7f, 0x2, 0x4, [], 0x3100}, {0x57, 0x41bc, 0x0, [], 0x400}, {0x8, 0x1ff, 0x9, [], 0x1204}, {0x1, 0x9, 0x7, [], 0x2006}, {0x3, 0x3, 0xffffffffffffff81}, {0x2, 0x5, 0x5, [], 0x80b}, {0x4, 0x2, 0xfffffffffffeffff, [], 0x2080}, {0x6604, 0x353, 0x3, [], 0x3009}, {0xc9, 0xfffffffffffffffb, 0x0, [], 0x2}]}) 15:28:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r1, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x2, 0x4) 15:28:17 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f00000003c0)) pselect6(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000140)={0xffc}, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r4, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:17 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x5}, @const={0x10000004, 0x0, 0x0, 0xa, 0x3}, @enum={0xc}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @restrict={0xd, 0x0, 0x0, 0xb, 0x4}, @struct={0x9, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x10, 0x5, 0x9}, {0x1000c, 0x5, 0x6}]}]}, {0x0, [0x0, 0x2e, 0x2e]}}, &(0x7f0000000900)=""/12, 0x7d, 0xc, 0x1}, 0x20) preadv(r2, &(0x7f0000000840)=[{&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/231, 0xe7}, {&(0x7f00000004c0)=""/237, 0xed}, {&(0x7f00000005c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000640)=""/54, 0x36}, {&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/11, 0xb}, {&(0x7f0000000700)=""/129, 0x81}, {&(0x7f00000007c0)=""/112, 0x70}], 0xa, 0x7fffffff) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2804.987245][T30461] FAULT_INJECTION: forcing a failure. [ 2804.987245][T30461] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.006140][T30461] CPU: 1 PID: 30461 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2805.016342][T30461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2805.026486][T30461] Call Trace: [ 2805.029770][T30461] dump_stack+0x14a/0x1ce [ 2805.034090][T30461] ? devkmsg_release+0x11c/0x11c [ 2805.039125][T30461] ? show_regs_print_info+0x12/0x12 [ 2805.044424][T30461] should_fail+0x6fb/0x860 [ 2805.048826][T30461] ? setup_fault_attr+0x3d0/0x3d0 [ 2805.053844][T30461] ? alloc_skb_with_frags+0xb1/0x580 [ 2805.059129][T30461] should_failslab+0x5/0x20 [ 2805.063613][T30461] __kmalloc_track_caller+0x5d/0x2c0 [ 2805.068881][T30461] ? kmem_cache_alloc+0x1d5/0x260 [ 2805.073886][T30461] ? alloc_skb_with_frags+0xb1/0x580 [ 2805.079152][T30461] __alloc_skb+0xd1/0x4d0 [ 2805.083467][T30461] ? __kasan_kmalloc+0x189/0x1c0 [ 2805.088408][T30461] alloc_skb_with_frags+0xb1/0x580 [ 2805.093513][T30461] ? sock_sendpage+0xd0/0x120 [ 2805.098190][T30461] ? pipe_to_sendpage+0x23b/0x300 [ 2805.103305][T30461] ? __splice_from_pipe+0x2d3/0x870 [ 2805.108490][T30461] ? generic_splice_sendpage+0x184/0x210 [ 2805.114105][T30461] ? do_syscall_64+0xcb/0x150 [ 2805.118785][T30461] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2805.124840][T30461] sock_alloc_send_pskb+0x87e/0xcc0 [ 2805.130160][T30461] ? sock_kzfree_s+0x50/0x50 [ 2805.134751][T30461] ? rt_set_nexthop+0x48b/0x1140 [ 2805.139676][T30461] __ip_append_data+0x1fb9/0x3170 [ 2805.144697][T30461] ? ip_do_fragment+0x22c0/0x22c0 [ 2805.149961][T30461] ? inet_rtm_getroute+0x2590/0x2590 [ 2805.155427][T30461] ? ip_setup_cork+0x810/0x810 [ 2805.160190][T30461] ? ip_setup_cork+0x46b/0x810 [ 2805.164969][T30461] ? sock_def_destruct+0x10/0x10 [ 2805.169900][T30461] ip_append_data+0x12c/0x1a0 [ 2805.174671][T30461] ? ip_do_fragment+0x22c0/0x22c0 [ 2805.179686][T30461] udp_sendmsg+0x3ef/0x2f40 [ 2805.184178][T30461] ? update_misfit_status+0x5e0/0x5e0 [ 2805.189538][T30461] ? ip_do_fragment+0x22c0/0x22c0 [ 2805.194552][T30461] ? udp_cmsg_send+0x340/0x340 [ 2805.199318][T30461] ? perf_pmu_sched_task+0x370/0x370 [ 2805.204928][T30461] ? find_next_bit+0xf7/0x120 [ 2805.209655][T30461] ? finish_task_switch+0x2be/0x4c0 [ 2805.212418][T17682] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2805.214978][T30461] udp_sendpage+0x110/0x5c0 [ 2805.214991][T30461] ? udplite_getfrag+0x70/0x70 [ 2805.215000][T30461] ? mutex_lock+0xa6/0x110 [ 2805.215015][T30461] ? inet_send_prepare+0x1b7/0x470 [ 2805.236244][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2805.236387][T30461] ? udplite_getfrag+0x70/0x70 [ 2805.241562][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2805.249974][T30461] inet_sendpage+0xd7/0x130 [ 2805.249982][T30461] ? inet_sendmsg+0xc0/0xc0 [ 2805.249991][T30461] sock_sendpage+0xd0/0x120 [ 2805.250000][T30461] pipe_to_sendpage+0x23b/0x300 [ 2805.250006][T30461] ? sock_fasync+0xf0/0xf0 [ 2805.250012][T30461] ? generic_splice_sendpage+0x210/0x210 [ 2805.250019][T30461] __splice_from_pipe+0x2d3/0x870 [ 2805.250028][T30461] ? generic_splice_sendpage+0x210/0x210 [ 2805.250035][T30461] generic_splice_sendpage+0x184/0x210 [ 2805.250044][T30461] ? iter_file_splice_write+0xf60/0xf60 [ 2805.250055][T30461] ? security_file_permission+0x128/0x300 [ 2805.250060][T30461] ? iter_file_splice_write+0xf60/0xf60 [ 2805.250071][T30461] __se_sys_splice+0x7ee/0x1b70 [ 2805.327224][T30461] ? fput_many+0x42/0x1a0 [ 2805.331535][T30461] ? ksys_write+0x25d/0x2c0 [ 2805.336020][T30461] ? file_open_root+0x450/0x450 [ 2805.340854][T30461] ? __x64_sys_splice+0xf0/0xf0 [ 2805.345695][T30461] ? __x64_sys_splice+0x1d/0xf0 [ 2805.350526][T30461] do_syscall_64+0xcb/0x150 [ 2805.355014][T30461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2805.360899][T30461] RIP: 0033:0x45ca59 [ 2805.364773][T30461] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2805.384370][T30461] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2805.392758][T30461] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2805.400717][T30461] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2805.408691][T30461] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2805.416647][T30461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2805.424623][T30461] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000180)) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r6) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f00000001c0)=0x2) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2805.509991][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2805.520832][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:17 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0xda, 0x4, 0x2, 0x3, 0x3}) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2805.567049][T30479] FAT-fs (loop4): bogus number of reserved sectors [ 2805.573838][T30479] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2805.625250][T30479] FAT-fs (loop4): bogus number of reserved sectors [ 2805.632381][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2805.638156][T30479] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2805.752647][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2805.761866][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.777578][T17682] usb 2-1: config 0 descriptor?? [ 2806.262331][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2806.272630][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2806.286048][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2806.293328][T17682] usb 2-1: USB disconnect, device number 14 15:28:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace(0x8, r2) 15:28:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@random={'system.', ':\x00'}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:18 executing program 0 (fault-call:11 fault-nth:75): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = getpid() pidfd_open(r2, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x1000000]}) 15:28:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x6, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c905c6b66732e350080", 0xb, 0x5}], 0x2002001, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0x0, 0x300]}) 15:28:18 executing program 2: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0, 0x0, 0x0, [0xffff1f00]}) [ 2806.441100][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2806.450284][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2806.459090][T30515] FAULT_INJECTION: forcing a failure. [ 2806.459090][T30515] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.473423][T30515] CPU: 1 PID: 30515 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2806.483676][T30515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2806.493723][T30515] Call Trace: [ 2806.497001][T30515] dump_stack+0x14a/0x1ce [ 2806.501309][T30515] ? devkmsg_release+0x11c/0x11c [ 2806.506231][T30515] ? show_regs_print_info+0x12/0x12 [ 2806.511661][T30515] should_fail+0x6fb/0x860 [ 2806.516063][T30515] ? setup_fault_attr+0x3d0/0x3d0 [ 2806.521070][T30515] ? skb_clone+0x1b2/0x370 [ 2806.525468][T30515] should_failslab+0x5/0x20 [ 2806.529965][T30515] kmem_cache_alloc+0x36/0x260 [ 2806.534805][T30515] skb_clone+0x1b2/0x370 [ 2806.539136][T30515] ip_mc_output+0x1d1/0x9f0 [ 2806.543774][T30515] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2806.549284][T30515] ? nf_hook_slow+0x1a6/0x1f0 [ 2806.553945][T30515] ? __ip_local_out+0x33b/0x470 [ 2806.558777][T30515] ? ip_send_check+0xd0/0xd0 [ 2806.563347][T30515] ? __ip_local_out+0x470/0x470 [ 2806.568174][T30515] ? inet_rtm_getroute+0x2590/0x2590 [ 2806.573577][T30515] ? csum_partial+0x379/0x470 [ 2806.578265][T30515] ? siphash_3u32+0x22/0x240 [ 2806.582882][T30515] ? csum_partial+0x379/0x470 [ 2806.587566][T30515] ip_send_skb+0xaa/0x140 [ 2806.591878][T30515] udp_send_skb+0x8e9/0x1100 [ 2806.596448][T30515] udp_sendpage+0x2f2/0x5c0 [ 2806.600935][T30515] ? udplite_getfrag+0x70/0x70 [ 2806.605730][T30515] ? mutex_lock+0xa6/0x110 [ 2806.610217][T30515] ? inet_send_prepare+0x1b7/0x470 [ 2806.615362][T30515] ? udplite_getfrag+0x70/0x70 [ 2806.620204][T30515] inet_sendpage+0xd7/0x130 [ 2806.624685][T30515] ? inet_sendmsg+0xc0/0xc0 [ 2806.629184][T30515] sock_sendpage+0xd0/0x120 [ 2806.633668][T30515] pipe_to_sendpage+0x23b/0x300 [ 2806.638496][T30515] ? sock_fasync+0xf0/0xf0 [ 2806.642909][T30515] ? generic_splice_sendpage+0x210/0x210 [ 2806.648539][T30515] __splice_from_pipe+0x2d3/0x870 [ 2806.653551][T30515] ? generic_splice_sendpage+0x210/0x210 [ 2806.659163][T30515] generic_splice_sendpage+0x184/0x210 [ 2806.664634][T30515] ? iter_file_splice_write+0xf60/0xf60 [ 2806.670162][T30515] ? security_file_permission+0x128/0x300 [ 2806.675858][T30515] ? iter_file_splice_write+0xf60/0xf60 [ 2806.681408][T30515] __se_sys_splice+0x7ee/0x1b70 [ 2806.686246][T30515] ? fput_many+0x42/0x1a0 [ 2806.690555][T30515] ? ksys_write+0x25d/0x2c0 [ 2806.695064][T30515] ? file_open_root+0x450/0x450 [ 2806.699897][T30515] ? __x64_sys_splice+0xf0/0xf0 [ 2806.704747][T30515] ? __x64_sys_splice+0x1d/0xf0 [ 2806.709575][T30515] do_syscall_64+0xcb/0x150 [ 2806.714071][T30515] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2806.720073][T30515] RIP: 0033:0x45ca59 [ 2806.723955][T30515] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2806.743667][T30515] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2806.752079][T30515] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2806.760055][T30515] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2806.768025][T30515] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2806.775984][T30515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2806.783955][T30515] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:19 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:19 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:19 executing program 3 (fault-call:5 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57b, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x2408, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2807.009481][T30536] FAULT_INJECTION: forcing a failure. [ 2807.009481][T30536] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.023447][T30536] CPU: 1 PID: 30536 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2807.033582][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2807.043620][T30536] Call Trace: [ 2807.046897][T30536] dump_stack+0x14a/0x1ce [ 2807.051301][T30536] ? devkmsg_release+0x11c/0x11c [ 2807.054202][T30541] FAULT_INJECTION: forcing a failure. [ 2807.054202][T30541] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.056235][T30536] ? show_regs_print_info+0x12/0x12 [ 2807.056251][T30536] ? __rcu_read_lock+0x50/0x50 [ 2807.056266][T30536] ? unwind_get_return_address_ptr+0x130/0x130 [ 2807.056280][T30536] should_fail+0x6fb/0x860 [ 2807.089377][T30536] ? setup_fault_attr+0x3d0/0x3d0 [ 2807.094459][T30536] ? stack_trace_save+0x1f0/0x1f0 [ 2807.099512][T30536] ? __kernel_text_address+0x93/0x110 [ 2807.104873][T30536] ? unwind_get_return_address+0x48/0x90 [ 2807.110490][T30536] ? __get_vm_area_node+0x19e/0x340 [ 2807.116366][T30536] should_failslab+0x5/0x20 [ 2807.120855][T30536] kmem_cache_alloc_trace+0x39/0x280 [ 2807.126125][T30536] __get_vm_area_node+0x19e/0x340 [ 2807.132189][T30536] __vmalloc_node_range+0xf0/0x7b0 [ 2807.137290][T30536] ? bpf_prog_alloc_no_stats+0x6b/0x250 [ 2807.142818][T30536] ? _raw_spin_lock_bh+0xa4/0x180 [ 2807.147843][T30536] ? _local_bh_enable+0x30/0x30 [ 2807.152688][T30536] ? kstrtouint_from_user+0x22d/0x2b0 [ 2807.158073][T30536] __vmalloc+0x40/0x50 [ 2807.162140][T30536] ? bpf_prog_alloc_no_stats+0x6b/0x250 [ 2807.167683][T30536] bpf_prog_alloc_no_stats+0x6b/0x250 [ 2807.173039][T30536] bpf_prog_alloc+0x1a/0x150 [ 2807.177743][T30536] __get_filter+0xf6/0x400 [ 2807.182150][T30536] sk_attach_filter+0x1e/0x130 [ 2807.186923][T30536] sock_setsockopt+0x2223/0x2e10 [ 2807.191843][T30536] ? sk_mc_loop+0x1d0/0x1d0 [ 2807.196335][T30536] ? security_socket_setsockopt+0xad/0xc0 [ 2807.202038][T30536] __sys_setsockopt+0x5d6/0x870 [ 2807.206876][T30536] ? __sb_end_write+0xa4/0xf0 [ 2807.211538][T30536] ? sockfs_listxattr+0xe0/0xe0 [ 2807.216378][T30536] ? ksys_write+0x25d/0x2c0 [ 2807.220879][T30536] ? __ia32_sys_read+0x80/0x80 [ 2807.225639][T30536] __x64_sys_setsockopt+0xb1/0xc0 [ 2807.230665][T30536] do_syscall_64+0xcb/0x150 [ 2807.235155][T30536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2807.241025][T30536] RIP: 0033:0x45ca59 [ 2807.244896][T30536] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2807.264479][T30536] RSP: 002b:00007fab6a803c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2807.272886][T30536] RAX: ffffffffffffffda RBX: 0000000000502fa0 RCX: 000000000045ca59 [ 2807.280846][T30536] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 2807.288796][T30536] RBP: 000000000078bf00 R08: 0000000000000010 R09: 0000000000000000 [ 2807.296818][T30536] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000004 [ 2807.304775][T30536] R13: 0000000000000a77 R14: 00000000004cd4a9 R15: 00007fab6a8046d4 [ 2807.312740][T30541] CPU: 0 PID: 30541 Comm: syz-executor.3 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2807.315340][T30536] syz-executor.2: vmalloc: allocation failure: 4096 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 2807.322879][T30541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2807.322882][T30541] Call Trace: [ 2807.322896][T30541] dump_stack+0x14a/0x1ce [ 2807.322904][T30541] ? devkmsg_release+0x11c/0x11c [ 2807.322916][T30541] ? show_regs_print_info+0x12/0x12 [ 2807.364262][T30541] ? memset+0x1f/0x40 [ 2807.368224][T30541] ? unwind_next_frame+0x1c90/0x2330 [ 2807.373491][T30541] should_fail+0x6fb/0x860 [ 2807.377881][T30541] ? setup_fault_attr+0x3d0/0x3d0 [ 2807.382884][T30541] ? __rcu_read_lock+0x50/0x50 [ 2807.387625][T30541] ? unwind_get_return_address_ptr+0x130/0x130 [ 2807.393756][T30541] ? __alloc_skb+0x88/0x4d0 [ 2807.398233][T30541] should_failslab+0x5/0x20 [ 2807.402720][T30541] kmem_cache_alloc+0x36/0x260 [ 2807.407463][T30541] ? is_bpf_text_address+0x290/0x2b0 [ 2807.412750][T30541] __alloc_skb+0x88/0x4d0 [ 2807.417058][T30541] ? __kernel_text_address+0x93/0x110 [ 2807.422516][T30541] alloc_skb_with_frags+0xb1/0x580 [ 2807.427717][T30541] sock_alloc_send_pskb+0x87e/0xcc0 [ 2807.432897][T30541] ? sock_kzfree_s+0x50/0x50 [ 2807.437462][T30541] ? avc_has_perm_noaudit+0x30c/0x400 [ 2807.442810][T30541] ? __rcu_read_lock+0x50/0x50 [ 2807.447558][T30541] ? avc_denied+0x1c0/0x1c0 [ 2807.452036][T30541] ? proc_pident_instantiate+0x71/0x2f0 [ 2807.457566][T30541] packet_sendmsg+0x3e84/0x6840 [ 2807.462396][T30541] ? avc_has_perm_noaudit+0x400/0x400 [ 2807.467748][T30541] ? unwind_next_frame+0x1c90/0x2330 [ 2807.473013][T30541] ? arch_stack_walk+0xb8/0x120 [ 2807.477847][T30541] ? unwind_get_return_address_ptr+0x130/0x130 [ 2807.483976][T30541] ? selinux_socket_sendmsg+0x122/0x340 [ 2807.489501][T30541] ? selinux_socket_accept+0x5b0/0x5b0 [ 2807.494936][T30541] ? compat_packet_setsockopt+0x160/0x160 [ 2807.500640][T30541] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2807.506684][T30541] ? rw_copy_check_uvector+0x6b/0x310 [ 2807.512033][T30541] ? import_iovec+0x1c2/0x380 [ 2807.516742][T30541] ? security_socket_sendmsg+0xad/0xc0 [ 2807.522198][T30541] ? compat_packet_setsockopt+0x160/0x160 [ 2807.527917][T30541] ____sys_sendmsg+0x58a/0x8d0 [ 2807.532663][T30541] ? __sys_sendmsg_sock+0x2b0/0x2b0 [ 2807.537840][T30541] __sys_sendmmsg+0x3b0/0x730 [ 2807.542493][T30541] ? __ia32_sys_sendmsg+0x90/0x90 [ 2807.547494][T30541] ? get_pid_task+0x86/0x90 [ 2807.551973][T30541] ? proc_fail_nth_write+0x18f/0x250 [ 2807.557236][T30541] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2807.562412][T30541] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2807.567582][T30541] ? memset+0x1f/0x40 [ 2807.571543][T30541] ? security_file_permission+0x128/0x300 [ 2807.577348][T30541] ? ksys_write+0x25d/0x2c0 [ 2807.581829][T30541] ? __ia32_sys_read+0x80/0x80 [ 2807.586592][T30541] __x64_sys_sendmmsg+0x9c/0xb0 [ 2807.591421][T30541] do_syscall_64+0xcb/0x150 [ 2807.595902][T30541] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2807.601805][T30541] RIP: 0033:0x45ca59 [ 2807.605684][T30541] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2807.625267][T30541] RSP: 002b:00007f16b1d9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2807.633652][T30541] RAX: ffffffffffffffda RBX: 00000000004fcee0 RCX: 000000000045ca59 [ 2807.641599][T30541] RDX: 0000000000000002 RSI: 0000000020000f00 RDI: 0000000000000003 [ 2807.649544][T30541] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.657489][T30541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2807.665436][T30541] R13: 00000000000008f4 R14: 00000000004cbc35 R15: 00007f16b1d9e6d4 [ 2807.673397][T30536] CPU: 1 PID: 30536 Comm: syz-executor.2 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2807.683545][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2807.693592][T30536] Call Trace: [ 2807.696874][T30536] dump_stack+0x14a/0x1ce [ 2807.701241][T30536] ? devkmsg_release+0x11c/0x11c [ 2807.706159][T30536] ? show_regs_print_info+0x12/0x12 [ 2807.711333][T30536] warn_alloc+0x236/0x380 [ 2807.715638][T30536] ? __kernel_text_address+0x93/0x110 [ 2807.721042][T30536] ? __get_vm_area_node+0x1ad/0x340 [ 2807.726216][T30536] ? zone_watermark_ok_safe+0x420/0x420 [ 2807.731742][T30536] ? __get_vm_area_node+0x19e/0x340 [ 2807.736931][T30536] ? kmem_cache_alloc_trace+0xc3/0x280 [ 2807.742390][T30536] ? __get_vm_area_node+0x329/0x340 [ 2807.747689][T30536] __vmalloc_node_range+0x417/0x7b0 [ 2807.752875][T30536] ? _raw_spin_lock_bh+0xa4/0x180 [ 2807.757888][T30536] ? _local_bh_enable+0x30/0x30 [ 2807.762723][T30536] ? kstrtouint_from_user+0x22d/0x2b0 [ 2807.768200][T30536] __vmalloc+0x40/0x50 [ 2807.772248][T30536] ? bpf_prog_alloc_no_stats+0x6b/0x250 [ 2807.777786][T30536] bpf_prog_alloc_no_stats+0x6b/0x250 [ 2807.783164][T30536] bpf_prog_alloc+0x1a/0x150 [ 2807.787738][T30536] __get_filter+0xf6/0x400 [ 2807.792141][T30536] sk_attach_filter+0x1e/0x130 [ 2807.796894][T30536] sock_setsockopt+0x2223/0x2e10 [ 2807.801836][T30536] ? sk_mc_loop+0x1d0/0x1d0 [ 2807.806320][T30536] ? security_socket_setsockopt+0xad/0xc0 [ 2807.812013][T30536] __sys_setsockopt+0x5d6/0x870 [ 2807.816839][T30536] ? __sb_end_write+0xa4/0xf0 [ 2807.821510][T30536] ? sockfs_listxattr+0xe0/0xe0 [ 2807.826335][T30536] ? ksys_write+0x25d/0x2c0 [ 2807.830825][T30536] ? __ia32_sys_read+0x80/0x80 [ 2807.835564][T30536] __x64_sys_setsockopt+0xb1/0xc0 [ 2807.840567][T30536] do_syscall_64+0xcb/0x150 [ 2807.845063][T30536] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2807.850947][T30536] RIP: 0033:0x45ca59 [ 2807.854829][T30536] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2807.874419][T30536] RSP: 002b:00007fab6a803c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2807.883061][T30536] RAX: ffffffffffffffda RBX: 0000000000502fa0 RCX: 000000000045ca59 [ 2807.891259][T30536] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 2807.899239][T30536] RBP: 000000000078bf00 R08: 0000000000000010 R09: 0000000000000000 [ 2807.907454][T30536] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000004 [ 2807.915417][T30536] R13: 0000000000000a77 R14: 00000000004cd4a9 R15: 00007fab6a8046d4 [ 2807.926682][T30536] Mem-Info: [ 2807.929865][T30536] active_anon:115635 inactive_anon:12201 isolated_anon:0 [ 2807.929865][T30536] active_file:17301 inactive_file:74139 isolated_file:0 [ 2807.929865][T30536] unevictable:0 dirty:253 writeback:0 unstable:0 [ 2807.929865][T30536] slab_reclaimable:9990 slab_unreclaimable:69016 [ 2807.929865][T30536] mapped:60879 shmem:13028 pagetables:9613 bounce:0 [ 2807.929865][T30536] free:1265228 free_pcp:938 free_cma:0 [ 2807.968237][T30536] Node 0 active_anon:462540kB inactive_anon:48804kB active_file:69204kB inactive_file:296556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:243516kB dirty:1012kB writeback:0kB shmem:52112kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 2807.993688][T30536] DMA free:15904kB min:24kB low:36kB high:48kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2808.020074][T30536] lowmem_reserve[]: 0 2912 6416 6416 [ 2808.025775][T30536] DMA32 free:2982352kB min:4644kB low:7624kB high:10604kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2983768kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1416kB local_pcp:1372kB free_cma:0kB [ 2808.053899][T30536] lowmem_reserve[]: 0 0 3504 3504 [ 2808.059069][T30536] Normal free:2062656kB min:5592kB low:9180kB high:12768kB active_anon:462440kB inactive_anon:48804kB active_file:69204kB inactive_file:296556kB unevictable:0kB writepending:1012kB present:4718592kB managed:3588928kB mlocked:0kB kernel_stack:13728kB pagetables:38452kB bounce:0kB free_pcp:2592kB local_pcp:1124kB free_cma:0kB [ 2808.090149][T30536] lowmem_reserve[]: 0 0 0 0 [ 2808.094800][T30536] DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (U) 3*4096kB (M) = 15904kB [ 2808.109568][T30536] DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 726*4096kB (M) = 2982352kB [ 2808.128297][T30536] Normal: 289*4kB (UM) 159*8kB (UME) 319*16kB (UME) 389*32kB (UME) 499*64kB (UME) 167*128kB (UME) 56*256kB (UME) 13*512kB (UME) 13*1024kB (UME) 7*2048kB (UE) 474*4096kB (UM) = 2063436kB [ 2808.148418][T30536] 66959 total pagecache pages [ 2808.153847][T30536] 0 pages in swap cache [ 2808.158150][T30536] Swap cache stats: add 0, delete 0, find 0/0 [ 2808.168204][T30536] Free swap = 0kB [ 2808.171958][T30536] Total swap = 0kB [ 2808.175975][T30536] 1965979 pages RAM [ 2808.179869][T30536] 0 pages HighMem/MovableOnly [ 2808.184681][T30536] 318829 pages reserved [ 2808.188931][T30536] 0 pages cma reserved 15:28:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:21 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:21 executing program 0 (fault-call:11 fault-nth:76): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffff57a, 0xaaaaaaaaaaaaab7, &(0x7f0000000340)=[{&(0x7f0000000140)="c1a644f8b988dcb7abf14324247463b39f11f43885f58d4257036d8bdf4b323cd77417bc6f1203b871e50221deccd72a3531dc64aa43d9f29892b3a098f29c5c34c37f49358c859a067d4d73c864641c51811a7f907111bdc278aa0f676c38356cb91c07842567d0dee19f78f89903253b9606ed37a5556945c5", 0x0, 0x5}, {&(0x7f00000001c0)="c133b9e3dbd4252c802d4e0e9ef35cb45104b12c240c09ad75163d85f6f4b1e27ee9e23ed1fe66a9afe35c9c9c1328a4ea64ae4db8ad2a066ef4ba9c71b36893000d45131fcbbd7c21a9cd72a36f981502b0e1f1b6b83432f5d313b1fa", 0x0, 0x2}, {&(0x7f00000002c0)="ba6d77a2f53b6f7240029b28eef219b2a8641c25a966f04bd74561e131f78636920c5728d5728a78430e5c6df5d025fedffdb75797d038ef24dc58e28821c84a8d138ee3f89e2fd4e948ee434262ee7a852f82cca0", 0x0, 0x9}], 0x180003, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:21 executing program 3 (fault-call:5 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x2, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x3, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x4, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2809.465770][T30574] FAULT_INJECTION: forcing a failure. [ 2809.465770][T30574] name failslab, interval 1, probability 0, space 0, times 0 [ 2809.479354][T30574] CPU: 1 PID: 30574 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2809.489701][T30574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2809.499868][T30574] Call Trace: [ 2809.503168][T30574] dump_stack+0x14a/0x1ce [ 2809.507502][T30574] ? devkmsg_release+0x11c/0x11c [ 2809.512647][T30574] ? inet_sendpage+0xd7/0x130 [ 2809.517328][T30574] ? show_regs_print_info+0x12/0x12 [ 2809.522535][T30574] should_fail+0x6fb/0x860 [ 2809.527063][T30574] ? setup_fault_attr+0x3d0/0x3d0 [ 2809.532104][T30574] ? dst_alloc+0x137/0x4f0 [ 2809.537134][T30574] should_failslab+0x5/0x20 [ 2809.541785][T30574] kmem_cache_alloc+0x36/0x260 [ 2809.546549][T30574] dst_alloc+0x137/0x4f0 [ 2809.550793][T30574] rt_dst_clone+0x53/0x670 [ 2809.555218][T30574] ip_mc_finish_output+0xad/0x3a0 [ 2809.560256][T30574] ip_mc_output+0x3fb/0x9f0 [ 2809.565165][T30574] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2809.570632][T30574] ? nf_hook_slow+0x1a6/0x1f0 [ 2809.575319][T30574] ? ip_mc_output+0x9f0/0x9f0 [ 2809.580018][T30574] ? ip_send_check+0xd0/0xd0 [ 2809.584628][T30574] ? __ip_local_out+0x470/0x470 [ 2809.589568][T30574] ? inet_rtm_getroute+0x2590/0x2590 [ 2809.594861][T30574] ? csum_partial+0x379/0x470 [ 2809.599557][T30574] ? siphash_3u32+0x22/0x240 [ 2809.604165][T30574] ? csum_partial+0x379/0x470 [ 2809.608841][T30574] ip_send_skb+0xaa/0x140 [ 2809.613354][T30574] udp_send_skb+0x8e9/0x1100 [ 2809.617972][T30574] udp_sendpage+0x2f2/0x5c0 [ 2809.622498][T30574] ? udplite_getfrag+0x70/0x70 [ 2809.627282][T30574] ? mutex_lock+0xa6/0x110 [ 2809.631704][T30574] ? inet_send_prepare+0x1b7/0x470 [ 2809.637003][T30574] ? udplite_getfrag+0x70/0x70 [ 2809.641867][T30574] inet_sendpage+0xd7/0x130 [ 2809.646382][T30574] ? inet_sendmsg+0xc0/0xc0 [ 2809.650893][T30574] sock_sendpage+0xd0/0x120 [ 2809.655399][T30574] pipe_to_sendpage+0x23b/0x300 [ 2809.660253][T30574] ? sock_fasync+0xf0/0xf0 [ 2809.664672][T30574] ? generic_splice_sendpage+0x210/0x210 [ 2809.670303][T30574] __splice_from_pipe+0x2d3/0x870 [ 2809.675474][T30574] ? generic_splice_sendpage+0x210/0x210 [ 2809.681138][T30574] generic_splice_sendpage+0x184/0x210 [ 2809.686620][T30574] ? iter_file_splice_write+0xf60/0xf60 [ 2809.692181][T30574] ? security_file_permission+0x128/0x300 [ 2809.697917][T30574] ? iter_file_splice_write+0xf60/0xf60 [ 2809.703533][T30574] __se_sys_splice+0x7ee/0x1b70 [ 2809.708824][T30574] ? fput_many+0x42/0x1a0 [ 2809.714728][T30574] ? ksys_write+0x25d/0x2c0 [ 2809.719375][T30574] ? file_open_root+0x450/0x450 [ 2809.724467][T30574] ? __x64_sys_splice+0xf0/0xf0 [ 2809.729324][T30574] ? __x64_sys_splice+0x1d/0xf0 [ 2809.734183][T30574] do_syscall_64+0xcb/0x150 [ 2809.738700][T30574] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2809.744795][T30574] RIP: 0033:0x45ca59 [ 2809.748699][T30574] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2809.768745][T30574] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2809.777513][T30574] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2809.785501][T30574] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2809.793755][T30574] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2809.801745][T30574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 15:28:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x6, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2809.809808][T30574] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x8, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x1d, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x13, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:24 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:24 executing program 1: syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:24 executing program 0 (fault-call:11 fault-nth:77): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb4574008d0401e9010002f9fff8000000d600000000", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffffa, 0x8080) openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x824ba1dc0}) 15:28:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x21, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_rr_get_interval(r0, &(0x7f0000000000)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x300, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2812.422633][T30598] FAT-fs (loop4): bogus number of reserved sectors [ 2812.429525][T30598] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2812.480118][T30623] FAULT_INJECTION: forcing a failure. [ 2812.480118][T30623] name failslab, interval 1, probability 0, space 0, times 0 [ 2812.492767][T30623] CPU: 1 PID: 30623 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2812.503125][T30623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2812.513186][T30623] Call Trace: [ 2812.516492][T30623] dump_stack+0x14a/0x1ce [ 2812.520861][T30623] ? devkmsg_release+0x11c/0x11c 15:28:24 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1a00, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:24 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x19222e, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2812.525947][T30623] ? __kmalloc_track_caller+0x201/0x2c0 [ 2812.531511][T30623] ? show_regs_print_info+0x12/0x12 [ 2812.536850][T30623] ? __ip_append_data+0x1fb9/0x3170 [ 2812.542062][T30623] ? udp_sendmsg+0x3ef/0x2f40 [ 2812.546758][T30623] ? memset+0x1f/0x40 [ 2812.550754][T30623] should_fail+0x6fb/0x860 [ 2812.555334][T30623] ? setup_fault_attr+0x3d0/0x3d0 [ 2812.560375][T30623] ? arch_stack_walk+0xb8/0x120 [ 2812.565440][T30623] ? skb_clone+0x1b2/0x370 [ 2812.569870][T30623] should_failslab+0x5/0x20 [ 2812.574483][T30623] kmem_cache_alloc+0x36/0x260 [ 2812.579240][T30623] skb_clone+0x1b2/0x370 [ 2812.583476][T30623] dev_queue_xmit_nit+0x279/0x9e0 [ 2812.588486][T30623] ? validate_xmit_skb+0x630/0xc60 [ 2812.594107][T30623] xmit_one+0x7b/0x460 [ 2812.598167][T30623] dev_hard_start_xmit+0xac/0x1b0 [ 2812.603348][T30623] sch_direct_xmit+0x23b/0x970 [ 2812.608204][T30623] ? nvmem_get_mac_address+0x310/0x310 [ 2812.613650][T30623] ? stack_trace_save+0x123/0x1f0 [ 2812.619038][T30623] __qdisc_run+0x245/0x420 [ 2812.623620][T30623] ? sch_direct_xmit+0x970/0x970 [ 2812.628699][T30623] ? pfifo_fast_enqueue+0x36e/0x580 [ 2812.634036][T30623] __dev_queue_xmit+0x11fa/0x2680 [ 2812.639250][T30623] ? dev_queue_xmit+0x20/0x20 [ 2812.644147][T30623] ? ip_finish_output2+0x936/0x1810 [ 2812.649375][T30623] ip_finish_output2+0xbdf/0x1810 [ 2812.654394][T30623] ? ip_fragment+0x210/0x210 [ 2812.659028][T30623] ? __ip_finish_output+0x4e1/0x6d0 [ 2812.664238][T30623] ip_mc_output+0x8b5/0x9f0 [ 2812.668731][T30623] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2812.674351][T30623] ? nf_hook_slow+0x1a6/0x1f0 [ 2812.679650][T30623] ? ip_mc_output+0x9f0/0x9f0 [ 2812.684327][T30623] ? ip_send_check+0xd0/0xd0 [ 2812.690396][T30623] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2812.695901][T30623] ? inet_rtm_getroute+0x2590/0x2590 [ 2812.701402][T30623] ? csum_partial+0x379/0x470 [ 2812.706397][T30623] ? siphash_3u32+0x22/0x240 [ 2812.711081][T30623] ? csum_partial+0x379/0x470 [ 2812.715751][T30623] ip_send_skb+0xaa/0x140 [ 2812.720083][T30623] udp_send_skb+0x8e9/0x1100 [ 2812.724672][T30623] udp_sendpage+0x2f2/0x5c0 [ 2812.729180][T30623] ? udplite_getfrag+0x70/0x70 [ 2812.734123][T30623] ? mutex_lock+0xa6/0x110 [ 2812.738677][T30623] ? inet_send_prepare+0x1b7/0x470 [ 2812.743923][T30623] ? udplite_getfrag+0x70/0x70 [ 2812.748860][T30623] inet_sendpage+0xd7/0x130 [ 2812.753392][T30623] ? inet_sendmsg+0xc0/0xc0 [ 2812.757885][T30623] sock_sendpage+0xd0/0x120 [ 2812.762526][T30623] pipe_to_sendpage+0x23b/0x300 [ 2812.767385][T30623] ? sock_fasync+0xf0/0xf0 [ 2812.771805][T30623] ? generic_splice_sendpage+0x210/0x210 [ 2812.777434][T30623] __splice_from_pipe+0x2d3/0x870 [ 2812.782605][T30623] ? generic_splice_sendpage+0x210/0x210 [ 2812.788240][T30623] generic_splice_sendpage+0x184/0x210 [ 2812.793707][T30623] ? iter_file_splice_write+0xf60/0xf60 [ 2812.799270][T30623] ? security_file_permission+0x128/0x300 [ 2812.805123][T30623] ? iter_file_splice_write+0xf60/0xf60 [ 2812.810653][T30623] __se_sys_splice+0x7ee/0x1b70 [ 2812.815621][T30623] ? fput_many+0x42/0x1a0 [ 2812.819940][T30623] ? ksys_write+0x25d/0x2c0 [ 2812.824430][T30623] ? file_open_root+0x450/0x450 [ 2812.829269][T30623] ? __x64_sys_splice+0xf0/0xf0 [ 2812.834103][T30623] ? __x64_sys_splice+0x1d/0xf0 [ 2812.839363][T30623] do_syscall_64+0xcb/0x150 [ 2812.843974][T30623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2812.849860][T30623] RIP: 0033:0x45ca59 [ 2812.853745][T30623] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2812.873816][T30623] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2812.882210][T30623] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2812.890269][T30623] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2812.898335][T30623] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2812.906293][T30623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2812.914384][T30623] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2813.025335][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2813.034589][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:27 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000180)=""/217) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/401], 0x190) 15:28:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x2, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:27 executing program 0 (fault-call:11 fault-nth:78): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) dup(0xffffffffffffffff) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000001200)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f00000001c0)={{0x2, 0x200, 0x6, 0x401, 0x57, 0x2}, 0x3ae, [0x8, 0x9, 0x9, 0xff, 0x6, 0x9e4, 0xe4, 0x8, 0x6, 0xffffffff, 0x0, 0x8, 0xffffffff, 0xffff, 0x4, 0x20, 0x80000000, 0x9, 0x3, 0x8, 0xefdf, 0x0, 0x1, 0x9, 0x4, 0x1, 0x5, 0x3, 0x9f24, 0x6, 0x80000001, 0x80, 0x0, 0xba57faa, 0x400, 0xfffff801, 0x4, 0x5, 0x2, 0x3ff, 0x4, 0xff, 0x400, 0xfffffffc, 0x5, 0x855, 0x1f, 0x7, 0x80000000, 0xffffeaed, 0xfffffffd, 0x0, 0x4, 0x23b48e26, 0x0, 0x4c, 0xf52, 0x3638, 0x200, 0x401, 0xaea, 0x7fff, 0x3, 0x6, 0x3, 0x7, 0x5, 0x5, 0x2, 0x9e1, 0x0, 0x1, 0x7f5, 0xfe, 0x6, 0x8a1, 0x5, 0x4c, 0x3, 0xffff, 0x7, 0xa9, 0x4, 0x9, 0xfffff001, 0xe2df, 0x3, 0x46, 0x4, 0x50000000, 0x3, 0x67cc, 0xb, 0x8e8, 0x6, 0xfffffca4, 0x0, 0xfff, 0x2, 0xb4, 0x6, 0x7, 0x9, 0x3, 0x4, 0x7862a1bd, 0x5, 0x8001, 0x5, 0x9, 0x7, 0x1547, 0x1184, 0xdb, 0x1, 0x6, 0x7ff, 0x6, 0x1, 0xd6, 0xd0, 0x10000, 0x8, 0x7, 0xfffff801, 0x33, 0x7, 0x2, 0xffffff4a, 0x9, 0xff00, 0x5, 0x7fffffff, 0xcad9, 0x2, 0x7fff, 0x5, 0x7, 0x9, 0x100, 0x6, 0x3, 0x5, 0xfffffff9, 0x0, 0x7328808, 0x0, 0x6, 0x3, 0x40000000, 0x2, 0x800, 0xcd37, 0x800, 0x4, 0x1, 0xe4b, 0xd05, 0x80000001, 0x8, 0x7, 0x800000, 0x8, 0x7f0, 0x66cf, 0x2, 0x101, 0x9, 0x3, 0x3, 0xfff, 0x5, 0x2, 0x364b, 0x2, 0x7ff, 0x0, 0x1, 0x1, 0x6, 0x7, 0x1f, 0x3, 0x0, 0xffffffe0, 0x1, 0x8, 0x1, 0x6, 0x10000, 0x2, 0x3, 0xcf, 0x1, 0x0, 0x200, 0x4, 0x9, 0x0, 0x7f4b, 0x7, 0x0, 0x7f, 0xfffffcf5, 0x1c0000, 0x7, 0x0, 0x1560, 0x4, 0x5, 0x400, 0x2, 0x413, 0x7f, 0x1, 0x9, 0x2, 0x1000, 0x9be0, 0x800, 0x10001, 0xf80, 0x2, 0x0, 0x20, 0x6, 0x5, 0xfff, 0x0, 0x7f, 0x100, 0xfffffff7, 0x341b, 0x8, 0x5, 0x9, 0x9, 0xd2c, 0x68ca, 0x6, 0x2, 0x5, 0x7ff, 0xb35a, 0x7, 0xfffffc01, 0x80000000, 0x1, 0xe, 0x400, 0x10000, 0x16a7, 0x4, 0x5, 0x8, 0x81, 0x4800000, 0x55, 0x8, 0x9, 0x400, 0x6, 0x1, 0x7f, 0x937, 0x10001, 0x2, 0x0, 0x1, 0x1, 0x5, 0x2, 0x80000001, 0xffe00000, 0x3ff, 0x7, 0xffffffff, 0x7, 0xf76, 0x7ff, 0x800, 0x100, 0x101, 0xe663119c, 0x7, 0xbc92, 0x401, 0x90, 0x1ff, 0x7, 0x7, 0x3, 0xfffffff7, 0x83, 0x20, 0x4, 0x7fff, 0x8000, 0x9, 0x401, 0x3, 0x6, 0x0, 0x4, 0x3, 0x100, 0x9, 0xfffffffc, 0x284352c8, 0x1000, 0x6, 0x6, 0x7, 0x9, 0x3ff, 0x1e, 0x4bdc, 0x8, 0x4, 0x2, 0x9, 0x53a5, 0x565e, 0x1, 0x8, 0x6, 0x2, 0x1000, 0x8000, 0x3, 0x5, 0xd6, 0x1, 0x66cb9476, 0x2, 0x1000, 0x7fffffff, 0x100, 0x2, 0x10001, 0x1, 0xf3, 0x0, 0x3, 0x101, 0x7, 0x8001, 0x0, 0x7, 0x40, 0x0, 0x0, 0x7fff, 0x8, 0x4, 0xfffff014, 0x2, 0x1, 0x1, 0x5, 0x80, 0xff, 0xffff, 0x10000, 0x33, 0x8, 0x2, 0xffff, 0x4, 0x80, 0x20, 0x7, 0x2, 0x8, 0x81, 0x10000, 0xd24, 0x0, 0x80000001, 0x3, 0x1000, 0x1f, 0xba, 0xffff, 0xfffffff9, 0x5, 0x428f, 0x9ce, 0x4, 0x8, 0x6, 0x0, 0xfe6, 0x80, 0xd1, 0x10000, 0x2, 0x40, 0x3, 0x100, 0x382d, 0x2, 0x5, 0x100, 0x3f800, 0x4, 0x80000001, 0xfffffff7, 0x5, 0x5, 0x175c, 0x4, 0x3ff, 0x4cd, 0x7, 0x400, 0x7, 0xfffffff7, 0x0, 0xfff, 0x2, 0x2, 0xa5ab, 0x5, 0x8, 0x3f, 0x6, 0x2, 0x8, 0x8ad, 0x101, 0xed9e, 0xffffff09, 0x9, 0x7, 0x20, 0x8, 0x6, 0x9, 0x4, 0xec48, 0x7fff, 0x6a5, 0x5, 0xffffffff, 0x1, 0x4, 0xd92b, 0xd9, 0x1f, 0xffffffff, 0x8001, 0x1, 0xffff9746, 0x0, 0x3, 0xb922, 0x7, 0x4, 0x5, 0x200, 0xffff, 0x4, 0x6, 0x6, 0x0, 0x38f5815f, 0x7, 0x3f, 0x31, 0x5, 0x7ff, 0x3, 0x4, 0x4, 0x7, 0x7fffffff, 0x290b, 0x8, 0x7, 0x8, 0x0, 0x3, 0x4, 0x6, 0x1, 0x1ff, 0x4, 0x6, 0x400, 0x6, 0x8, 0x401, 0x17, 0x200, 0x2, 0x6, 0xbc, 0x1, 0xfffffffa, 0x10000, 0x6f, 0x8c, 0x8, 0x0, 0x6, 0x0, 0x800, 0x5, 0x8f4, 0x0, 0x4, 0x74f, 0x1, 0x1f, 0x8000, 0x5, 0x5, 0x7f, 0x8001, 0x401, 0xa000, 0x0, 0x7, 0x2, 0x8, 0x9, 0x0, 0x9, 0x9, 0xd3f1, 0x7, 0xc48, 0x2, 0x9, 0x3, 0x2, 0x1, 0x4, 0x5, 0x7fffffff, 0x89e0, 0x8, 0xffffffff, 0x518, 0x9, 0x3, 0x8, 0x81, 0x8000, 0x3, 0x40, 0x5, 0x2, 0x7, 0xfffffffc, 0x6, 0x74, 0x8, 0xffffff1b, 0x1f, 0x5, 0x3bc3, 0x40, 0x9, 0x4, 0x843b, 0x101, 0x401, 0x0, 0x6, 0x80000000, 0x5, 0x5, 0xfff, 0xa9f, 0x0, 0x8, 0x7ff, 0x200, 0x7, 0xffffffff, 0x8, 0x80000001, 0x5, 0x798, 0x5, 0x3, 0xece36ec, 0xff, 0x3, 0x2, 0x4, 0x4, 0x5, 0x7c, 0x92a8062, 0x200, 0x8, 0x0, 0x101, 0x2, 0x1bc0, 0x80000000, 0x1, 0x10001, 0xf51f, 0x5, 0x7, 0x81, 0xff, 0x4, 0x8, 0x100, 0x56, 0x9, 0x4, 0x5, 0xffff, 0x4, 0x7, 0x7fff, 0x1ff, 0x3, 0xfff, 0x5, 0x7, 0x325f, 0x40, 0x1, 0x10001, 0x9, 0x1, 0x4, 0x4, 0x8, 0x3, 0x0, 0x6, 0x8, 0x200, 0x7ff, 0x4b54, 0x7, 0x9, 0x66, 0x4bd, 0xfffffff8, 0x1, 0x6, 0x4, 0x20, 0x300, 0x3, 0x3, 0x40, 0xffffff80, 0x4, 0x3, 0x0, 0x6, 0x2405, 0x1f1e3b8b, 0xfffffeff, 0x8, 0x7ff, 0x3, 0x7f, 0x80000001, 0x2, 0x800, 0x800, 0x18000, 0x3f, 0xfff, 0x6, 0x0, 0x0, 0x7f, 0x10000000, 0xfffffffc, 0x12000000, 0x0, 0x2, 0x6ba6, 0x7, 0x4, 0x8, 0x6, 0x3, 0x9, 0x0, 0xe169, 0x0, 0x2, 0x6, 0x4, 0x2, 0x57, 0x2, 0x0, 0x0, 0x2, 0x7ff, 0xffffffff, 0x0, 0x9, 0x4, 0x7f, 0x9, 0x4, 0x400, 0x0, 0x4, 0x8, 0x9, 0xb62b, 0x20, 0x10001, 0x8, 0x2, 0x6, 0x7, 0x9, 0x6, 0x5, 0x8, 0x4, 0x80, 0x10000, 0x9be1, 0x9, 0x81, 0x4, 0xdb, 0x3, 0x2, 0x6, 0xb9d, 0x1, 0x8, 0xffffffff, 0x3, 0x696e0f55, 0xfffffffc, 0x1ff, 0x101, 0x2, 0x6, 0x2, 0x6, 0x425, 0x8, 0x5, 0x9, 0x8000, 0x5, 0x2, 0xffff, 0x401d, 0x13d4, 0xa7, 0x5, 0x5, 0x0, 0x5, 0x38b8b7a8, 0x7, 0x3, 0x7, 0x0, 0x3, 0x7c00000, 0x1, 0x5, 0x9, 0xfffffe01, 0x10000, 0xffff, 0x7fffffff, 0x80, 0x81, 0x3, 0xffffffff, 0x1ff, 0x9, 0x9, 0x5, 0xffffffff, 0x0, 0xffff42e8, 0x2, 0x4, 0x9, 0x6, 0x148f, 0xf037, 0x0, 0x7f, 0x8, 0x0, 0x7fffffff, 0x6, 0x5, 0xfe0b, 0x26, 0xc23, 0x6, 0x9, 0x8, 0x4, 0x3, 0x302, 0x28, 0x5a28f645, 0xb6, 0xe72, 0x9, 0x1, 0x82b, 0x919, 0x8, 0x1, 0xfffffeff, 0x10000, 0xfffffff8, 0x6, 0x200, 0x679f2a50, 0x401, 0xfff, 0x5, 0x7, 0x5, 0x80000000, 0x8d03, 0x80000000, 0x7ff, 0x1, 0x1d1, 0x9, 0x400, 0xfff, 0x4, 0x1, 0x1, 0x1, 0x9, 0x2e908492, 0x45, 0xfffffff7, 0x0, 0x80000000, 0x7, 0x2, 0x6, 0x3f, 0x4c9, 0x9, 0x1, 0x1, 0x1, 0x6, 0x1, 0xffffffff, 0x4d, 0x0, 0x80000000, 0x7, 0x40, 0x6, 0x4, 0xfffffff9, 0x2, 0x8001, 0x8, 0xd81, 0x54d, 0x7, 0x4, 0x9, 0x2, 0xff, 0x3, 0x6, 0x7fff, 0x2, 0xfff, 0x8000, 0xfffffbff, 0xe97a, 0x1f, 0x8, 0x608, 0xfffffffa, 0x0, 0xa35c, 0x2, 0x1, 0x6, 0x100, 0x3, 0x3, 0x5, 0x0, 0xfffff801, 0x1ff, 0x7a45, 0x6, 0x10000, 0xfffffffb, 0x7fffffff, 0x5, 0x9, 0x9df4, 0x80000001, 0x7, 0x5, 0x4, 0x6, 0x7e75, 0xe8, 0xa464, 0x1, 0x0, 0x5, 0x6, 0xfffffffb, 0x5, 0x5, 0x2, 0x0, 0x10001, 0x20, 0x7fff, 0x3a, 0x200, 0x9, 0x4, 0x1, 0x56a, 0x0, 0x4bb, 0x4, 0x4, 0xffffa8a3, 0x62, 0x800, 0x0, 0x10000, 0x8, 0x10001, 0x8, 0x5d, 0x4, 0x4, 0x8, 0x6, 0x7, 0x0, 0xffffff7f, 0x2, 0x3, 0x7, 0x3a0a, 0x1000, 0x6, 0x4, 0x61360000, 0x1, 0x6, 0x58a, 0x9, 0xfff, 0x4, 0xfffffffd, 0x5, 0x8, 0xb7, 0x401, 0x1, 0x2, 0x3f, 0x9, 0x95ce, 0x0, 0x7, 0x5, 0x6, 0x5, 0x9, 0x1f, 0x4, 0x3, 0x4, 0x2, 0x0, 0x66f44ef6, 0x101, 0x4, 0x418e, 0x40, 0x2, 0x7, 0x8, 0x4, 0x5, 0x6146, 0xff, 0x6, 0x7, 0x3, 0xfffffffe, 0x80000000, 0xfffffff7, 0x200, 0x7, 0x5, 0x80000000, 0xf48, 0x0, 0x6, 0x105f, 0x3e]}) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000180)=0x1200800) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='cgroup.stat\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.stat\x00', 0x0, 0x0) getpeername$unix(r4, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x800) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) symlinkat(&(0x7f0000000300)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00') 15:28:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2815.486223][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2815.495284][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2815.505291][T30678] FAULT_INJECTION: forcing a failure. [ 2815.505291][T30678] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.518060][T30678] CPU: 1 PID: 30678 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2815.528218][T30678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2815.538259][T30678] Call Trace: [ 2815.541548][T30678] dump_stack+0x14a/0x1ce [ 2815.545867][T30678] ? devkmsg_release+0x11c/0x11c [ 2815.550815][T30678] ? __se_sys_splice+0x7ee/0x1b70 [ 2815.555831][T30678] ? show_regs_print_info+0x12/0x12 [ 2815.561018][T30678] should_fail+0x6fb/0x860 [ 2815.565994][T30678] ? setup_fault_attr+0x3d0/0x3d0 [ 2815.571041][T30678] ? alloc_skb_for_msg+0x220/0x220 [ 2815.576177][T30678] ? skb_clone+0x1b2/0x370 [ 2815.580587][T30678] should_failslab+0x5/0x20 [ 2815.585068][T30678] kmem_cache_alloc+0x36/0x260 [ 2815.589837][T30678] skb_clone+0x1b2/0x370 [ 2815.594077][T30678] packet_rcv_spkt+0x129/0x490 [ 2815.598819][T30678] ? skb_clone+0x1f4/0x370 [ 2815.603219][T30678] ? packet_rcv+0x1410/0x1410 [ 2815.607874][T30678] dev_queue_xmit_nit+0x36c/0x9e0 [ 2815.612896][T30678] xmit_one+0x7b/0x460 [ 2815.616943][T30678] dev_hard_start_xmit+0xac/0x1b0 [ 2815.622011][T30678] sch_direct_xmit+0x23b/0x970 [ 2815.626760][T30678] ? nvmem_get_mac_address+0x310/0x310 [ 2815.632202][T30678] ? switch_mm_irqs_off+0x509/0xa10 [ 2815.637481][T30678] __qdisc_run+0x245/0x420 [ 2815.641880][T30678] ? sch_direct_xmit+0x970/0x970 [ 2815.646838][T30678] ? pfifo_fast_enqueue+0x36e/0x580 [ 2815.652036][T30678] __dev_queue_xmit+0x11fa/0x2680 [ 2815.657040][T30678] ? dev_queue_xmit+0x20/0x20 [ 2815.661716][T30678] ? ___preempt_schedule+0x16/0x20 [ 2815.666814][T30678] ? ip_finish_output2+0x936/0x1810 [ 2815.671997][T30678] ip_finish_output2+0xbdf/0x1810 [ 2815.677023][T30678] ? ip_fragment+0x210/0x210 [ 2815.681588][T30678] ? __ip_finish_output+0x4e1/0x6d0 [ 2815.686784][T30678] ip_mc_output+0x8b5/0x9f0 [ 2815.691325][T30678] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2815.696761][T30678] ? nf_hook_slow+0x1a6/0x1f0 [ 2815.701438][T30678] ? ip_mc_output+0x9f0/0x9f0 [ 2815.706092][T30678] ? ip_send_check+0xd0/0xd0 [ 2815.710672][T30678] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2815.715950][T30678] ? inet_rtm_getroute+0x2590/0x2590 [ 2815.721209][T30678] ? csum_partial+0x379/0x470 [ 2815.725882][T30678] ? siphash_3u32+0x22/0x240 [ 2815.730459][T30678] ? csum_partial+0x379/0x470 [ 2815.735179][T30678] ip_send_skb+0xaa/0x140 [ 2815.739492][T30678] udp_send_skb+0x8e9/0x1100 [ 2815.744064][T30678] udp_sendpage+0x2f2/0x5c0 [ 2815.748595][T30678] ? udplite_getfrag+0x70/0x70 [ 2815.753364][T30678] ? mutex_lock+0xa6/0x110 [ 2815.757771][T30678] ? inet_send_prepare+0x1b7/0x470 [ 2815.762984][T30678] ? udplite_getfrag+0x70/0x70 [ 2815.767741][T30678] inet_sendpage+0xd7/0x130 [ 2815.772227][T30678] ? inet_sendmsg+0xc0/0xc0 [ 2815.776731][T30678] sock_sendpage+0xd0/0x120 [ 2815.781223][T30678] pipe_to_sendpage+0x23b/0x300 [ 2815.786054][T30678] ? sock_fasync+0xf0/0xf0 [ 2815.790447][T30678] ? generic_splice_sendpage+0x210/0x210 [ 2815.796088][T30678] __splice_from_pipe+0x2d3/0x870 [ 2815.801090][T30678] ? generic_splice_sendpage+0x210/0x210 [ 2815.806699][T30678] generic_splice_sendpage+0x184/0x210 [ 2815.812151][T30678] ? iter_file_splice_write+0xf60/0xf60 [ 2815.817694][T30678] ? security_file_permission+0x128/0x300 [ 2815.823410][T30678] ? iter_file_splice_write+0xf60/0xf60 [ 2815.828938][T30678] __se_sys_splice+0x7ee/0x1b70 [ 2815.833772][T30678] ? fput_many+0x42/0x1a0 [ 2815.838081][T30678] ? ksys_write+0x25d/0x2c0 [ 2815.842561][T30678] ? file_open_root+0x450/0x450 [ 2815.847428][T30678] ? __x64_sys_splice+0xf0/0xf0 [ 2815.852252][T30678] ? __x64_sys_splice+0x1d/0xf0 [ 2815.857080][T30678] do_syscall_64+0xcb/0x150 [ 2815.861562][T30678] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2815.867429][T30678] RIP: 0033:0x45ca59 [ 2815.871295][T30678] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2815.890878][T30678] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2815.899265][T30678] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2815.907220][T30678] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2815.915167][T30678] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2815.923112][T30678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2815.931066][T30678] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:28 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:28 executing program 0 (fault-call:11 fault-nth:79): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2816.392222][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2816.401040][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2816.413664][T30713] FAULT_INJECTION: forcing a failure. [ 2816.413664][T30713] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.426281][T30713] CPU: 1 PID: 30713 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2816.436485][T30713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2816.446522][T30713] Call Trace: [ 2816.449843][T30713] dump_stack+0x14a/0x1ce [ 2816.454174][T30713] ? devkmsg_release+0x11c/0x11c [ 2816.459091][T30713] ? __se_sys_splice+0x7ee/0x1b70 [ 2816.464100][T30713] ? show_regs_print_info+0x12/0x12 [ 2816.469294][T30713] should_fail+0x6fb/0x860 [ 2816.473690][T30713] ? setup_fault_attr+0x3d0/0x3d0 [ 2816.478691][T30713] ? alloc_skb_for_msg+0x220/0x220 [ 2816.483865][T30713] ? skb_clone+0x1b2/0x370 [ 2816.488255][T30713] should_failslab+0x5/0x20 [ 2816.492737][T30713] kmem_cache_alloc+0x36/0x260 [ 2816.497474][T30713] skb_clone+0x1b2/0x370 [ 2816.501692][T30713] packet_rcv_spkt+0x129/0x490 [ 2816.506426][T30713] ? skb_clone+0x1f4/0x370 [ 2816.510815][T30713] ? packet_rcv+0x1410/0x1410 [ 2816.515467][T30713] dev_queue_xmit_nit+0x36c/0x9e0 [ 2816.520466][T30713] xmit_one+0x7b/0x460 [ 2816.524512][T30713] dev_hard_start_xmit+0xac/0x1b0 [ 2816.529511][T30713] sch_direct_xmit+0x23b/0x970 [ 2816.534260][T30713] ? nvmem_get_mac_address+0x310/0x310 [ 2816.539701][T30713] ? stack_trace_save+0x123/0x1f0 [ 2816.544704][T30713] __qdisc_run+0x245/0x420 [ 2816.549100][T30713] ? sch_direct_xmit+0x970/0x970 [ 2816.554011][T30713] ? pfifo_fast_enqueue+0x36e/0x580 [ 2816.559294][T30713] __dev_queue_xmit+0x11fa/0x2680 [ 2816.564328][T30713] ? dev_queue_xmit+0x20/0x20 [ 2816.568990][T30713] ? ip_finish_output2+0x936/0x1810 [ 2816.574167][T30713] ip_finish_output2+0xbdf/0x1810 [ 2816.579193][T30713] ? ip_fragment+0x210/0x210 [ 2816.583759][T30713] ? __ip_finish_output+0x4e1/0x6d0 [ 2816.588992][T30713] ip_mc_output+0x8b5/0x9f0 [ 2816.593481][T30713] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2816.598917][T30713] ? nf_hook_slow+0x1a6/0x1f0 [ 2816.603576][T30713] ? ip_mc_output+0x9f0/0x9f0 [ 2816.608242][T30713] ? ip_send_check+0xd0/0xd0 [ 2816.612810][T30713] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2816.618080][T30713] ? inet_rtm_getroute+0x2590/0x2590 [ 2816.623346][T30713] ? csum_partial+0x379/0x470 [ 2816.628006][T30713] ? siphash_3u32+0x22/0x240 [ 2816.632579][T30713] ? csum_partial+0x379/0x470 [ 2816.637241][T30713] ip_send_skb+0xaa/0x140 [ 2816.641553][T30713] udp_send_skb+0x8e9/0x1100 [ 2816.646126][T30713] udp_sendpage+0x2f2/0x5c0 [ 2816.650774][T30713] ? udplite_getfrag+0x70/0x70 [ 2816.655529][T30713] ? mutex_lock+0xa6/0x110 [ 2816.659938][T30713] ? inet_send_prepare+0x1b7/0x470 [ 2816.665160][T30713] ? udplite_getfrag+0x70/0x70 [ 2816.669907][T30713] inet_sendpage+0xd7/0x130 [ 2816.674557][T30713] ? inet_sendmsg+0xc0/0xc0 [ 2816.679095][T30713] sock_sendpage+0xd0/0x120 [ 2816.683583][T30713] pipe_to_sendpage+0x23b/0x300 [ 2816.688424][T30713] ? sock_fasync+0xf0/0xf0 [ 2816.692832][T30713] ? generic_splice_sendpage+0x210/0x210 [ 2816.698451][T30713] __splice_from_pipe+0x2d3/0x870 [ 2816.703660][T30713] ? generic_splice_sendpage+0x210/0x210 [ 2816.709293][T30713] generic_splice_sendpage+0x184/0x210 [ 2816.714756][T30713] ? iter_file_splice_write+0xf60/0xf60 [ 2816.720305][T30713] ? security_file_permission+0x128/0x300 [ 2816.726009][T30713] ? iter_file_splice_write+0xf60/0xf60 [ 2816.731555][T30713] __se_sys_splice+0x7ee/0x1b70 [ 2816.736387][T30713] ? fput_many+0x42/0x1a0 [ 2816.740728][T30713] ? ksys_write+0x25d/0x2c0 [ 2816.745239][T30713] ? file_open_root+0x450/0x450 [ 2816.750087][T30713] ? __x64_sys_splice+0xf0/0xf0 [ 2816.754985][T30713] ? __x64_sys_splice+0x1d/0xf0 [ 2816.759940][T30713] do_syscall_64+0xcb/0x150 [ 2816.764442][T30713] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2816.770318][T30713] RIP: 0033:0x45ca59 [ 2816.774191][T30713] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2816.793959][T30713] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2816.802397][T30713] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2816.810347][T30713] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2816.818296][T30713] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2816.826293][T30713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2816.834364][T30713] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40002f) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000000), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) r4 = socket(0x9, 0x3, 0x4a1f0ec9) ioctl$sock_ifreq(r4, 0x8923, &(0x7f0000000180)={'caif0\x00', @ifru_mtu=0x8}) 15:28:30 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x8, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:30 executing program 0 (fault-call:11 fault-nth:80): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:30 executing program 1: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) recvfrom(r3, &(0x7f0000000140)=""/240, 0xf0, 0x40000060, &(0x7f0000000240)=@ax25={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x80) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:30 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r1, r3, 0x0) [ 2818.510010][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2818.515263][T30748] FAULT_INJECTION: forcing a failure. [ 2818.515263][T30748] name failslab, interval 1, probability 0, space 0, times 0 [ 2818.518799][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2818.531173][T30748] CPU: 1 PID: 30748 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2818.531184][T30748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2818.558039][T30748] Call Trace: [ 2818.561323][T30748] dump_stack+0x14a/0x1ce [ 2818.565636][T30748] ? devkmsg_release+0x11c/0x11c [ 2818.570551][T30748] ? show_regs_print_info+0x12/0x12 [ 2818.575725][T30748] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2818.581696][T30748] should_fail+0x6fb/0x860 [ 2818.586089][T30748] ? setup_fault_attr+0x3d0/0x3d0 [ 2818.591109][T30748] ? sch_direct_xmit+0x23b/0x970 [ 2818.596019][T30748] ? __qdisc_run+0x245/0x420 [ 2818.600608][T30748] ? __dev_queue_xmit+0x11fa/0x2680 [ 2818.605780][T30748] ? ip_finish_output2+0xbdf/0x1810 [ 2818.610951][T30748] ? ip_mc_output+0x8b5/0x9f0 [ 2818.615624][T30748] ? udp_send_skb+0x8e9/0x1100 [ 2818.620360][T30748] ? udp_sendpage+0x2f2/0x5c0 [ 2818.625013][T30748] ? inet_sendpage+0xd7/0x130 [ 2818.629682][T30748] ? sock_sendpage+0xd0/0x120 [ 2818.634348][T30748] ? ___pskb_trim+0x19d/0xfa0 [ 2818.639009][T30748] should_failslab+0x5/0x20 [ 2818.643503][T30748] __kmalloc_track_caller+0x5d/0x2c0 [ 2818.648764][T30748] ? ___pskb_trim+0x19d/0xfa0 [ 2818.653428][T30748] pskb_expand_head+0x10d/0xfb0 [ 2818.658267][T30748] ? memcpy+0x38/0x50 [ 2818.662225][T30748] ___pskb_trim+0x19d/0xfa0 [ 2818.666722][T30748] sk_filter_trim_cap+0x2bc/0x420 [ 2818.671719][T30748] sock_queue_rcv_skb+0x1f/0x50 [ 2818.676545][T30748] packet_rcv_spkt+0x36b/0x490 [ 2818.681296][T30748] ? packet_rcv+0x1410/0x1410 [ 2818.685947][T30748] dev_queue_xmit_nit+0x36c/0x9e0 [ 2818.690955][T30748] xmit_one+0x7b/0x460 [ 2818.694994][T30748] dev_hard_start_xmit+0xac/0x1b0 [ 2818.699994][T30748] sch_direct_xmit+0x23b/0x970 [ 2818.704733][T30748] ? nvmem_get_mac_address+0x310/0x310 [ 2818.710163][T30748] ? stack_trace_save+0x123/0x1f0 [ 2818.715178][T30748] __qdisc_run+0x245/0x420 [ 2818.719592][T30748] ? sch_direct_xmit+0x970/0x970 [ 2818.724512][T30748] ? pfifo_fast_enqueue+0x36e/0x580 [ 2818.729727][T30748] __dev_queue_xmit+0x11fa/0x2680 [ 2818.734756][T30748] ? dev_queue_xmit+0x20/0x20 [ 2818.739431][T30748] ? ip_finish_output2+0x936/0x1810 [ 2818.744619][T30748] ip_finish_output2+0xbdf/0x1810 [ 2818.749622][T30748] ? ip_fragment+0x210/0x210 [ 2818.754185][T30748] ? __ip_finish_output+0x4e1/0x6d0 [ 2818.759358][T30748] ip_mc_output+0x8b5/0x9f0 [ 2818.763835][T30748] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2818.769281][T30748] ? nf_hook_slow+0x1a6/0x1f0 [ 2818.773947][T30748] ? ip_mc_output+0x9f0/0x9f0 [ 2818.778599][T30748] ? ip_send_check+0xd0/0xd0 [ 2818.783162][T30748] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2818.788420][T30748] ? inet_rtm_getroute+0x2590/0x2590 [ 2818.793677][T30748] ? csum_partial+0x379/0x470 [ 2818.798340][T30748] ? siphash_3u32+0x22/0x240 [ 2818.802922][T30748] ? csum_partial+0x379/0x470 [ 2818.807591][T30748] ip_send_skb+0xaa/0x140 [ 2818.811893][T30748] udp_send_skb+0x8e9/0x1100 [ 2818.816474][T30748] udp_sendpage+0x2f2/0x5c0 [ 2818.820954][T30748] ? udplite_getfrag+0x70/0x70 [ 2818.825689][T30748] ? mutex_lock+0xa6/0x110 [ 2818.830097][T30748] ? inet_send_prepare+0x1b7/0x470 [ 2818.835184][T30748] ? udplite_getfrag+0x70/0x70 [ 2818.839937][T30748] inet_sendpage+0xd7/0x130 [ 2818.844440][T30748] ? inet_sendmsg+0xc0/0xc0 [ 2818.848953][T30748] sock_sendpage+0xd0/0x120 [ 2818.853448][T30748] pipe_to_sendpage+0x23b/0x300 [ 2818.858271][T30748] ? sock_fasync+0xf0/0xf0 [ 2818.862682][T30748] ? generic_splice_sendpage+0x210/0x210 [ 2818.868288][T30748] __splice_from_pipe+0x2d3/0x870 [ 2818.873285][T30748] ? generic_splice_sendpage+0x210/0x210 [ 2818.878891][T30748] generic_splice_sendpage+0x184/0x210 [ 2818.884321][T30748] ? iter_file_splice_write+0xf60/0xf60 [ 2818.889842][T30748] ? security_file_permission+0x128/0x300 [ 2818.895550][T30748] ? iter_file_splice_write+0xf60/0xf60 [ 2818.901176][T30748] __se_sys_splice+0x7ee/0x1b70 [ 2818.906021][T30748] ? fput_many+0x42/0x1a0 [ 2818.910355][T30748] ? ksys_write+0x25d/0x2c0 [ 2818.914844][T30748] ? file_open_root+0x450/0x450 [ 2818.919672][T30748] ? __x64_sys_splice+0xf0/0xf0 [ 2818.924510][T30748] ? __x64_sys_splice+0x1d/0xf0 [ 2818.929333][T30748] do_syscall_64+0xcb/0x150 [ 2818.933812][T30748] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2818.939680][T30748] RIP: 0033:0x45ca59 15:28:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2818.943557][T30748] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2818.963145][T30748] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2818.971555][T30748] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2818.979509][T30748] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2818.987475][T30748] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2818.995444][T30748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2819.003402][T30748] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xf, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) r3 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000280)='>', 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x0) keyctl$link(0x8, r1, r4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) [ 2819.042114][T30756] sock: process `syz-executor.2' is using obsolete setsockopt SO_BSDCOMPAT [ 2819.081785][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 15:28:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2819.090553][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2819.199947][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2819.208718][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:31 executing program 0 (fault-call:11 fault-nth:81): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2819.351571][T30790] FAULT_INJECTION: forcing a failure. [ 2819.351571][T30790] name failslab, interval 1, probability 0, space 0, times 0 [ 2819.364483][T30790] CPU: 0 PID: 30790 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2819.374612][T30790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2819.384652][T30790] Call Trace: [ 2819.387940][T30790] dump_stack+0x14a/0x1ce [ 2819.392282][T30790] ? devkmsg_release+0x11c/0x11c 15:28:31 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x0, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) [ 2819.397300][T30790] ? show_regs_print_info+0x12/0x12 [ 2819.402477][T30790] ? stack_trace_save+0x123/0x1f0 [ 2819.407485][T30790] should_fail+0x6fb/0x860 [ 2819.411878][T30790] ? setup_fault_attr+0x3d0/0x3d0 [ 2819.416906][T30790] ? dst_alloc+0x137/0x4f0 [ 2819.421302][T30790] should_failslab+0x5/0x20 [ 2819.425781][T30790] kmem_cache_alloc+0x36/0x260 [ 2819.430522][T30790] dst_alloc+0x137/0x4f0 [ 2819.434765][T30790] ? __dev_queue_xmit+0x1501/0x2680 [ 2819.439967][T30790] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2819.445939][T30790] ? ip_route_output_key_hash+0x220/0x220 [ 2819.451652][T30790] ip_route_output_flow+0x150/0x2a0 [ 2819.456840][T30790] ? _local_bh_enable+0x30/0x30 [ 2819.461672][T30790] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2819.467110][T30790] ? __rcu_read_lock+0x50/0x50 [ 2819.471868][T30790] ? selinux_sk_getsecid+0x24/0xb0 [ 2819.476954][T30790] udp_sendmsg+0x1803/0x2f40 [ 2819.481527][T30790] ? update_misfit_status+0x5e0/0x5e0 [ 2819.486873][T30790] ? ip_do_fragment+0x22c0/0x22c0 [ 2819.491871][T30790] ? udp_cmsg_send+0x340/0x340 [ 2819.496610][T30790] ? perf_pmu_sched_task+0x370/0x370 [ 2819.501870][T30790] ? find_next_bit+0xf7/0x120 [ 2819.506520][T30790] ? finish_task_switch+0x2be/0x4c0 [ 2819.511714][T30790] udp_sendpage+0x110/0x5c0 [ 2819.516195][T30790] ? udplite_getfrag+0x70/0x70 [ 2819.520930][T30790] ? mutex_lock+0xa6/0x110 [ 2819.525329][T30790] ? inet_send_prepare+0x1b7/0x470 [ 2819.530435][T30790] ? udplite_getfrag+0x70/0x70 [ 2819.535176][T30790] inet_sendpage+0xd7/0x130 [ 2819.539664][T30790] ? inet_sendmsg+0xc0/0xc0 [ 2819.544166][T30790] sock_sendpage+0xd0/0x120 [ 2819.548646][T30790] pipe_to_sendpage+0x23b/0x300 [ 2819.553473][T30790] ? sock_fasync+0xf0/0xf0 [ 2819.557890][T30790] ? generic_splice_sendpage+0x210/0x210 [ 2819.563501][T30790] __splice_from_pipe+0x2d3/0x870 [ 2819.568513][T30790] ? generic_splice_sendpage+0x210/0x210 [ 2819.574127][T30790] generic_splice_sendpage+0x184/0x210 [ 2819.579563][T30790] ? iter_file_splice_write+0xf60/0xf60 [ 2819.585107][T30790] ? security_file_permission+0x128/0x300 [ 2819.590803][T30790] ? iter_file_splice_write+0xf60/0xf60 [ 2819.596326][T30790] __se_sys_splice+0x7ee/0x1b70 [ 2819.601155][T30790] ? fput_many+0x42/0x1a0 [ 2819.605490][T30790] ? ksys_write+0x25d/0x2c0 [ 2819.609975][T30790] ? file_open_root+0x450/0x450 [ 2819.614808][T30790] ? __x64_sys_splice+0xf0/0xf0 [ 2819.619634][T30790] ? __x64_sys_splice+0x1d/0xf0 [ 2819.624480][T30790] do_syscall_64+0xcb/0x150 [ 2819.628964][T30790] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2819.634851][T30790] RIP: 0033:0x45ca59 [ 2819.638738][T30790] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2819.658319][T30790] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2819.666730][T30790] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2819.674689][T30790] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2819.682637][T30790] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2819.690585][T30790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2819.698535][T30790] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2819.711366][T17452] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2819.981232][T17452] usb 2-1: device descriptor read/64, error 18 [ 2820.371204][T17452] usb 2-1: device descriptor read/64, error 18 [ 2820.641175][T17452] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2820.911177][T17452] usb 2-1: device descriptor read/64, error 18 [ 2821.301142][T17452] usb 2-1: device descriptor read/64, error 18 [ 2821.421189][T17452] usb usb2-port1: attempt power cycle 15:28:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) fchdir(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0xc, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:33 executing program 0 (fault-call:11 fault-nth:82): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:33 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) r3 = syz_usb_connect(0x1, 0x7a8, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x4, 0xd8, 0x23, 0x10, 0x4dd, 0x8004, 0x3dec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x796, 0x4, 0x9, 0x7, 0xef5184334b778927, 0x7d, [{{0x9, 0x4, 0xc4, 0x1d, 0x5, 0x2, 0x6, 0x0, 0x6, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "85fdfeebf3"}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0xaa600, 0x20, 0x3, 0x1f}, [@obex={0x5, 0x24, 0x15, 0x100}, @mdlm_detail={0x17, 0x24, 0x13, 0x80, "3098264306329a077e051cf9fc78c1fab4f98a"}, @country_functional={0x6, 0x24, 0x7, 0xfb, 0x716c}, @mdlm_detail={0xbe, 0x24, 0x13, 0x2, "b849d3c46ba63cbcb5a7b04cf8eb26818b556d67fd0760798df10d308c5a2de614bff11b8aa2823ee3b2b2b372d3eed349aecd3f0cf445149986a4ee6faf2013495190e6e4618415692ceb89b69bc296f1b568be4a95d4f4280f648285511fa8fcfb51bbabcfb327fe92e09c41b8f7a775ba3a19f11ea0aafab9a784f01a21fb73b2dffcec99910018e1e278994328750897a942c78eef39801002c7bdd67b0cbdd3a45b4e2983c86ecac284d9db76076c5b0b31742391012001"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3, 0x1, 0x1}, {0x6, 0x24, 0x1a, 0xf001, 0x1}, [@acm={0x4, 0x24, 0x2, 0x9}, @country_functional={0x12, 0x24, 0x7, 0x1, 0x9, [0x1000, 0xfffc, 0x2c39, 0xfffc, 0x3, 0x4]}, @country_functional={0xe, 0x24, 0x7, 0x5b, 0x29e7, [0x8, 0xb6f6, 0x1, 0x4]}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xff}]}], [{{0x9, 0x5, 0x80, 0x0, 0x400, 0x20, 0x3f, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x67, 0x1f}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x40}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x40, 0x6, 0x4}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x9, 0x1, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x4}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x81, 0x6b, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x800}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0x8, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x1}, @generic={0x18, 0xc, "653ae1f3a6885ffc443e84cc0c29d80fd4593ca0da04"}]}}]}}, {{0x9, 0x4, 0x8b, 0x2, 0x9, 0xbc, 0xde, 0x16, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x1, 0x4, 0x6ec3, 0x40, 0x81}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x24, 0x4}, @mixer_unit={0x9, 0x24, 0x4, 0x2, 0x5, "a5ad236e"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x50, 0xec, 0x5, 0x6, [@generic={0x2, 0x4}, @generic={0x4b, 0x3e, "bc33eda8f3bf28d3f4f8c3a1acc874333985d07b3534e750823d0ce91fcddf93835ff6e5f55efcd125a6adb36a50c47aa315f7bd45040711a36a202ffb1281d0a0989c3bc7b9b54b63"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x3f, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd2, 0xe0}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xca, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x5, 0x6}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x1f, 0x1, 0x1, [@generic={0x6a, 0x21, "8e01f07b71428018a751507acdae163e55555b3a6ca72400ef648a178216fcfdef504cbee10c662b2690bea7406591e3d5a8d56d626efd525a8c5bebb9cd1492fe34ff03e8dde2c28ca7d069d7bcd3ce75b67dc90bee2f6835c69bf4d72c40c08c047f9d4ad399a2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x3}]}}, {{0x9, 0x5, 0xa, 0x1, 0x40, 0x1f, 0x1, 0x5d, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1ff}]}}, {{0x9, 0x5, 0x0, 0xc, 0x408, 0x7, 0x2, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x4, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x3f, 0x1, 0xb6, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0xaa}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x1f, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x3}]}}]}}, {{0x9, 0x4, 0x6e, 0x1, 0xb, 0xf, 0x6, 0x82, 0x8, [], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x1, 0x9e, 0x2, [@generic={0xe4, 0x30, "99e6ccf8a08cdd962a6eeb0b3b782c933f092e0bc1cc9668f75e40ff0ce625cf27e8fa9c5a0710b71eef8344840e3090adcc9a7d258b977047745c39d3161819331f316a6b11e7aecb3daab6226fa72a0f55605e6f5a15684281cb146690d98eaccf1df15ba936de704e24c21ba01d774d106b45ec760f112dc08b975b5c9e00fcd832e396dd3fe4b53aa0127ac7e76ee4b38b48bcefb818cc5dcc89dd3d3f52f37172361fb853d39eea02358de9c2737cf5869a7aaf92380cc978a2bdff23f478125ddb3ef99fb6813029f5c90fe468626d3931ea040a9a38183ec19962fe0edd45"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x400, 0x0, 0x1e, 0xac, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x2, 0xcc, 0xfd}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xc6, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x6d}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x9, 0x3f, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2d, 0x7}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x0, 0x8, 0x6, [@generic={0x83, 0x7, "0ce14f84eaf7b5d0f1ec98b70823d46678742a9674604c8ae2cc4a56eabef609d4975fffdb8272049cdbc44f50045df988c17e0dd67b25db9de1c7581dc9a665f82efc7dbb874ea772aad3b0a00f6e14666867d1ef15a0dd42c2b508fed7afa154a6a3575b9a1302633afe6ee02106d036d3ee3db7308cb40d0834e4469c004a9c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2f, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x8, 0x1, 0x29, [@generic={0x33, 0xf, "bd48b8c000960242a28f855af8725de904e58e21bbdbae3daa8b046397e560347b53128ed35bc51c453fee81551de8cc9f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xfffe}]}}, {{0x9, 0x5, 0x9, 0x2, 0x20, 0x3b, 0xf3, 0x3}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0xc, 0x4, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x8, 0x1c, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1f}, @generic={0xae, 0x24, "4ae8d0e7e9f592b026eec67ee143e04614edf830b46cc7ea8738351d6cd8d12991ac556511196e1d843ccdf4c3483dfa8764a91a35f000431bfabbcc0c1e35751fe2517e83ba42313298ed52046019756becfd0879d9d67e294f063d346c5b0b2c7398ca0f791ae59794ec6f8393766211f1705fbaff54d46455f8be24eb3fa2ceaae5a82ebfbe14b3187a3960ed81efc76948f6d12d61456ac5b71a28492c96c68c1cb22e5ce28005808b29"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x89, 0xff, 0xef, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x8000}]}}]}}, {{0x9, 0x4, 0x69, 0x0, 0x1, 0x9c, 0xe2, 0x7, 0x93, [@generic={0xc1, 0xc, "8ad62df55241a31cba5c91e44901e2f98b7add001fe68fb4a3cc99904392bca532c094022de74815cf5cb4cb3bf36a75c6c136d989c4102f2cc3a5aeb9a00f884e3f8b0d03c8b285f42a1319b6226ad446df1c4557156a9fa90e0174e872806e5fa5e83dbd0c6b7c5f93f1ae566d2b915f0ca19e27291e7c9adf215aa18dd78e18c7238abd6e0a50be1bd2f20661fda1e35abf4d6b1b0eef2430f066c0566b694a1917af60999569d501553ca4bcee73a133eb1ad403f5e8b0840fd48db558"}], [{{0x9, 0x5, 0xc, 0x0, 0x20, 0x1f, 0xdf, 0x8, [@generic={0x9f, 0x0, "2308c5ae3c1d0d9635c1bb84d398514e06f30392bb3b2c3d6c41fc686b991e4c8101f2c6143c5e687ffda73fcd9e4f08e3629d9cd9220fc3895f856652cd37fc7775efca2afe0a6968df325865b8386584cc819aecc90d8dc1bb76b9e1c2a8c3c0e6f79513b88660d8fedae1584b090a3212ac93f2fdd6343457911c0be106d4d88ffdb0ea92dee95edd0431954d6c671f00ecb1914c8b2163c2351518"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x3}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x310, 0x0, 0x1d, 0x1, 0x8, 0x3}, 0x4f, &(0x7f0000000940)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x81, 0x5, 0x8, 0xf, 0xffff, [0xc00f, 0x7f80f0, 0x30, 0xff3f30, 0xc0]}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1f, 0x4, 0x7fffff7, 0xf, 0x5, [0x3fcf, 0xc00f, 0xdf80, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0x1f, 0x2, 0x9, 0x1f}]}, 0x2, [{0x87, &(0x7f00000009c0)=@string={0x87, 0x3, "b3f6ee277b434a349e6298e0008ba02fec3d7b0f92caa920d9236ea1c429fa92117b6ae06aeaf842851fc4751f3d129ec67054cbe10ef2793e8e61526dbef9e0367dbd67bb96e805f2c62f4fa8a096eb14a0a2247744117c2cb5fcac91f53bbef915f1947fa1c319e6e9296a807a60b7cbe30ac055d7c435d9b2246f6c38d01d681ce493c3"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_disconnect(r3) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x19, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000007c0)='./file0\x00', 0xfffffffffffff57a, 0x3, &(0x7f00000009c0)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0xfffffffffffffee7}, {&(0x7f0000000640)="f3754cd0ec7c59c1d38691f27703c514ee9f1422dbbe2c64f3ff30215dfd4ecf4ed439c369d1e5289cdc1a5dbf01f4a70fdb496b758f60a1b813a8fa8376ed57e6d740332b60ab89fc4b7c6931857ab8f9e2ae5dfdc7a0af942964b6ec3a6376c25d906f52502b2f683b19cbc147d5ff0f870d359e50ac00054f414e03cac54e1500745025c4e4ede04c00c7ed8f769a", 0x90, 0x194}, {&(0x7f0000000e40)="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", 0xa7, 0x4}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000180)='./file0\x00', 0x280, 0x40) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x2000000000000074, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r2, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000300)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62aafc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069a41356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d174270d620bd14bf1682ca6f5d874f0d0ec2ba5db4cb331410dd0cfa180249e4cdc5b4dd6267187440a48408157acf11b7a3df62c916c10935a992f000007039d000000", 0xd4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x20000005) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x800) fcntl$dupfd(r1, 0x406, r2) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280), &(0x7f0000000200)=0xffffffe2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000000)) 15:28:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2821.559324][T30818] FAULT_INJECTION: forcing a failure. [ 2821.559324][T30818] name failslab, interval 1, probability 0, space 0, times 0 [ 2821.571980][T30818] CPU: 0 PID: 30818 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2821.582123][T30818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2821.592175][T30818] Call Trace: [ 2821.595468][T30818] dump_stack+0x14a/0x1ce [ 2821.599778][T30818] ? devkmsg_release+0x11c/0x11c [ 2821.604708][T30818] ? show_regs_print_info+0x12/0x12 [ 2821.609879][T30818] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2821.615831][T30818] should_fail+0x6fb/0x860 [ 2821.620246][T30818] ? setup_fault_attr+0x3d0/0x3d0 [ 2821.625409][T30818] ? sch_direct_xmit+0x23b/0x970 [ 2821.630317][T30818] ? __qdisc_run+0x245/0x420 [ 2821.634880][T30818] ? __dev_queue_xmit+0x11fa/0x2680 [ 2821.640051][T30818] ? ip_finish_output2+0xbdf/0x1810 [ 2821.645221][T30818] ? ip_mc_output+0x8b5/0x9f0 [ 2821.649871][T30818] ? udp_send_skb+0x8e9/0x1100 [ 2821.654608][T30818] ? udp_sendpage+0x2f2/0x5c0 [ 2821.659259][T30818] ? inet_sendpage+0xd7/0x130 [ 2821.663931][T30818] ? sock_sendpage+0xd0/0x120 [ 2821.668598][T30818] ? ___pskb_trim+0x19d/0xfa0 [ 2821.673266][T30818] should_failslab+0x5/0x20 [ 2821.677746][T30818] __kmalloc_track_caller+0x5d/0x2c0 [ 2821.683153][T30818] ? ___pskb_trim+0x19d/0xfa0 [ 2821.687824][T30818] pskb_expand_head+0x10d/0xfb0 [ 2821.692656][T30818] ? memcpy+0x38/0x50 [ 2821.696620][T30818] ___pskb_trim+0x19d/0xfa0 [ 2821.701362][T30818] sk_filter_trim_cap+0x2bc/0x420 [ 2821.706360][T30818] sock_queue_rcv_skb+0x1f/0x50 [ 2821.711184][T30818] packet_rcv_spkt+0x36b/0x490 [ 2821.715922][T30818] ? packet_rcv+0x1410/0x1410 [ 2821.720615][T30818] dev_queue_xmit_nit+0x36c/0x9e0 [ 2821.725614][T30818] xmit_one+0x7b/0x460 [ 2821.729658][T30818] dev_hard_start_xmit+0xac/0x1b0 [ 2821.734656][T30818] sch_direct_xmit+0x23b/0x970 [ 2821.739394][T30818] ? nvmem_get_mac_address+0x310/0x310 [ 2821.744834][T30818] ? stack_trace_save+0x123/0x1f0 [ 2821.749850][T30818] __qdisc_run+0x245/0x420 [ 2821.754281][T30818] ? sch_direct_xmit+0x970/0x970 [ 2821.759197][T30818] ? pfifo_fast_enqueue+0x36e/0x580 [ 2821.764369][T30818] __dev_queue_xmit+0x11fa/0x2680 [ 2821.769376][T30818] ? dev_queue_xmit+0x20/0x20 [ 2821.774046][T30818] ? ip_finish_output2+0x936/0x1810 [ 2821.779214][T30818] ip_finish_output2+0xbdf/0x1810 [ 2821.784215][T30818] ? ip_fragment+0x210/0x210 [ 2821.788790][T30818] ? __ip_finish_output+0x4e1/0x6d0 [ 2821.793959][T30818] ip_mc_output+0x8b5/0x9f0 [ 2821.798434][T30818] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2821.803864][T30818] ? nf_hook_slow+0x1a6/0x1f0 [ 2821.808529][T30818] ? ip_mc_output+0x9f0/0x9f0 [ 2821.813176][T30818] ? ip_send_check+0xd0/0xd0 [ 2821.817755][T30818] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2821.823013][T30818] ? inet_rtm_getroute+0x2590/0x2590 [ 2821.828269][T30818] ? csum_partial+0x379/0x470 [ 2821.832917][T30818] ? siphash_3u32+0x22/0x240 [ 2821.837481][T30818] ? csum_partial+0x379/0x470 [ 2821.842132][T30818] ip_send_skb+0xaa/0x140 [ 2821.846436][T30818] udp_send_skb+0x8e9/0x1100 [ 2821.851000][T30818] udp_sendpage+0x2f2/0x5c0 [ 2821.855479][T30818] ? udplite_getfrag+0x70/0x70 [ 2821.860214][T30818] ? mutex_lock+0xa6/0x110 [ 2821.864622][T30818] ? inet_send_prepare+0x1b7/0x470 [ 2821.869710][T30818] ? udplite_getfrag+0x70/0x70 [ 2821.874461][T30818] inet_sendpage+0xd7/0x130 [ 2821.878951][T30818] ? inet_sendmsg+0xc0/0xc0 [ 2821.883428][T30818] sock_sendpage+0xd0/0x120 [ 2821.887905][T30818] pipe_to_sendpage+0x23b/0x300 [ 2821.892751][T30818] ? sock_fasync+0xf0/0xf0 [ 2821.897138][T30818] ? generic_splice_sendpage+0x210/0x210 [ 2821.902747][T30818] __splice_from_pipe+0x2d3/0x870 [ 2821.907751][T30818] ? generic_splice_sendpage+0x210/0x210 [ 2821.913378][T30818] generic_splice_sendpage+0x184/0x210 [ 2821.918824][T30818] ? iter_file_splice_write+0xf60/0xf60 [ 2821.924358][T30818] ? security_file_permission+0x128/0x300 [ 2821.930048][T30818] ? iter_file_splice_write+0xf60/0xf60 [ 2821.935565][T30818] __se_sys_splice+0x7ee/0x1b70 [ 2821.940409][T30818] ? fput_many+0x42/0x1a0 [ 2821.944712][T30818] ? ksys_write+0x25d/0x2c0 [ 2821.949211][T30818] ? file_open_root+0x450/0x450 [ 2821.954035][T30818] ? __x64_sys_splice+0xf0/0xf0 [ 2821.958883][T30818] ? __x64_sys_splice+0x1d/0xf0 [ 2821.963712][T30818] do_syscall_64+0xcb/0x150 [ 2821.968215][T30818] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2821.974086][T30818] RIP: 0033:0x45ca59 [ 2821.977957][T30818] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2821.997534][T30818] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2822.005917][T30818] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2822.013864][T30818] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2822.021808][T30818] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2822.029758][T30818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2822.037788][T30818] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2822.047416][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF 15:28:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2822.056430][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2822.169692][T30829] FAT-fs (loop4): invalid media value (0x6e) [ 2822.176092][T30829] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2822.191125][T17682] usb 6-1: new low-speed USB device number 59 using dummy_hcd 15:28:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:34 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x0, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x14, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:34 executing program 0 (fault-call:11 fault-nth:83): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2822.431055][T17682] usb 6-1: Invalid ep0 maxpacket: 16 [ 2822.506235][T30851] FAULT_INJECTION: forcing a failure. [ 2822.506235][T30851] name failslab, interval 1, probability 0, space 0, times 0 [ 2822.519018][T30851] CPU: 1 PID: 30851 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2822.529279][T30851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2822.539313][T30851] Call Trace: [ 2822.542601][T30851] dump_stack+0x14a/0x1ce [ 2822.546912][T30851] ? devkmsg_release+0x11c/0x11c [ 2822.551843][T30851] ? __se_sys_splice+0x7ee/0x1b70 [ 2822.556861][T30851] ? show_regs_print_info+0x12/0x12 [ 2822.562056][T30851] should_fail+0x6fb/0x860 [ 2822.566490][T30851] ? setup_fault_attr+0x3d0/0x3d0 [ 2822.571497][T30851] ? alloc_skb_for_msg+0x220/0x220 [ 2822.576642][T30851] ? skb_clone+0x1b2/0x370 [ 2822.581033][T30851] should_failslab+0x5/0x20 [ 2822.585513][T30851] kmem_cache_alloc+0x36/0x260 [ 2822.590310][T30851] skb_clone+0x1b2/0x370 [ 2822.594538][T30851] packet_rcv_spkt+0x129/0x490 [ 2822.599275][T30851] ? skb_clone+0x1f4/0x370 [ 2822.603665][T30851] ? packet_rcv+0x1410/0x1410 [ 2822.608316][T30851] dev_queue_xmit_nit+0x36c/0x9e0 [ 2822.613318][T30851] xmit_one+0x7b/0x460 [ 2822.617364][T30851] dev_hard_start_xmit+0xac/0x1b0 [ 2822.622361][T30851] sch_direct_xmit+0x23b/0x970 [ 2822.627100][T30851] ? nvmem_get_mac_address+0x310/0x310 [ 2822.632648][T30851] ? stack_trace_save+0x123/0x1f0 [ 2822.637667][T30851] __qdisc_run+0x245/0x420 [ 2822.642065][T30851] ? sch_direct_xmit+0x970/0x970 [ 2822.646981][T30851] ? pfifo_fast_enqueue+0x36e/0x580 [ 2822.652159][T30851] __dev_queue_xmit+0x11fa/0x2680 [ 2822.657167][T30851] ? dev_queue_xmit+0x20/0x20 [ 2822.661832][T30851] ? ip_finish_output2+0x936/0x1810 [ 2822.667029][T30851] ip_finish_output2+0xbdf/0x1810 [ 2822.672034][T30851] ? ip_fragment+0x210/0x210 [ 2822.676610][T30851] ? __ip_finish_output+0x4e1/0x6d0 [ 2822.681788][T30851] ip_mc_output+0x8b5/0x9f0 [ 2822.686380][T30851] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2822.691820][T30851] ? nf_hook_slow+0x1a6/0x1f0 [ 2822.696508][T30851] ? ip_mc_output+0x9f0/0x9f0 [ 2822.701171][T30851] ? ip_send_check+0xd0/0xd0 [ 2822.705753][T30851] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2822.711107][T30851] ? inet_rtm_getroute+0x2590/0x2590 [ 2822.716376][T30851] ? csum_partial+0x379/0x470 [ 2822.721034][T30851] ? siphash_3u32+0x22/0x240 [ 2822.725597][T30851] ? csum_partial+0x379/0x470 [ 2822.730249][T30851] ip_send_skb+0xaa/0x140 [ 2822.734613][T30851] udp_send_skb+0x8e9/0x1100 [ 2822.739190][T30851] udp_sendpage+0x2f2/0x5c0 [ 2822.743670][T30851] ? udplite_getfrag+0x70/0x70 [ 2822.748411][T30851] ? mutex_lock+0xa6/0x110 [ 2822.752801][T30851] ? inet_send_prepare+0x1b7/0x470 [ 2822.757886][T30851] ? udplite_getfrag+0x70/0x70 [ 2822.762627][T30851] inet_sendpage+0xd7/0x130 [ 2822.767106][T30851] ? inet_sendmsg+0xc0/0xc0 [ 2822.771590][T30851] sock_sendpage+0xd0/0x120 [ 2822.776070][T30851] pipe_to_sendpage+0x23b/0x300 [ 2822.780903][T30851] ? sock_fasync+0xf0/0xf0 [ 2822.785299][T30851] ? generic_splice_sendpage+0x210/0x210 [ 2822.790914][T30851] __splice_from_pipe+0x2d3/0x870 [ 2822.795912][T30851] ? generic_splice_sendpage+0x210/0x210 [ 2822.801518][T30851] generic_splice_sendpage+0x184/0x210 [ 2822.806949][T30851] ? iter_file_splice_write+0xf60/0xf60 [ 2822.812472][T30851] ? security_file_permission+0x128/0x300 [ 2822.818163][T30851] ? iter_file_splice_write+0xf60/0xf60 [ 2822.823719][T30851] __se_sys_splice+0x7ee/0x1b70 [ 2822.828547][T30851] ? fput_many+0x42/0x1a0 [ 2822.832854][T30851] ? ksys_write+0x25d/0x2c0 [ 2822.837478][T30851] ? file_open_root+0x450/0x450 [ 2822.842303][T30851] ? __x64_sys_splice+0xf0/0xf0 [ 2822.847126][T30851] ? __x64_sys_splice+0x1d/0xf0 [ 2822.851951][T30851] do_syscall_64+0xcb/0x150 [ 2822.856431][T30851] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2822.862298][T30851] RIP: 0033:0x45ca59 [ 2822.866163][T30851] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2822.885740][T30851] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2822.894123][T30851] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2822.902092][T30851] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2822.910039][T30851] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2822.917985][T30851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2822.925932][T30851] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2822.951029][T17682] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 2822.967585][T30835] FAT-fs (loop4): invalid media value (0x6e) [ 2822.973951][T30835] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2823.001018][T17452] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2823.091832][T17452] usb 2-1: Invalid ep0 maxpacket: 0 [ 2823.200992][T17682] usb 6-1: Invalid ep0 maxpacket: 16 [ 2823.206398][T17682] usb usb6-port1: attempt power cycle [ 2823.241010][T17452] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2823.341091][T17452] usb 2-1: Invalid ep0 maxpacket: 0 [ 2823.346783][T17452] usb usb2-port1: unable to enumerate USB device [ 2823.920935][T17682] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 2824.010977][T17682] usb 6-1: Invalid ep0 maxpacket: 16 [ 2824.160951][T17682] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 2824.250980][T17682] usb 6-1: Invalid ep0 maxpacket: 16 [ 2824.256461][T17682] usb usb6-port1: unable to enumerate USB device 15:28:36 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x800000, &(0x7f0000000140)) ptrace$cont(0x7, r2, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x400, 0x4) 15:28:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x20000100, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:36 executing program 0 (fault-call:11 fault-nth:84): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x0, 0x0, 0xffffffff, 0x140, 0x140, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000000300), {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, [0x0, 0xffffff00, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xffffffff, 0xff000000], 'erspan0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x3a, 0x37, 0x4, 0x80}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28, 'hl\x00'}}, @common=@hl={{0x28, 'hl\x00'}, {0x3, 0x2}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4=@loopback, @icmp_id=0x66, @gre_key}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0xc}, @remote, [0xff000000, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xffffff00], 'team0\x00', 'ip6gre0\x00', {}, {0xff}, 0x3b, 0x40, 0x1, 0x20}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28, 'icmp6\x00'}, {0x12, "2901"}}, @common=@hl={{0x28, 'hl\x00'}, {0x1, 0x9}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@local, @port=0x4e24, @port=0x4e21}}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xff000000, 0xff000000, 0xff000000], 'bond0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x67, 0x9, 0x0, 0x8}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30, 'srh\x00'}, {0x2c, 0x3, 0x2, 0x9, 0xf2, 0x1000, 0x2000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x7, @ipv4=@remote, @ipv6=@loopback, @gre_key=0x885a, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x4d5, 0x4d5], 0xe64f, 0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/234, 0xea) [ 2824.570373][T30884] FAULT_INJECTION: forcing a failure. [ 2824.570373][T30884] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.583278][T30884] CPU: 0 PID: 30884 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2824.593408][T30884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2824.603444][T30884] Call Trace: [ 2824.606727][T30884] dump_stack+0x14a/0x1ce [ 2824.611039][T30884] ? devkmsg_release+0x11c/0x11c [ 2824.615954][T30884] ? __se_sys_splice+0x7ee/0x1b70 [ 2824.620959][T30884] ? show_regs_print_info+0x12/0x12 [ 2824.626145][T30884] should_fail+0x6fb/0x860 [ 2824.630544][T30884] ? setup_fault_attr+0x3d0/0x3d0 [ 2824.635550][T30884] ? alloc_skb_for_msg+0x220/0x220 [ 2824.640641][T30884] ? skb_clone+0x1b2/0x370 [ 2824.645080][T30884] should_failslab+0x5/0x20 [ 2824.649733][T30884] kmem_cache_alloc+0x36/0x260 [ 2824.654487][T30884] skb_clone+0x1b2/0x370 [ 2824.658709][T30884] packet_rcv_spkt+0x129/0x490 [ 2824.663454][T30884] ? skb_clone+0x1f4/0x370 [ 2824.667880][T30884] ? packet_rcv+0x1410/0x1410 [ 2824.672678][T30884] dev_queue_xmit_nit+0x36c/0x9e0 [ 2824.677688][T30884] xmit_one+0x7b/0x460 [ 2824.681746][T30884] dev_hard_start_xmit+0xac/0x1b0 [ 2824.686756][T30884] sch_direct_xmit+0x23b/0x970 [ 2824.691517][T30884] ? nvmem_get_mac_address+0x310/0x310 [ 2824.696971][T30884] ? stack_trace_save+0x123/0x1f0 [ 2824.701979][T30884] __qdisc_run+0x245/0x420 [ 2824.706371][T30884] ? sch_direct_xmit+0x970/0x970 [ 2824.711284][T30884] ? pfifo_fast_enqueue+0x36e/0x580 [ 2824.716461][T30884] __dev_queue_xmit+0x11fa/0x2680 [ 2824.721512][T30884] ? dev_queue_xmit+0x20/0x20 [ 2824.726239][T30884] ? ip_finish_output2+0x936/0x1810 [ 2824.731420][T30884] ip_finish_output2+0xbdf/0x1810 [ 2824.736429][T30884] ? ip_fragment+0x210/0x210 [ 2824.741016][T30884] ? __ip_finish_output+0x4e1/0x6d0 [ 2824.746204][T30884] ip_mc_output+0x8b5/0x9f0 [ 2824.750790][T30884] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2824.756233][T30884] ? nf_hook_slow+0x1a6/0x1f0 [ 2824.760903][T30884] ? ip_mc_output+0x9f0/0x9f0 [ 2824.765570][T30884] ? ip_send_check+0xd0/0xd0 [ 2824.770154][T30884] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2824.775489][T30884] ? inet_rtm_getroute+0x2590/0x2590 [ 2824.780757][T30884] ? csum_partial+0x379/0x470 [ 2824.785412][T30884] ? siphash_3u32+0x22/0x240 [ 2824.789987][T30884] ? csum_partial+0x379/0x470 [ 2824.794646][T30884] ip_send_skb+0xaa/0x140 [ 2824.798957][T30884] udp_send_skb+0x8e9/0x1100 [ 2824.803531][T30884] udp_sendpage+0x2f2/0x5c0 [ 2824.808034][T30884] ? udplite_getfrag+0x70/0x70 [ 2824.812780][T30884] ? mutex_lock+0xa6/0x110 [ 2824.817176][T30884] ? inet_send_prepare+0x1b7/0x470 [ 2824.822352][T30884] ? udplite_getfrag+0x70/0x70 [ 2824.827094][T30884] inet_sendpage+0xd7/0x130 [ 2824.831736][T30884] ? inet_sendmsg+0xc0/0xc0 [ 2824.836226][T30884] sock_sendpage+0xd0/0x120 [ 2824.840714][T30884] pipe_to_sendpage+0x23b/0x300 [ 2824.845555][T30884] ? sock_fasync+0xf0/0xf0 [ 2824.850000][T30884] ? generic_splice_sendpage+0x210/0x210 [ 2824.855619][T30884] __splice_from_pipe+0x2d3/0x870 [ 2824.860813][T30884] ? generic_splice_sendpage+0x210/0x210 [ 2824.866431][T30884] generic_splice_sendpage+0x184/0x210 [ 2824.871871][T30884] ? iter_file_splice_write+0xf60/0xf60 [ 2824.877409][T30884] ? security_file_permission+0x128/0x300 [ 2824.883116][T30884] ? iter_file_splice_write+0xf60/0xf60 [ 2824.888640][T30884] __se_sys_splice+0x7ee/0x1b70 [ 2824.893470][T30884] ? fput_many+0x42/0x1a0 [ 2824.897776][T30884] ? ksys_write+0x25d/0x2c0 [ 2824.902258][T30884] ? __x64_sys_splice+0xf0/0xf0 [ 2824.907091][T30884] ? __x64_sys_splice+0x1d/0xf0 [ 2824.911919][T30884] do_syscall_64+0xcb/0x150 [ 2824.916404][T30884] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2824.922271][T30884] RIP: 0033:0x45ca59 [ 2824.926141][T30884] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2824.945790][T30884] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2824.954189][T30884] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2824.962155][T30884] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2824.970140][T30884] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2824.978093][T30884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2824.986063][T30884] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2825.064144][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2825.072892][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:37 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x0, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000000)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvfrom(r7, &(0x7f0000000180)=""/81, 0x51, 0x43, &(0x7f0000000200)=@phonet={0x23, 0x3, 0x8, 0x3}, 0x80) 15:28:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x20000180, 0x0}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2825.498471][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2825.507573][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2825.920781][T17682] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2826.190755][T17682] usb 2-1: device descriptor read/64, error 18 [ 2826.580728][T17682] usb 2-1: device descriptor read/64, error 18 [ 2826.850708][T17682] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2827.120701][T17682] usb 2-1: device descriptor read/64, error 18 15:28:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:39 executing program 0 (fault-call:11 fault-nth:85): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) ioctl$TIOCSCTTY(r2, 0x540e, 0x9) 15:28:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x2}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2827.510658][T17682] usb 2-1: device descriptor read/64, error 18 15:28:39 executing program 4: set_thread_area(&(0x7f0000000000)={0x6, 0x0, 0x4000, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgid(r3) r4 = gettid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) sendmsg$unix(r1, &(0x7f0000000600)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)="7ebb7da3eacee4599ba9336e9e88ec8b00ae73e8ef2a8fd566d00302851bd3d9828b8719bd7f1232b17bb143df9213ceed015d9c953da994ab8d947e9d062071d2a0aed58a26adfcfd9e75148d71fad947e59c7f46afec3fc562d1ce5f2ae7d41700f7278abafd9a624db5", 0x6b}, {&(0x7f0000000240)="bee97863b0a93e9a0a1435faad79baaf00c89987b8", 0x15}, {&(0x7f0000000280)="b80f87fc1605424067ff6d2e1d3da5214f9dea1e8b4f22b529998853c174b46f030166cd6c4df33a4301ec6402d00873bfa4317f3d1b191c6f51446aa7627f167855cd2ec147e4e5ad8e61b4702629375db94795786333670e53c31ee34b9ec2d5befa3a471b062257b88206acd8eba52c8ef3122e166f41610ab6e98a1cd4af48d627ef544e9c3c80cca74cda72e9fed0e1", 0x92}, {&(0x7f0000000340)="2fc4c7c2126533898be194523b0569605012d2bc06dc16714e5c86e1fa39f4814eae2878099580671622d69af56ad9f483018025568724bd45be6b4c6764413ff397b09276f4ca1d8eaa97493ba7db1fdf1476f1fba350fbce77fc8580b59275c17f3604e565bcade448a033eb15c19bdd66f72a0f5b6330d8da120059d4b0f7a816bdaa486a572660c2c5e5c5", 0x8d}, {&(0x7f0000000400)="2a15920af57b96463ab243d1566f24c74c8471f8abbd824c08c2cea20f4dd2162830babe93c8897b248e341324e6c269", 0x30}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x60, 0x4001004}, 0x20000804) [ 2827.575161][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2827.583881][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2827.595191][T30929] FAULT_INJECTION: forcing a failure. [ 2827.595191][T30929] name failslab, interval 1, probability 0, space 0, times 0 [ 2827.607860][T30929] CPU: 1 PID: 30929 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2827.618043][T30929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2827.628078][T30929] Call Trace: [ 2827.630716][T17682] usb usb2-port1: attempt power cycle [ 2827.631371][T30929] dump_stack+0x14a/0x1ce [ 2827.641034][T30929] ? devkmsg_release+0x11c/0x11c [ 2827.645958][T30929] ? __kmalloc_track_caller+0x201/0x2c0 [ 2827.651482][T30929] ? show_regs_print_info+0x12/0x12 [ 2827.656656][T30929] ? __ip_append_data+0x1fb9/0x3170 [ 2827.661911][T30929] ? udp_sendmsg+0x3ef/0x2f40 [ 2827.666584][T30929] ? memset+0x1f/0x40 [ 2827.670540][T30929] should_fail+0x6fb/0x860 [ 2827.674932][T30929] ? setup_fault_attr+0x3d0/0x3d0 [ 2827.679932][T30929] ? arch_stack_walk+0xb8/0x120 [ 2827.684876][T30929] ? skb_clone+0x1b2/0x370 [ 2827.689291][T30929] should_failslab+0x5/0x20 [ 2827.693779][T30929] kmem_cache_alloc+0x36/0x260 [ 2827.698525][T30929] skb_clone+0x1b2/0x370 [ 2827.702759][T30929] dev_queue_xmit_nit+0x279/0x9e0 [ 2827.707767][T30929] ? validate_xmit_skb+0x630/0xc60 [ 2827.712861][T30929] xmit_one+0x7b/0x460 [ 2827.716908][T30929] dev_hard_start_xmit+0xac/0x1b0 [ 2827.721910][T30929] sch_direct_xmit+0x23b/0x970 [ 2827.726660][T30929] ? nvmem_get_mac_address+0x310/0x310 [ 2827.732097][T30929] ? stack_trace_save+0x123/0x1f0 [ 2827.737109][T30929] __qdisc_run+0x245/0x420 [ 2827.741509][T30929] ? sch_direct_xmit+0x970/0x970 [ 2827.746432][T30929] ? pfifo_fast_enqueue+0x36e/0x580 [ 2827.751620][T30929] __dev_queue_xmit+0x11fa/0x2680 [ 2827.756630][T30929] ? dev_queue_xmit+0x20/0x20 [ 2827.761303][T30929] ? ip_finish_output2+0x936/0x1810 [ 2827.766476][T30929] ip_finish_output2+0xbdf/0x1810 [ 2827.771479][T30929] ? ip_fragment+0x210/0x210 [ 2827.776048][T30929] ? __ip_finish_output+0x4e1/0x6d0 [ 2827.781224][T30929] ip_mc_output+0x8b5/0x9f0 [ 2827.785705][T30929] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2827.791146][T30929] ? nf_hook_slow+0x1a6/0x1f0 [ 2827.795802][T30929] ? ip_mc_output+0x9f0/0x9f0 [ 2827.800461][T30929] ? ip_send_check+0xd0/0xd0 [ 2827.805030][T30929] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2827.810290][T30929] ? inet_rtm_getroute+0x2590/0x2590 [ 2827.815547][T30929] ? csum_partial+0x379/0x470 [ 2827.820199][T30929] ? siphash_3u32+0x22/0x240 [ 2827.824763][T30929] ? csum_partial+0x379/0x470 [ 2827.829418][T30929] ip_send_skb+0xaa/0x140 [ 2827.833814][T30929] udp_send_skb+0x8e9/0x1100 [ 2827.838384][T30929] udp_sendpage+0x2f2/0x5c0 [ 2827.842873][T30929] ? udplite_getfrag+0x70/0x70 [ 2827.847664][T30929] ? mutex_lock+0xa6/0x110 [ 2827.852060][T30929] ? inet_send_prepare+0x1b7/0x470 [ 2827.857253][T30929] ? udplite_getfrag+0x70/0x70 [ 2827.861990][T30929] inet_sendpage+0xd7/0x130 [ 2827.866471][T30929] ? inet_sendmsg+0xc0/0xc0 [ 2827.870948][T30929] sock_sendpage+0xd0/0x120 [ 2827.875433][T30929] pipe_to_sendpage+0x23b/0x300 [ 2827.880264][T30929] ? sock_fasync+0xf0/0xf0 [ 2827.884656][T30929] ? generic_splice_sendpage+0x210/0x210 [ 2827.890262][T30929] __splice_from_pipe+0x2d3/0x870 [ 2827.895263][T30929] ? generic_splice_sendpage+0x210/0x210 [ 2827.900927][T30929] generic_splice_sendpage+0x184/0x210 [ 2827.906360][T30929] ? iter_file_splice_write+0xf60/0xf60 [ 2827.911884][T30929] ? security_file_permission+0x128/0x300 [ 2827.917577][T30929] ? iter_file_splice_write+0xf60/0xf60 [ 2827.923103][T30929] __se_sys_splice+0x7ee/0x1b70 [ 2827.927936][T30929] ? fput_many+0x42/0x1a0 [ 2827.932240][T30929] ? ksys_write+0x25d/0x2c0 [ 2827.936726][T30929] ? __x64_sys_splice+0xf0/0xf0 [ 2827.941556][T30929] ? __x64_sys_splice+0x1d/0xf0 [ 2827.946383][T30929] do_syscall_64+0xcb/0x150 [ 2827.950862][T30929] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2827.956740][T30929] RIP: 0033:0x45ca59 [ 2827.960615][T30929] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2827.980205][T30929] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2827.988591][T30929] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2827.996544][T30929] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2828.004502][T30929] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2828.012452][T30929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2828.020407][T30929] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2828.073673][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2828.082358][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2828.350633][T17682] usb 2-1: new high-speed USB device number 21 using dummy_hcd 15:28:40 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x1040048, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=""/213, 0xd5) 15:28:40 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x4}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:40 executing program 0 (fault-call:11 fault-nth:86): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2828.450697][T17682] usb 2-1: Invalid ep0 maxpacket: 0 15:28:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2828.530086][T30965] FAULT_INJECTION: forcing a failure. [ 2828.530086][T30965] name failslab, interval 1, probability 0, space 0, times 0 [ 2828.542782][T30965] CPU: 0 PID: 30965 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2828.553315][T30965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2828.563362][T30965] Call Trace: [ 2828.566637][T30965] dump_stack+0x14a/0x1ce [ 2828.570944][T30965] ? devkmsg_release+0x11c/0x11c [ 2828.575854][T30965] ? __se_sys_splice+0x7ee/0x1b70 [ 2828.580858][T30965] ? show_regs_print_info+0x12/0x12 [ 2828.586085][T30965] should_fail+0x6fb/0x860 [ 2828.590629][T30965] ? setup_fault_attr+0x3d0/0x3d0 [ 2828.595649][T30965] ? alloc_skb_for_msg+0x220/0x220 [ 2828.600803][T30965] ? skb_clone+0x1b2/0x370 [ 2828.605306][T30965] should_failslab+0x5/0x20 [ 2828.609787][T30965] kmem_cache_alloc+0x36/0x260 [ 2828.614527][T30965] skb_clone+0x1b2/0x370 [ 2828.618750][T30965] packet_rcv_spkt+0x129/0x490 [ 2828.623520][T30965] ? skb_clone+0x1f4/0x370 [ 2828.627927][T30965] ? packet_rcv+0x1410/0x1410 [ 2828.632594][T30965] dev_queue_xmit_nit+0x36c/0x9e0 [ 2828.637631][T30965] xmit_one+0x7b/0x460 [ 2828.641697][T30965] dev_hard_start_xmit+0xac/0x1b0 [ 2828.646700][T30965] sch_direct_xmit+0x23b/0x970 [ 2828.651468][T30965] ? nvmem_get_mac_address+0x310/0x310 [ 2828.656902][T30965] ? stack_trace_save+0x123/0x1f0 [ 2828.661914][T30965] __qdisc_run+0x245/0x420 [ 2828.666325][T30965] ? sch_direct_xmit+0x970/0x970 [ 2828.671239][T30965] ? pfifo_fast_enqueue+0x36e/0x580 [ 2828.676420][T30965] __dev_queue_xmit+0x11fa/0x2680 [ 2828.681594][T30965] ? dev_queue_xmit+0x20/0x20 [ 2828.686274][T30965] ? ip_finish_output2+0x936/0x1810 [ 2828.691519][T30965] ip_finish_output2+0xbdf/0x1810 [ 2828.696522][T30965] ? ip_fragment+0x210/0x210 [ 2828.701116][T30965] ? __ip_finish_output+0x4e1/0x6d0 [ 2828.706290][T30965] ip_mc_output+0x8b5/0x9f0 [ 2828.710771][T30965] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2828.716214][T30965] ? nf_hook_slow+0x1a6/0x1f0 [ 2828.720877][T30965] ? ip_mc_output+0x9f0/0x9f0 [ 2828.725532][T30965] ? ip_send_check+0xd0/0xd0 [ 2828.730102][T30965] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2828.735364][T30965] ? inet_rtm_getroute+0x2590/0x2590 [ 2828.740675][T30965] ? csum_partial+0x379/0x470 [ 2828.745337][T30965] ? siphash_3u32+0x22/0x240 [ 2828.749929][T30965] ? csum_partial+0x379/0x470 [ 2828.754593][T30965] ip_send_skb+0xaa/0x140 [ 2828.758905][T30965] udp_send_skb+0x8e9/0x1100 [ 2828.763478][T30965] udp_sendpage+0x2f2/0x5c0 [ 2828.767962][T30965] ? udplite_getfrag+0x70/0x70 [ 2828.772706][T30965] ? mutex_lock+0xa6/0x110 [ 2828.777114][T30965] ? inet_send_prepare+0x1b7/0x470 [ 2828.782213][T30965] ? udplite_getfrag+0x70/0x70 [ 2828.786957][T30965] inet_sendpage+0xd7/0x130 [ 2828.791446][T30965] ? inet_sendmsg+0xc0/0xc0 [ 2828.795925][T30965] sock_sendpage+0xd0/0x120 [ 2828.800403][T30965] pipe_to_sendpage+0x23b/0x300 [ 2828.805228][T30965] ? sock_fasync+0xf0/0xf0 [ 2828.809616][T30965] ? generic_splice_sendpage+0x210/0x210 [ 2828.815225][T30965] __splice_from_pipe+0x2d3/0x870 [ 2828.820228][T30965] ? generic_splice_sendpage+0x210/0x210 [ 2828.825837][T30965] generic_splice_sendpage+0x184/0x210 [ 2828.831275][T30965] ? iter_file_splice_write+0xf60/0xf60 [ 2828.836968][T30965] ? security_file_permission+0x128/0x300 [ 2828.842663][T30965] ? iter_file_splice_write+0xf60/0xf60 [ 2828.848188][T30965] __se_sys_splice+0x7ee/0x1b70 [ 2828.853017][T30965] ? fput_many+0x42/0x1a0 [ 2828.857376][T30965] ? ksys_write+0x25d/0x2c0 [ 2828.861856][T30965] ? __x64_sys_splice+0xf0/0xf0 [ 2828.866688][T30965] ? __x64_sys_splice+0x1d/0xf0 [ 2828.871514][T30965] do_syscall_64+0xcb/0x150 [ 2828.875997][T30965] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2828.881866][T30965] RIP: 0033:0x45ca59 [ 2828.885739][T30965] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2828.905404][T30965] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2828.913788][T30965] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2828.921735][T30965] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2828.929720][T30965] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2828.937677][T30965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2828.945626][T30965] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2829.063579][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2829.072840][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2829.250533][T17682] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2829.340572][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2829.460590][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2829.469640][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.478865][T17682] usb 2-1: config 0 descriptor?? [ 2829.740546][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2829.750564][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2829.760087][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2829.767536][T17682] usb 2-1: USB disconnect, device number 22 15:28:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_GET_SYSNAME(r4, 0x8040552c, &(0x7f0000000140)) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000240)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000180)={{0x0, 0x1, 0x65, 0x0, 0x101}, 0x3, 0xc0b3, 0x2}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x480000, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000000300)={0xd9f, {{0x2, 0x4e22, @local}}}, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:42 executing program 0 (fault-call:11 fault-nth:87): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x8}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:42 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'os2.', 'vfat\x00'}, &(0x7f0000000200)='vfat\x00', 0x5, 0x3) openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3d, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2830.651085][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2830.663982][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2830.666354][T31020] FAULT_INJECTION: forcing a failure. [ 2830.666354][T31020] name failslab, interval 1, probability 0, space 0, times 0 [ 2830.683214][T31020] CPU: 0 PID: 31020 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2830.693471][T31020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2830.703518][T31020] Call Trace: [ 2830.706802][T31020] dump_stack+0x14a/0x1ce [ 2830.711179][T31020] ? devkmsg_release+0x11c/0x11c [ 2830.716114][T31020] ? show_regs_print_info+0x12/0x12 [ 2830.721293][T31020] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2830.727249][T31020] should_fail+0x6fb/0x860 [ 2830.731643][T31020] ? setup_fault_attr+0x3d0/0x3d0 [ 2830.736699][T31020] ? sch_direct_xmit+0x23b/0x970 [ 2830.741666][T31020] ? __qdisc_run+0x245/0x420 [ 2830.746228][T31020] ? __dev_queue_xmit+0x11fa/0x2680 [ 2830.751400][T31020] ? ip_finish_output2+0xbdf/0x1810 [ 2830.756571][T31020] ? ip_mc_output+0x8b5/0x9f0 [ 2830.761239][T31020] ? udp_send_skb+0x8e9/0x1100 [ 2830.765976][T31020] ? udp_sendpage+0x2f2/0x5c0 [ 2830.770626][T31020] ? inet_sendpage+0xd7/0x130 [ 2830.775277][T31020] ? sock_sendpage+0xd0/0x120 [ 2830.779929][T31020] ? ___pskb_trim+0x19d/0xfa0 [ 2830.784588][T31020] should_failslab+0x5/0x20 [ 2830.789097][T31020] __kmalloc_track_caller+0x5d/0x2c0 [ 2830.794385][T31020] ? ___pskb_trim+0x19d/0xfa0 [ 2830.799167][T31020] pskb_expand_head+0x10d/0xfb0 [ 2830.803996][T31020] ? memcpy+0x38/0x50 [ 2830.808005][T31020] ___pskb_trim+0x19d/0xfa0 [ 2830.812494][T31020] sk_filter_trim_cap+0x2bc/0x420 [ 2830.817499][T31020] sock_queue_rcv_skb+0x1f/0x50 [ 2830.822374][T31020] packet_rcv_spkt+0x36b/0x490 [ 2830.827110][T31020] ? packet_rcv+0x1410/0x1410 [ 2830.831815][T31020] dev_queue_xmit_nit+0x36c/0x9e0 [ 2830.836815][T31020] xmit_one+0x7b/0x460 [ 2830.840982][T31020] dev_hard_start_xmit+0xac/0x1b0 [ 2830.845992][T31020] sch_direct_xmit+0x23b/0x970 [ 2830.850740][T31020] ? nvmem_get_mac_address+0x310/0x310 [ 2830.856237][T31020] ? stack_trace_save+0x123/0x1f0 [ 2830.861248][T31020] __qdisc_run+0x245/0x420 [ 2830.865656][T31020] ? sch_direct_xmit+0x970/0x970 [ 2830.870570][T31020] ? pfifo_fast_enqueue+0x36e/0x580 [ 2830.875778][T31020] __dev_queue_xmit+0x11fa/0x2680 [ 2830.880409][T17452] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2830.880785][T31020] ? dev_queue_xmit+0x20/0x20 [ 2830.892987][T31020] ? ip_finish_output2+0x936/0x1810 [ 2830.898173][T31020] ip_finish_output2+0xbdf/0x1810 [ 2830.903178][T31020] ? ip_fragment+0x210/0x210 [ 2830.907752][T31020] ? __ip_finish_output+0x4e1/0x6d0 [ 2830.912932][T31020] ip_mc_output+0x8b5/0x9f0 [ 2830.917414][T31020] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2830.922880][T31020] ? nf_hook_slow+0x1a6/0x1f0 [ 2830.927537][T31020] ? ip_mc_output+0x9f0/0x9f0 [ 2830.932188][T31020] ? ip_send_check+0xd0/0xd0 [ 2830.936773][T31020] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2830.942078][T31020] ? inet_rtm_getroute+0x2590/0x2590 [ 2830.947336][T31020] ? csum_partial+0x379/0x470 [ 2830.951986][T31020] ? siphash_3u32+0x22/0x240 [ 2830.956555][T31020] ? csum_partial+0x379/0x470 [ 2830.961207][T31020] ip_send_skb+0xaa/0x140 [ 2830.965512][T31020] udp_send_skb+0x8e9/0x1100 [ 2830.970076][T31020] udp_sendpage+0x2f2/0x5c0 [ 2830.974557][T31020] ? udplite_getfrag+0x70/0x70 [ 2830.979438][T31020] ? mutex_lock+0xa6/0x110 [ 2830.983829][T31020] ? inet_send_prepare+0x1b7/0x470 [ 2830.988916][T31020] ? udplite_getfrag+0x70/0x70 [ 2830.993659][T31020] inet_sendpage+0xd7/0x130 [ 2830.998144][T31020] ? inet_sendmsg+0xc0/0xc0 [ 2831.002623][T31020] sock_sendpage+0xd0/0x120 [ 2831.007104][T31020] pipe_to_sendpage+0x23b/0x300 [ 2831.011949][T31020] ? sock_fasync+0xf0/0xf0 [ 2831.016362][T31020] ? generic_splice_sendpage+0x210/0x210 [ 2831.021979][T31020] __splice_from_pipe+0x2d3/0x870 [ 2831.026983][T31020] ? generic_splice_sendpage+0x210/0x210 [ 2831.032588][T31020] generic_splice_sendpage+0x184/0x210 [ 2831.038021][T31020] ? iter_file_splice_write+0xf60/0xf60 [ 2831.043552][T31020] ? security_file_permission+0x128/0x300 [ 2831.049246][T31020] ? iter_file_splice_write+0xf60/0xf60 [ 2831.054784][T31020] __se_sys_splice+0x7ee/0x1b70 [ 2831.059632][T31020] ? fput_many+0x42/0x1a0 [ 2831.063950][T31020] ? ksys_write+0x25d/0x2c0 [ 2831.068433][T31020] ? __x64_sys_splice+0xf0/0xf0 [ 2831.073270][T31020] ? __x64_sys_splice+0x1d/0xf0 [ 2831.078113][T31020] do_syscall_64+0xcb/0x150 [ 2831.082598][T31020] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2831.088467][T31020] RIP: 0033:0x45ca59 [ 2831.092348][T31020] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2831.111981][T31020] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2831.120369][T31020] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2831.120382][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2831.128344][T31020] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2831.128348][T31020] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2831.128352][T31020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2831.128355][T31020] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3e, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:43 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000180)=""/203, 0xcb) fchdir(r0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x24ba1dc0}) [ 2831.231128][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2831.239807][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2831.281431][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2831.290786][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2831.300238][T17452] usb 2-1: config 0 descriptor?? [ 2831.560400][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2831.570354][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2831.579857][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2831.588750][T17452] usb 2-1: USB disconnect, device number 23 15:28:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = accept(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000200)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x41, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x40000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r4, 0x0, 0xfffffffffffffe6a, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r4, &(0x7f0000007c40)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000480)="6746fc6dd40df45a9e8fc0ef46d43f178df97d3fcced6b79e5cdc503e082ab5ebe39120db446e073d6d891ff0affba6e0c6c3abf3b050bd428946289cee3fb50ac3d000000000009711be0cf0bf7ee2c0000000000000061d0a13f9d00000000000000000389e40d7de89f89e98b04fafc1fc85a96b8b133e2fd66436e3de5ff05b7c15000433f683acd8aed46b800"/152, 0x98}, {&(0x7f0000000700)="d585a4eb9875e751cae37a4eec54c5b8721e8e319bb99663fd1843f064e0ae3550dee8f7938879f6a62ac3dfcd1317fd4068afc1b886e0ba27465e6a6bedf6e704e89baedafb89467a9841500c97e8b5521b364e1ede9551afab93372466f61f80fef1131d814a8069841356477abcdcafee7a0de796dad998992c3c70c103a06254743e1577347c84dc136430b051fa8aa8d9d6efee7118d1", 0x99}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="22621f87376c9c80a8ab7d8f727d1960d8d38f33e49f31aff6b180b85c76f3c08a79b6e704fa355b6c7e7bcf070c9296b81f91e8b1d25027fbcf23df3d0cb7e1f2e40f0afbc2762f565048fc5434501b963acdd51359db6054e48195d5444dcde6947d2dd0799acd3691c3639d1b7e288e9b499263e040cf3e5106109f8013d1d2d4305b1f16adf33965f28675c0fe705e59bedf55ebbd8d51b399eb906d9869c8fe5ec716c289ec66b0d3b7509e0a064cd9edd25672bc35ea88edd4d305ca58ce", 0xc1}, {&(0x7f0000000fc0)="5821e120a5f2eb9aec5aca8bb81b33d17dd1ac5e4f754da1d10023f6f0d505ad7feaf58e9cac52ae71316df018411dcce924cd26b5b59a1ae1cf851f1d988c523afafb72733f0a437bbe18c8f88ab5ab99c784d87a5da4b1f7f6b2bfd5642c23ad8fa107719cc522764acdb3711e91209f5ae40072c8aeeca4cdc7c42e0b99a6e8a036400147bc2428fec34a28e6dfcd646db3b2f9", 0x95}, {&(0x7f0000000800)="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", 0x124}], 0x3}}], 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600), 0x4) sendmmsg(r4, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="b917b34c79fa1fc6aab20732a0fb34b496b1b71a9d20cad73eeb69411609091c23e90d399a6a09e95deb9aaf6ab1a0c92d9cd9ce5eaaf6ff7f20d0445f6a", 0x3e}], 0x1}}], 0x1, 0x0) sendmmsg(r3, &(0x7f00000073c0)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)="194e45ee169a3e9fbf", 0x9}, {&(0x7f0000000300)="85b72bc8959a049b1b3aa692df3774920e6dd901cdb8b5056f5aaba803895c7d78ca168d0f05b2d26bedfa2341f49dcf2b44061d3da3438b244a30bc26925fe2e685da2f0bcff431a85d307ae5ef74873c58", 0x52}], 0x2, &(0x7f00000003c0)=[{0x50, 0x84, 0x4, "4d4b0dbba8e1a5619dc89469ad29f347852a9f0eed0ae31030ea1e5604bc03d16db6a9d158ee082029782e6d2d4b2d8defe6c549156bc9b093462b3a3b6be571"}], 0x50}}, {{&(0x7f0000000440)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1, &(0x7f0000001500)=[{0x78, 0x1, 0xff, "d1f62c0dd8d3b547c96d7702b24e6cb4c6826847958f9404eb7ef29da41f707189a9ff7140676cffce93359f71f8327c2795355e4a0ab226e78ddddf92f4a0b623fdfe7105a1046fe64067962de42c883d8066f864370cfdc9d4d5f6afcb83a802fb96"}, {0x98, 0x103, 0x4, "8b8f14392803249401efcbd0f3ed87bd667cbf40c6daf5ac9fe8705965a407db1b0540273c6330ea1ddad3fd4c08137855ad1b86ee665c93af059362158eafb2502e08c7813ae6213de373c9d24ab14330588fe52d8056e4813d53f22eb1a073ab79c41d6b37e2f1f576f1d0652a0323bc91400a6bbf704bdafb0724a4ecdd64376d093c"}, {0xb8, 0x10e, 0xb85cecb2, "374f4fd24b0e95a9439e62d92f744309b2f11d93b0917f2236f316d8b084a0cb817f0c4ea02edb9d1b4326475e1fead21d1a21f02862a5109931c39b3f62fdf37746b8eb27489d961d6d5f876e409f5d3393bae16615dec89924e42bcc6eebb9c82a6e663c972b48f94131c8992e16a5cf8afcdc4966f57d3139060f2b92b7d098da413c1bf6b62bee6baf2df09ca1b8de256420e44a031c005249a11a2036e023b863"}], 0x1c8}}, {{&(0x7f0000001700)=@in={0x2, 0x4e22, @local}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000001780)}, {&(0x7f00000017c0)="720858618d181a021e5a497bfa818fa0178437483d547b2e8be0281c247a16b8ed5c5d247663dd149c1065a36971d7d8e7d4c514782f071f37bd578ef6b5b38a6652bfea2d907de1f3bf461823dc9b4fe30054", 0x53}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="4d7b749d2e95ac06c12195bebf5dc4654a3b5c0b1aeb79b5dbdb62aad003634df41fa48a28922dd7d3ae414bdcb78082142b1d62089ac005ed26ec9e19ee4b0497f233b0cc00a8d6f07ba4e5ccc0b88ae82e53c93df8bdaf0826e333a420913e4fdf794b59d030aa291b72366872629f577374ccd8fe868a15fed52618925caa3751c3ed9bf612bf2604e54676fa111f9213d9cec80f98e250ab88d3", 0x9c}, {&(0x7f0000002900)}, {&(0x7f0000002940)="d7802a369874600ea9ee51fba0566352dcae58a68040656b06b64809f608", 0x1e}, {&(0x7f0000002980)="aa9e74cf0066cd93b84db4318de2e33a9be646ad84db6571a3984f61c860", 0x1e}, {&(0x7f00000029c0)="fb6360d7754a63b06a7e98413f1ec341004e81e65e13fa92e008613f9a1fac8ef05212cd8da98edaf4578ce7c96ca210ccf37dd06192f2a0a4b60a47a7f53a4fe1b42005188f1d0f78e447343a0196acd8589a2c74cc44ef3d34fec40e0a7aadf05a820a4092a1e221aa3cfcbf821c0057149c8a3dc3526bb94f3062f5ae52ff73babf4cdf2e11db", 0x88}], 0x8, &(0x7f0000002b00)=[{0x1010, 0x109, 0xec1c, "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"}, {0x108, 0x110, 0x0, "32bf35e7f52037c02e9102e095b901586b9196723775353a8b1422302d0d7988dc1b417a74fe3996ce86b8a683d05562662ba23dbe2ccac54dc6b581b6b05da227ee459285b7c0bd118c999a69bfbf1021e6328efc11ca3cf804eb718a758cfa3d9f89eb23ff7ef322dfdff7ba18bcd672dfd3fbcda0891a4c226b9598c3390e8933adf3443b3940264c1f713f4a537183fbfca567e40d5e7386781290df358aef49af011f7d4aa4a3c1db6749887c78148750aeb23180e9e202ff3ef9bb757dad4392b712ba6dde6500d865bf9dead8d471e88a7ae0bb9e6dfbf0ffc43b1dd66606ffa2286fded0922b70c3042605116015d63ac94054"}, {0x70, 0x118, 0x9, "1b097bef8a05d2d8da2a872072b43adb2e0000dbe2b71f049a86a6b9bcbc18e6e85245ac908a1e545c99c035fc4a547bfe7be7da6b296dc505e341da889fb6e6d375edbe04bcc109ecb0a479a0bef957d34fe853f89ffa072f432e1f4db7"}, {0xa8, 0x100, 0x8, "8c82c1ac54b70df11251bd368c01b515a84a24b9b91f1eed626b7de164017c840609bded34543196ef4380204785598d1441c36079e3a31cded60d9d4066e6d27b7de6ffac05e02ad4954bb7f6e9089da150bf86808ba5ca98ee63f7f5ca79827b8632e2fb6f327efd543d1fcb5cb433211d46118e037b999c556fc027ccdf347a1e6150d28ddf53b98e05cf0ddbb14f09"}, {0x110, 0x110, 0x0, "7904dc127381bebd37a4c321ee834707e44da27bd92f767f57dfab19a2da06062a0a44a932ac16bcd3f42c8f19045d83bcc16d0221a00fbfb26a3e52695dee77d71498f9ff5989736d59efe8b2f7e9ddfe58f22296231b1ef47497f1b88dba44088bb8ce8b0910d9e820a62278f741332c1ae65823b3bdb0cf26dd9329328cc5bc7023cf3cce4fcef50e1b864a8f9f2aaaac2a4e423a87bf6d4ad67c20dc81c837e10596e627afab822089058a4f6cd21f677c5febbdec085c8ba7427fb3bfb94b35ea0ce87c980ad84257fe849e94bc038010169bed101ff51b0af9662bf19878590c820053925c9064ff87779641bd53ce863f65ac8caf41855d"}, {0x88, 0x112, 0x4, "2a71fc56ae393287cb0b7c2cfaeebe1473bfb778ac217165803a59c1522b087bb295361c42b87f8a8a6480e6e5a9b1a522abdbf7f0cb929519a785f39b91002e916314e5b87c9f684097b8b82cc9d45eeafc379c6add4d04bc73d967032bcbfcc0aa3c91a9af7320b98d9627c0aabc6812afc9"}, {0xc8, 0x10c, 0x0, "393bb4bd74f3ac197a5892a4196730e5dde8d41f102a5694c50259bf7d5e2e666e333bf3df015f2c442e506fc5d5c1d7db0cc62956cef93a07ebd38705527eec760eec6d7f995c13999855d071f6464debffb433a052c4f8614560f01b762004fd951ca5abfe534a4da0e8a9ab11e0feb29a974216f3d573081c654da4defdbab458bbe3938b5b46658851bf4f72a46c224e20c3eaf77de15304cb762f0272f77471399ba5a2b3e8df9f6eb9be5a241d065f2999f8a6c4"}, {0xd8, 0x118, 0x8, "dd2bc384fcad85d01f4b241f7792ce4ce10ae15f95d503b8f7fb323b10bc943e3c551da734db5f8bcbd04bc35826097e05fb7340021c3cc2524d26bfb7a06b6adc697fce83bec1345391684ffaaf32b95adbc47c265eea6ce4b5801cf17bc9dfdd415e937e83467d77fa439c7bb6218904575711d476f61dfcbc0bb3ce6079a56716d6033eef9f5d80e315bb326c65449ac1a91e4ebf3aa7c2cae1962d66691c27ce04019661df7eabd5001bc5224b5340d0a46418482ac76d7d6a72e3f3e69598c246ed"}, {0x30, 0x3a, 0x1c0, "a016a8ebef170289e53c11789ba88e780acab9cec339d5dfd8"}, {0xf8, 0x11, 0x200, "45ca5f5236b331a007b3bcf5880bc4a635e85d9d4ef32ef32a8ab873c5820b03f92306d2a290434dc00b7bdeb5430e353fc307ae680bab5253b015d420e0fcd0f14c0ba585aa5211fab790a95c44d4bc4ddcb1a6a59c491d0fff145ac6748954c96c39ed42954032e7ec3fd962deda89d4244c38d41e449d3ec73e9530e8609482346d1d037ee1ec86c50194a37d266a3eb649a1db8f0a350e79c5a098e3292c684b21037fe9a6a0f957359cca683a923967e349c6134452f147de2e582a26e2d86a525e492c907e8f33afa6c4458c5917dc423f33bacef25bc21814e7d41b4a4d"}], 0x1690}}, {{&(0x7f00000041c0)=@ethernet={0x306, @multicast}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004240)="9bdeb6ad08bee8938e2d3e6b0b92bb9b1a40c9bed6533881172ab509480ee60b5ecaee7671333466cb3749c9afcbfc13e00c838c3c9b08a887ae0d1d44cf0ce89455b87379760fb3916e83f6735c96971201b5f30a205f7f1c8cef56b78708c09c3faa0a65caa2b1b23b94af366e7c0226d72dd7d74f59612749d38311084c44a99fed8bb07f11e2213dc94bd5ae6597d28507605df5685c81f35b6e72708f742c65cef8c5430dfde6e7f90503b0e040", 0xb0}, {&(0x7f0000004300)="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", 0x1000}, {&(0x7f0000005300)="8b065356fc098634811e732327a6c6ab2f79403895192c6136ed", 0x1a}], 0x3, &(0x7f0000005380)=[{0x30, 0x100, 0x3f, "9c077fdfa9120f46babb7ea9c76b0d42dd1ab5eebf71ed5be6ca0c20acbdcd"}], 0x30}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000053c0)="54d08b137d941fe63d649ca6bd2a1523647c174c88634d3728a5e15298e6f6461ed8bd581c32795c184d1a5605e835b57638b634cdd55193e061d9a939f0d6e63df95b1dcc60c21a63befe0f3aa1b2ae3e8e428e2f942dfc35329071ffddb4a033c0e7e3dccf48a1208f4c9ca0e4c8c963c0664a5929c80dab55db3bbaa30dc5955b18e3ce83100d5c155076f0e105d61da670edf3f80bd1f80fcadb1dff50d4b1a4f2814d60d69c8b053adbe36ac312c4075b244a7e4164e843875828f1c8e3981ed76938b772c55ee966ef37452efefb89495747fa9834ac6d23f2549cb863f06138e3ae686c378cd9", 0xea}, {&(0x7f00000054c0)="d3dd394f3c712044704038b6933617bbb344f5f16335b015db82bc17459e7a8bc62315c00b7707941ec763d65eea3258a399ac", 0x33}], 0x2, &(0x7f0000005540)=[{0x50, 0x111, 0x83, "cc37fe5c2e11e5c796ed97f820691c6f282410d2fcd37964e8edf4b244cefad08aa42e625d72bc0bae3227c842f28684e66aab9560fbf78bce6e"}, {0x50, 0x29, 0x7, "5ba7dda845e740956e37b461bfdbb57d29b9ad6fba70b50f83c4afaeaf26feba97a19f0694b73b06a1084b8248eeaa71c5b60da04c830493968f5dce"}, {0x48, 0x1, 0x4, "f180f1918a0bc1aaf0ecb0e8f031d9df004feaaac5ba6609e821bedb9ea01974db6fb646accad0bd7e47938ae5c54a9a9fc084"}, {0x68, 0x6, 0x5, "e1048fa43d4499411f64c7d47e67ca3755acbb86178674394218107c6a890612e508f09864119db26de9c0f084b8402938f4c40d4c0888209f32595df4474b65d6a2af748443634d864cdc7db818acbbad33"}], 0x150}}, {{&(0x7f00000056c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x2, 0x2, {0xa, 0x4e23, 0x7, @private0={0xfc, 0x0, [], 0x1}, 0x7}}}, 0x80, &(0x7f00000058c0)=[{&(0x7f0000005740)="4313d14a91a4621c3dea886bcebf0cc5397d7ac8dfafc6b8ca825fcd0d4aca2d908f162e030c7b8db55fd61a6c5ba7837f7072c27cb94f91960df3828b89a747b4fbf71a83d3ca3ccb289e4a2caa80ef1f52b9cdc3f3cd9cf55008e99e79bbdbd3202900c4cfb9b806c13000bd41f75fb74926ed0d558373810f1562d0825b", 0x7f}, {&(0x7f00000057c0)="8e019aef5330775edf61e6d80302d137cc9d3105cc5b2f4d928100b6d93a13b51084bbd8072006f1ba50abbdd72fa742aa25135d93ba4d415552df5be11cb1b3b90b941e59f013aa4106e7faddd6ee563d208e8b33665b6d38d4fed6bb23057e0dfb88d8f5a132f0f4f90f4aa1616e2bd62944bee19a63917c56ac3adc5c4a15bd00d5cbaceaffbbe443ea4605500340c597c4deb0aafe2062fdee5c2b1a827ffc2377c5746597c976b8d210cd50740e175ca73143ee8bc17e38aa2feb048ce53e190cf943d202cf28bad98ad8", 0xcd}], 0x2}}, {{0x0, 0x0, &(0x7f0000005940)=[{&(0x7f0000005900)="18ce5da58ec93603c9adf8d4a0b7", 0xe}], 0x1, &(0x7f0000005980)=[{0x78, 0x100, 0x1, "b84d89538fb37c3eae25b1e2f7ff5d445437f7c8c595110c2ec23ab17c5c180a234871788db86b628e8691f13159b6e4177b35f33b34eee84b0d7316c4a0f9dc010b24c596711d9afd81e2d506deefea8888d862857203379c8d4125865aa5f0fee6d6cef5"}, {0x1010, 0x100, 0x1ff, "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"}, {0xc8, 0x29, 0x800, "8faf02ba56d8880336587867adfe4214e8bcdffd1d4962da75ad4ef9d6e0edb23da43693e85c4a14bf73587011a5c7b58b9819a786a4f2d736d4e4b0b7f900f82505d0de9f06a727e679503dbdf881d07ffbd9755f07daf100f5ae4c149bf4efc91464de022ae3298a16e55c36088d783c7d7199e29f01de0b7ae692797b00936331102e87c70fb3bb8d16fdd6fd9c64bcbb22fa35bd8a6631c6b3d8895837c2febe24472e1e3c9ad7f594068863e85a4374"}, {0xa8, 0x29, 0x1, "1e1953c636903188d8d1bd42d712db6fe3e8b8e4545050a9d7865ef7eb400b0f90512e3b8232481edea1a7e6572b1b6350993c8669b38370d80d1f8e5a3eff90d82161006fd3520f175ebab39fb14f42837d1e85b25fcc7f3569f9c6df734f537ffdc230f805df0be6f2befda6a461ed1c122376f1b881cb0a93d1dc93f20265c33cf02098ef96c89521cd587d27e01b44fd"}], 0x11f8}}, {{&(0x7f0000006b80)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000006c40)=[{&(0x7f0000006c00)="03e5743552c7424397f88d2f68ed8c6b8108e17178b4110dde69ed6b993f8569284e9516a65fb6fb35759a03e08f21baa1fafa7106bfb1d21ef3de3eb9", 0x3d}], 0x1, &(0x7f0000006c80)=[{0xc8, 0x1, 0x81, "6d2a5fb54905876c30d3c941eaecc93ad77db515db0719aa72de0a0e0e3f3132eb236fe09d8b0ab9e82815d529e5ab396d2351bc6760bd6924281d29313746cb689afa00ae8106d0b48ad76415c1b13b2177c4bb06aff5d5288acd4c152aed51f903c819c6cf38a87f069495594be900897f6d0154fd157fc6c40a50b58790f4f41437225987ce9b80c0ee0321acd303607a8ddd0c04d4031e56f5767b8aa67bf16deef096da92ed2399199f5ce69827a36d0febaf914ab4"}, {0x108, 0x10c, 0xffffffff, "0252eca153327010a41e0da6dc293fcd791dbeac170460105c219edd46dcaae54c1eb4e7aebd2c03a8d36b497fb4988822b3c7ffca50a5c559fa046c2e7b76c00765ca003d4deada26aa392af10581c654a51319ec4b32fdac6a7503af960d85438d18848b44557e0bec1aba18c5659f6f7401bd1ae76fef2589e473c1364321ee21241bdf645ae6a79062fdf9a4f1f331c2ac3f2a18e3a914feedb64642aadbad164923999dd4340c0ce46446e4181d1cdffc5f6a3058d851d7315ec46f6d6725e5a94e65299e4a6847a1c79c048565655edbba17b95f6196e978d8ef66b014ca6476b85873f7641505d5c9a50bc98e4ff1"}, {0xa8, 0x29, 0x5, "e76926eb2e7062f11633983f971a40abd8755b4fb5334bf1815e1963cfa2c4b208c94551f0f00f772ee20ef3e238b490e0aba0e7d56db7a47e77534ed10151922a9af8958abc65707e901b02c789a37811223cb4c4ecdaff52058f2e721f376892df91ec475d868492a05c40db1658e09cef1c77ae92232e2aeafa50b381871e9ba7e720416a6e72c4da99420d1867232c8abcd86cf385"}, {0xe8, 0x0, 0x5, "1b6a2404a63d374a1970fde1249401c8278ec4f8c0b7b42ff49677a7e3424b3d17506954f9bba7e9b54892462d0237826bcbe8c02acf86a212738e46c77ba08e6d2f37fe8514e764ab6ea191c377579bb4fa662b6c1a79594be1e241437a40f227c2a9d4e3551f29ad2deb91cf521f3cfd2166d6283f2b85e1b8db3ee9f51eab34a0ecad7da83d02e672414d1d847c75c7138257225ef4c4129584d8846f6dde30814d9a907dafffa4c71790f3aab899783697aae3451c0619d2542e6e63ff12c65364153e07b08e2e32c315344c7fc51391d1"}], 0x360}}, {{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000007000)="88f2b1b96279f49ebd47d469956279d1ec57eda3241eca07d2332f09d3086a39c26a9ff33c1185959fa34bc33e37f3c349918dd6be5706c521ecea594b50513664a3fa8e8e090477be9b493b4ecf39ba38ebf6b3cf5d0656ddb609c46dbc65049db8826bb6e6aa44a20f09ae4cf3a18277cd75ee57de9d8812212a3048c0278fc4514aa6c2650ee2f6a441d882639df2e8b5164d4f5fa5380bdbc6f1c3", 0x9d}], 0x1, &(0x7f0000007100)=[{0x110, 0x10c, 0x80000001, "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"}, {0x38, 0x104, 0x0, "b2c61a2aef49e92db99d82b0fbed7a511ea147bf04167e38ab65fa412f66ba32941b3ba2"}, {0xd8, 0x105, 0x1, "d0632f7c6cf82d112e3109ab318ad032d1638384a471e7b985c204d989c7f88b5489e434d84cd7e92c5c0874391551da69ab604bd9465035fa8191c02c13bc581b5601cf478b22e4eeac5ad6f1cd0fd93450773dede88d4cae0ed7cc524b3ef74dd0678fa6ddface1a60c03e476a09dd0c0c7fba09516b50bee438c06f5dd6887a46509885a7e93b44a85a4743eabc92d560c8ff5e4dd52dcda9529915f2937e2936a108b3a97b1a2127ad959538d9c3fd9eebd1f01af5976f14b8b9c83e3b883405e7ac024c38"}, {0x90, 0x3c, 0xfff, "a88f69adc46f9258f3db0690243373bbef3f767fe4471637a868f42622d0f4b705d857814a85a8f30d33b31438d3084315141fc2d4b578d4f302f183873f0f0f941579e700851100b5b693ab7ec5941e1e328520ca7b117229fc09e0ff8dd9e6f5bd70a8b4b0080ae75780563edcb3a0a647a59b375383d7fece702fb7ba93"}], 0x2b0}}], 0x9, 0x804c044) perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x70, 0x1, 0x8, 0x3, 0xfe, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0x100000000}, 0x408a1, 0x9, 0x800, 0x2, 0x100, 0xffffffff, 0x4}, r0, 0x1, r2, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:45 executing program 0 (fault-call:11 fault-nth:88): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:45 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000240)={0x14, &(0x7f0000000180)={0x60, 0x4, 0xba, {0xba, 0x3, "8eaa05274b9a97f45dedf0af5795302eda2625941952cd7f24414adfb33a2895087775cbbd3416bb43bf4d72c6166299cf70aa35624fcdf4658b0846c861f69b4443a446dc8bb88243a44e55c6a375c08e02c32247dedcb30cdf6b7add54558c3a00d83e42517c6b3c4d6896cb14314d9683a87b558f8b27a44fbc428531aaa82472cd715253d5ff9dfc762c4aa0dd90adc9ab281cc46e06b4ce2b7183719bb18f10d5efa540fcaa8d734014381b0bac6b7d4e912b261b2e"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x43, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x2, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2833.676468][T31075] FAULT_INJECTION: forcing a failure. [ 2833.676468][T31075] name failslab, interval 1, probability 0, space 0, times 0 [ 2833.689431][T31075] CPU: 0 PID: 31075 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2833.699707][T31075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2833.709758][T31075] Call Trace: [ 2833.713208][T31075] dump_stack+0x14a/0x1ce [ 2833.717517][T31075] ? devkmsg_release+0x11c/0x11c 15:28:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x3, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2833.722491][T31075] ? show_regs_print_info+0x12/0x12 [ 2833.727665][T31075] ? stack_trace_save+0x123/0x1f0 [ 2833.732672][T31075] should_fail+0x6fb/0x860 [ 2833.737079][T31075] ? setup_fault_attr+0x3d0/0x3d0 [ 2833.742104][T31075] ? dst_alloc+0x137/0x4f0 [ 2833.746524][T31075] should_failslab+0x5/0x20 [ 2833.751135][T31075] kmem_cache_alloc+0x36/0x260 [ 2833.756018][T31075] dst_alloc+0x137/0x4f0 [ 2833.760268][T31075] ? __dev_queue_xmit+0x1501/0x2680 [ 2833.765468][T31075] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2833.771431][T31075] ? ip_route_output_key_hash+0x220/0x220 [ 2833.777130][T31075] ip_route_output_flow+0x150/0x2a0 [ 2833.782312][T31075] ? _local_bh_enable+0x30/0x30 [ 2833.787139][T31075] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2833.792589][T31075] ? __rcu_read_lock+0x50/0x50 [ 2833.797330][T31075] ? selinux_sk_getsecid+0x24/0xb0 [ 2833.802438][T31075] udp_sendmsg+0x1803/0x2f40 [ 2833.807021][T31075] ? update_misfit_status+0x5e0/0x5e0 [ 2833.812386][T31075] ? ip_do_fragment+0x22c0/0x22c0 [ 2833.817417][T31075] ? udp_cmsg_send+0x340/0x340 [ 2833.822164][T31075] ? perf_pmu_sched_task+0x370/0x370 [ 2833.827431][T31075] ? find_next_bit+0xf7/0x120 [ 2833.832112][T31075] ? finish_task_switch+0x2be/0x4c0 [ 2833.837293][T31075] udp_sendpage+0x110/0x5c0 [ 2833.841779][T31075] ? udplite_getfrag+0x70/0x70 [ 2833.846524][T31075] ? mutex_lock+0xa6/0x110 [ 2833.850938][T31075] ? inet_send_prepare+0x1b7/0x470 [ 2833.856035][T31075] ? udplite_getfrag+0x70/0x70 [ 2833.860781][T31075] inet_sendpage+0xd7/0x130 [ 2833.865289][T31075] ? inet_sendmsg+0xc0/0xc0 [ 2833.869774][T31075] sock_sendpage+0xd0/0x120 [ 2833.874255][T31075] pipe_to_sendpage+0x23b/0x300 [ 2833.879086][T31075] ? sock_fasync+0xf0/0xf0 [ 2833.883492][T31075] ? generic_splice_sendpage+0x210/0x210 [ 2833.889111][T31075] __splice_from_pipe+0x2d3/0x870 [ 2833.894115][T31075] ? generic_splice_sendpage+0x210/0x210 [ 2833.899755][T31075] generic_splice_sendpage+0x184/0x210 [ 2833.905211][T31075] ? iter_file_splice_write+0xf60/0xf60 [ 2833.910743][T31075] ? security_file_permission+0x128/0x300 [ 2833.916460][T31075] ? iter_file_splice_write+0xf60/0xf60 [ 2833.922006][T31075] __se_sys_splice+0x7ee/0x1b70 [ 2833.926862][T31075] ? fput_many+0x42/0x1a0 [ 2833.931180][T31075] ? ksys_write+0x25d/0x2c0 [ 2833.935669][T31075] ? file_open_root+0x450/0x450 [ 2833.940756][T31075] ? __x64_sys_splice+0xf0/0xf0 [ 2833.945584][T31075] ? __x64_sys_splice+0x1d/0xf0 [ 2833.950415][T31075] do_syscall_64+0xcb/0x150 [ 2833.954900][T31075] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2833.960771][T31075] RIP: 0033:0x45ca59 [ 2833.964650][T31075] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2833.984236][T31075] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2833.992669][T31075] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2834.000625][T31075] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2834.008620][T31075] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2834.016571][T31075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 15:28:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x4, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2834.024542][T31075] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2834.190152][T17452] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2834.430138][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2834.444302][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2834.453097][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2834.590215][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2834.599252][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.608072][T17452] usb 2-1: config 0 descriptor?? [ 2834.870152][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2834.880113][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2834.889621][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2834.896952][T17452] usb 2-1: USB disconnect, device number 24 15:28:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x1000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x6, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x80000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="f8eff4bd1c6c5d5a6dcf0417e51af5613f8c2b61527ad57af401189ee893e2cb83ded000e6a6162b9f6b84d429d140e4db5d1098c2f294ab6b94cdcec926e68e9c9f001f5ed9ecd14e69274be8f725c62b11c25b0a78c03141e01882f5521d6e2790da7a381387b79c3ef040697dd8806c689a9b830aa279edf42cff10d08600ba5e9a2de380e20fe62c975806c1656c6c3e99dc6eaead39ca57d8a8769c9e8a4f6634c25a2fa4d6496f3eba523943a76c40e53dc0794425e0fa491d8ef74a1065480c7b10f91359037b623b98f26175cbdb7a710a7622073081950630d71b60428ac5a183c0ff9d38a589cad329dc3fade32b0b5ca10a4c5e51cbb90ba101ec789fae20db232ef6f8d91c22107e7a2bc9b54810131d3ca4e68fb4f3c43ff0e72f4e665fb2c9b8c362814dc7acbf603517c1d61dd04d36bc099a3a9e34e90f884ee53b1da542ad9efcd6e58cb201e655ec72287b65ae72717937a46bf3433f69b1e7a398bbd3771f7e160ee52c48ec3260bb0f04b0d91b3a601758126716136db8462b983a6edc9294e28b9c14c9894f3ff5e6cf32cb2de45b1f1cc10dce88d2fd8b9fdd44244d908d7703fceab49a502ece0ec42b07f41369a2621ac0e35d761a272f25b4405e8c3b18a2b211b5191a041d4de4d392439801f68896eead2b357e0ff18f90cd4ad780047598f7b35f5a70521fdb1b6bc184ae385a405d7ea7a2d3cb025d907d6c855dd17ac7c2eba18fc65f956c9083d7defe02c073a366bd57de6a5b8fb6ae549028bd8e8263f3f7ab7afe6fa3daaa907693a79172c962a54bd5ce9393f34460b09e9649d32be64c5e5c0516feffc2f435852565d246b1b7de45e12f44e7c209df417e4f8985e9a47ef5dc49f512914d6b2097b4f6790f146f1130bbf5abc705bba6e5eb81e4a8faeecbc8dfee8bcf1a472762b154c2fa5726ef3f1444a91f9d7b4e826a05b93295b3e3bfe6aa5505558e71a5f9f94f0822c2e0094847d7b2bf905159e3cb989863cadfb5c3b33056b94b816818b38298b6d3789f4b3165b5a12ac4984f8e57541a987317eb5f3d3e06152f58adeb34963daec1a414790bbf410bf3edf2ad79a12614e2b909c2d7d5a24d7fa7ee09be0cfc07d7d2dba665a4dddb5a613e586505dc893359db6606d8b68411bdc3be5a7f54393640a0f264d948c81c1d72659ba6a1522e01d9f035fd90bf02694f54752cd3c5fd0b25f1212eb9ec0ea1487551c0dc81948df143622366ef6ff57113c976d0d3cd5c3cfbbfca54afec6d5e60b5da442c30e74e8c42e2830e55e0841f6bf43049d407e58430386d171e0cee6356a950439817bb7af31b9016b3f2ed5e49f89c469a8757a27ecc24d4a57f8b26423b3b837def0ef920f3ed1fa8a96c4be1ab051c100b4dfe220ce94e2e0c052c7d0ce8f5c95f6f7efd9299fc49e15a5c5ddf26172313f530838bce948c3255979fcee66b7dcf694081ffd2abae5607b291d718403b12dfbd023561dd65225a00bed827002525b7ae38a93cdfd1e3f72d06913a5a9824e96c3351af36898655bb71badac48c551cbb5d265ef701775dd0e44348741e305f696da283ee907d31124017bb99249377b675f90db8efcf14ecdb0e17bbecef1da8f1b6b38fadfd78d407c0214bd23cff16a65041e7577ee028c35a251afac47b41d0a29222a49eb4af06b8528d4eea05e547246ef33c83de35150d889524c85ca23cfcfbd294027c7347ee779123e37d6a33cb37456c5975043557aa4cb339e4b9c026af9405932b50f3dc9ad1e4f0f9d9cd3c5410b0df61c827d532d735dea3199d9a0de77fb4e7138ff29209d70abe4a35d91a4039862ca4a0c291c775c61741f3409023049121a04bf5a2f7f6fec50f14bc80e2467ed6dd9975aca0a070571c63dad3017721714f812029ae72838326ab3966de8f36718952ae699b69a1cf277a9f3152e4f325d7710a572a2e27f3363f0fef02957e86f01f3c1e936bff39dd5a53d4681a2d277af1b7974a14c8552380a73bc44c71bbd3545bfa578c722f64f0ee195d05c9e47bcf64ad531bd3b4b03f6061958cf4f329dcd97d509874dc271401117d9485f830f5f18f1c23160cbec6a3ec6bc8061645ea18c244ed5fdf3c35887b24b3caba2bde7983da3402c5279b4434047489b3974424266ed8ca742a113b53721c9f43b7717718cbeff05897352eb1c0da6d12300c2b392d902ead3c165aadbfbfc4ac6fdfdb460fb783c03835e06038cd70dc034b5111b30344fce81cfd0aaeef4baa53e9816a75ff10ef54aefdd61de3d27dcf2ea7384dc267b407b179cdf211e4cd1158391ae66ad2e250274c4ae0a8eca6b6ae8a4b933c0de4f56ba1ed5525f07f45c9473d44b922ad71869732a64b115a2e0c2c12306efd35897430dec44ba22c2d8d2e2086ada82e8d8a4fe51ad5639ac8bf17d9cb847b3d2153c24ff112bd0633409873a1e3102a522021b9004ca971d43e0dac7b0c40befd757932996840db1d050b639480ed76858c7770d2a393f37d8603947e9faf4396c92e67d9a32939b94f97b17459deb0bb4f802e90f5fbd458c5f90d3d944b939594300046c356e0591f83bd5c110d99e1074e9f191835c9e1c68927fa489c3c815ee47465ccf9c1cfe0e522f6a3fc1dca25700dbb8e5113d1281b59a054a3298cefbce455d1cae60dc1c1b10f5880b1eae0cbba07793e886ed4ea008fad8214d591b7704f71ca8cf1ac51814191021df8b2eb8433d3fbcd19ba75e7ddb4103e114b5a98a9c7bd61db4e36db84b3f224e0c2db0f6dfbbc2c7edcf6c98a287ccfa82dbca1ca0efa3a0bd3174207f277b17d3142c4e57099ae266f5f2cdea11ced84a5f489d32d7424638bd658c04362643fa5b13e7f0a24142f790063ef07b0526674a5d4759b880fc3e23357b052536082f72bc4f3cd96531593cde749e93505c4bd60fdc316ee2cca4954163053a00a5939809cc84cd99ccb71e1c8abbcf04acf69827352e4d360a85b49645cfc0ec3d8c592e9e9ef7f9006f30654fbc117272f0678e22a5ad108854941e74891ad3b5ebba17cbfc3e3fbf238faee413d05bcc8448d8b7acc25ad67491af9b7136dba49b6f1f03ec04dcdd842be0484858eea39f6bc9a737f7e4fb69a25ebe7eea465ed0e22777b7c458c8f8386839dec68f9d65a90ce2152c9cd84b7f6dd345c0acdf6f5779c4ab7b4b1e9961eaa7f15d76c1c1e1f98ead5f0df776daca3e5014f8e741bd79ad4e588a230909d06c6be78ebd96f837689213751a25d9a871197353dddb55ac0aad83550cedabbfedb2b8f75b344461cd6b1d4c994ae066fca59138826e67660496c88c26ad7f6cf2271129e80d36c1a050927f7a2d7d57548983276d746d95516e5d851e6abefc7040b40a58c072d6c8c132839e09da47badda71d376af3409d8262f2acd7f567e7b942442d08fbbe74016a43d1a76f557ff4fd7e7c416e4a7a4af950673f17114425350ee182d2a57bc37821dadbd65b4a781a3590fa9047829c4935078d2f3c63f8b173055a9f378484662524d503495db1e9d52d9a11498475fda37a16eb8868ab671e05fae66c70e1443a65d3a17603c8132cf1e08a2526ce6a2099aed558a58f64060dacfb48161924764f1666c22bab9e259adb47ef171464db62d982624af8d66de6a995724cea4134123e51dc2f152dc0ca7f6092b8d7060fa38f3dae510e747982d1b6f4a8ebd90ec4d412fb71384d551433212eb25291e5670a23ac47df9eb98ea7d1b4ff19ef59b331a039f19586cc29cb7cb203923663eccad84ee64e3e03690d6acf820c652f974229587d21c9f7e7b512b843319b26faefb3ea013f09aa6504789368b77103d61bd56cd10511728b4ab1614463cc88811b3116075bea9d25f888c2fd3facd189ababa3c57edc776ebf626b23b2c41548a483f76d3e1db6696672d8e646c0c4280bc687099f770ba96509ea4875be21ce91b3e9ce5cb6c6bc6dba315d2eb3559a4c0d83d78fd5c2e6efc4630fda71ed6e778ea090e22b2b8b33e829f433a14d26e24755a81ba5b5dd3e236a2dc8255fcd842909cd7c8bff92bc68ef4017d4fd768e597bfe65f75bcb405b544301660c17ceb48f6758c6fafc0c7a99c0d5c7bc0b30b294b5cb236c84e443dc52827efc376ee18decaa9ce1f07e3d4a2d20eedfaecd21d4f47776b061c0737f564a888bdd16af2b7f8e4ba2051e86b308e5b10544683718739456671ec2a9ca01c64c9f7e951855ad850f6a430e117a3276f75a826b62ebf3be7921f819492645502259b97f13835d07b2f9706a7de66c8df695ccb809f3ec6abc89f7c7a0ed13efa738034f1d0abc4e9e688e7c1a85bdc0a798fd94ed0e51e88247c15ca53ccda653bae2b978618c9902eb1d761758f765ff96c271b0ec628ac758c5ac8d7c9ff1e72b54126ab0010f29aba0b3aa944b72029b236f0a2cc1e0a98de01cd19fbdaa386eac4bd6ff0b627bf508b688617d6777b5128e80d02af58e51d633fb91ae25b13a958da2fd9d9c391a162a6690b693b6913a993b10931a7b67515110e6112320926edc6b72e368f0f98218c52c6b3f594d6ff0022053bce36fd5264d3915aacb181f78148ee8024de50ee07798e3f11fffc11ecf09fb24413925bfb0251c68dad4156aaa493a21b1d23f62d8cb22ba8fc99bd2c780b516ffaabe8322b127f7b4e18570920b32e605219e706b19a484e38d43e8abee1fcdb129a34fdd5ef98a4928a43ebaf46a4c75b8305a1f927c7a87ed668e5d3dd05900719a8fd13b1bcb8b483b46692e2a703120cf387573b360b60f272aa9745f881ac300baade31a0993c12ce748c88978b755ebaa5e3ece60ffc2aaa9dfae7ed12552e4cd19984bef54e62ca12f21c256211995ce6defc55f62e81cdce35b193342065839848468ebe374155393088d2f1a0e13ca4050fdf620a710b85869e8eac4bc39dd7d183dd14b711c247f79891ab7df7c5fb00e1eed56c658c21cca5a1b7ed2d952bcca2b52ed576eb2acbba4980641b75309dd45fb488991473faec0a0e213a2a2e23f15bb465cd04afe471f00c8f4c935463b96d90cf959cc9915af895d23e4384a6cefe12462125c3e59732f27f437c4ba1fd5e0d4db84172aaea2d37e7dc1898064f29ec4316c7a11ba45935270dc18764dc9025147f0454a5588d70a38e8701589535a98c94e443555b2fde0a93f1b306bb3b192915609e5aab10bb088b280e71bd5122be28c230b5c3781bc32d8fc2610fe3b861757ed8d81ac89aee6b6133b0dd1ac7ac6fa879cf45a32eee2c9f2dddff66b7716e31f7054f936acfa2af559fdfb3664ccf2e7a753cc64dfcd62c24eea7fa5866dffad049a6f077c8e1367e16e33c017fc540bcfaa66832584fd4ff3736dd1e417e099c34fc6100f67a2d8492b00768da7560cca2317b1aa743c67cf4d6e7ef8b64ce26b51f3f260ae2b067e5bd661f12c716e5b7117fd7e6c046bd12e5dffd0e570e166398dc4685db3e7e9c678b0b4fa363e5054d054b5add09a44a32f7268600433fac6d1353e1103fed99e357df3e6c892507d4b9df8a8b94389ba1e36d7eca1fa325513642793e91c7a29e60cea46c0110e5ff736c3f0d2d22353965d0f8260e960ebb547f356c2ba3731dc8983c16dc10ba801edaa6e1f3b86fe6e97bba1f193fbec7c7505ef9d77e5f7d99a2c940e3be7f9dda09c88a47924186efb091f66c2962634e1b7c49a8c5a8ad9d49ba30f1edec6f08011024c7157b6cda6a834c94756d8eda8997dce71c45c5f4155f96b73a2506ee", 0x1000, 0x8}], 0x304000, &(0x7f0000001300)={[{@norecovery='norecovery'}, {@jqfmt_vfsold='jqfmt=vfsold'}, {@bsddf='bsddf'}, {@grpquota='grpquota'}, {@minixdf='minixdf'}, {@grpjquota='grpjquota='}], [{@smackfsroot={'smackfsroot', 0x3d, '*($-'}}]}) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:48 executing program 0 (fault-call:11 fault-nth:89): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:48 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x10, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000180)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) 15:28:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x8, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x13, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x21, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2836.680348][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2836.694496][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2836.704808][T31121] FAULT_INJECTION: forcing a failure. [ 2836.704808][T31121] name failslab, interval 1, probability 0, space 0, times 0 [ 2836.717946][T31121] CPU: 0 PID: 31121 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2836.728104][T31121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2836.738145][T31121] Call Trace: [ 2836.741443][T31121] dump_stack+0x14a/0x1ce [ 2836.745754][T31121] ? devkmsg_release+0x11c/0x11c [ 2836.750681][T31121] ? __kernel_text_address+0x93/0x110 [ 2836.756024][T31121] ? show_regs_print_info+0x12/0x12 [ 2836.761191][T31121] ? unwind_get_return_address+0x48/0x90 [ 2836.766811][T31121] ? arch_stack_walk+0xd8/0x120 [ 2836.771699][T31121] should_fail+0x6fb/0x860 [ 2836.776088][T31121] ? setup_fault_attr+0x3d0/0x3d0 [ 2836.781088][T31121] ? stack_trace_save+0x123/0x1f0 [ 2836.786091][T31121] ? stack_trace_snprint+0x150/0x150 [ 2836.791366][T31121] ? __alloc_skb+0x88/0x4d0 [ 2836.795991][T31121] should_failslab+0x5/0x20 [ 2836.800527][T31121] kmem_cache_alloc+0x36/0x260 [ 2836.805268][T31121] __alloc_skb+0x88/0x4d0 [ 2836.809608][T31121] ? __kasan_kmalloc+0x189/0x1c0 [ 2836.814617][T31121] alloc_skb_with_frags+0xb1/0x580 [ 2836.819715][T31121] ? sock_sendpage+0xd0/0x120 [ 2836.824362][T31121] ? pipe_to_sendpage+0x23b/0x300 [ 2836.829369][T31121] ? __splice_from_pipe+0x2d3/0x870 [ 2836.834539][T31121] ? generic_splice_sendpage+0x184/0x210 [ 2836.840842][T31121] ? do_syscall_64+0xcb/0x150 [ 2836.845501][T31121] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2836.851554][T31121] sock_alloc_send_pskb+0x87e/0xcc0 [ 2836.856732][T31121] ? sock_kzfree_s+0x50/0x50 [ 2836.861409][T31121] ? rt_set_nexthop+0x48b/0x1140 [ 2836.866344][T31121] __ip_append_data+0x1fb9/0x3170 [ 2836.871481][T31121] ? ip_do_fragment+0x22c0/0x22c0 [ 2836.876483][T31121] ? inet_rtm_getroute+0x2590/0x2590 [ 2836.882810][T31121] ? ip_setup_cork+0x810/0x810 [ 2836.887592][T31121] ? ip_setup_cork+0x46b/0x810 [ 2836.892351][T31121] ? sock_def_destruct+0x10/0x10 [ 2836.897291][T31121] ip_append_data+0x12c/0x1a0 [ 2836.901958][T31121] ? ip_do_fragment+0x22c0/0x22c0 [ 2836.906964][T31121] udp_sendmsg+0x3ef/0x2f40 [ 2836.911456][T31121] ? ttwu_do_wakeup+0x154/0x5b0 [ 2836.916307][T31121] ? ip_do_fragment+0x22c0/0x22c0 [ 2836.921319][T31121] ? udp_cmsg_send+0x340/0x340 [ 2836.926117][T31121] ? __cgroup_account_cputime+0x2ba/0x2e0 [ 2836.931816][T31121] ? pick_next_task_fair+0x4bf/0x850 [ 2836.937091][T31121] udp_sendpage+0x110/0x5c0 [ 2836.942897][T31121] ? udplite_getfrag+0x70/0x70 [ 2836.947645][T31121] ? mutex_lock+0xa6/0x110 [ 2836.952929][T31121] ? inet_send_prepare+0x1b7/0x470 [ 2836.958116][T31121] ? udplite_getfrag+0x70/0x70 [ 2836.962912][T31121] inet_sendpage+0xd7/0x130 [ 2836.967823][T31121] ? inet_sendmsg+0xc0/0xc0 [ 2836.972423][T31121] sock_sendpage+0xd0/0x120 [ 2836.977172][T31121] pipe_to_sendpage+0x23b/0x300 [ 2836.982014][T31121] ? sock_fasync+0xf0/0xf0 [ 2836.987021][T31121] ? generic_splice_sendpage+0x210/0x210 [ 2836.992864][T31121] __splice_from_pipe+0x2d3/0x870 [ 2836.997872][T31121] ? generic_splice_sendpage+0x210/0x210 [ 2837.003484][T31121] generic_splice_sendpage+0x184/0x210 [ 2837.008934][T31121] ? iter_file_splice_write+0xf60/0xf60 [ 2837.014460][T31121] ? security_file_permission+0x128/0x300 [ 2837.020172][T31121] ? iter_file_splice_write+0xf60/0xf60 [ 2837.025702][T31121] __se_sys_splice+0x7ee/0x1b70 [ 2837.030544][T31121] ? fput_many+0x42/0x1a0 [ 2837.034848][T31121] ? ksys_write+0x25d/0x2c0 [ 2837.039322][T31121] ? file_open_root+0x450/0x450 [ 2837.044172][T31121] ? __x64_sys_splice+0xf0/0xf0 [ 2837.048993][T31121] ? __x64_sys_splice+0x1d/0xf0 [ 2837.053818][T31121] do_syscall_64+0xcb/0x150 [ 2837.058656][T31121] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2837.064545][T31121] RIP: 0033:0x45ca59 [ 2837.068414][T31121] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2837.087993][T31121] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2837.096387][T31121] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2837.104333][T31121] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2837.112275][T31121] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2837.120230][T31121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2837.128792][T31121] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000140), 0x40000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x300, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2837.184826][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2837.195897][ T440] FAT-fs (loop4): Filesystem has been set read-only 15:28:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x2000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1a00, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x2}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2837.289930][T17682] usb 2-1: new high-speed USB device number 25 using dummy_hcd 15:28:49 executing program 0 (fault-call:11 fault-nth:90): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2837.559996][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2837.582459][T31156] FAULT_INJECTION: forcing a failure. [ 2837.582459][T31156] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.599506][T31156] CPU: 1 PID: 31156 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2837.609633][T31156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2837.619678][T31156] Call Trace: [ 2837.623041][T31156] dump_stack+0x14a/0x1ce [ 2837.627361][T31156] ? devkmsg_release+0x11c/0x11c [ 2837.632273][T31156] ? show_regs_print_info+0x12/0x12 [ 2837.637460][T31156] should_fail+0x6fb/0x860 [ 2837.641873][T31156] ? setup_fault_attr+0x3d0/0x3d0 [ 2837.646895][T31156] ? alloc_skb_with_frags+0xb1/0x580 [ 2837.652172][T31156] should_failslab+0x5/0x20 [ 2837.656697][T31156] __kmalloc_track_caller+0x5d/0x2c0 [ 2837.662010][T31156] ? kmem_cache_alloc+0x1d5/0x260 [ 2837.667083][T31156] ? alloc_skb_with_frags+0xb1/0x580 [ 2837.672353][T31156] __alloc_skb+0xd1/0x4d0 [ 2837.676658][T31156] ? __kasan_kmalloc+0x189/0x1c0 [ 2837.681622][T31156] alloc_skb_with_frags+0xb1/0x580 [ 2837.686709][T31156] ? sock_sendpage+0xd0/0x120 [ 2837.691368][T31156] ? pipe_to_sendpage+0x23b/0x300 [ 2837.696468][T31156] ? __splice_from_pipe+0x2d3/0x870 [ 2837.701650][T31156] ? generic_splice_sendpage+0x184/0x210 [ 2837.707260][T31156] ? do_syscall_64+0xcb/0x150 [ 2837.712006][T31156] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2837.718059][T31156] sock_alloc_send_pskb+0x87e/0xcc0 [ 2837.723242][T31156] ? sock_kzfree_s+0x50/0x50 [ 2837.727833][T31156] ? rt_set_nexthop+0x48b/0x1140 [ 2837.732793][T31156] __ip_append_data+0x1fb9/0x3170 [ 2837.737919][T31156] ? ip_do_fragment+0x22c0/0x22c0 [ 2837.742938][T31156] ? inet_rtm_getroute+0x2590/0x2590 [ 2837.748222][T31156] ? ip_setup_cork+0x810/0x810 [ 2837.753054][T31156] ? ip_setup_cork+0x46b/0x810 [ 2837.757799][T31156] ? sock_def_destruct+0x10/0x10 [ 2837.762726][T31156] ip_append_data+0x12c/0x1a0 [ 2837.767395][T31156] ? ip_do_fragment+0x22c0/0x22c0 [ 2837.772406][T31156] udp_sendmsg+0x3ef/0x2f40 [ 2837.776891][T31156] ? update_misfit_status+0x5e0/0x5e0 [ 2837.782251][T31156] ? ip_do_fragment+0x22c0/0x22c0 [ 2837.787366][T31156] ? udp_cmsg_send+0x340/0x340 [ 2837.792750][T31156] ? perf_pmu_sched_task+0x370/0x370 [ 2837.798129][T31156] ? find_next_bit+0xf7/0x120 [ 2837.802789][T31156] ? finish_task_switch+0x2be/0x4c0 [ 2837.808093][T31156] udp_sendpage+0x110/0x5c0 [ 2837.812603][T31156] ? udplite_getfrag+0x70/0x70 [ 2837.817341][T31156] ? mutex_lock+0xa6/0x110 [ 2837.823573][T31156] ? inet_send_prepare+0x1b7/0x470 [ 2837.828671][T31156] ? udplite_getfrag+0x70/0x70 [ 2837.833406][T31156] inet_sendpage+0xd7/0x130 [ 2837.837897][T31156] ? inet_sendmsg+0xc0/0xc0 [ 2837.842372][T31156] sock_sendpage+0xd0/0x120 [ 2837.846871][T31156] pipe_to_sendpage+0x23b/0x300 [ 2837.851710][T31156] ? sock_fasync+0xf0/0xf0 [ 2837.856098][T31156] ? generic_splice_sendpage+0x210/0x210 [ 2837.861719][T31156] __splice_from_pipe+0x2d3/0x870 [ 2837.866724][T31156] ? generic_splice_sendpage+0x210/0x210 [ 2837.872330][T31156] generic_splice_sendpage+0x184/0x210 [ 2837.877764][T31156] ? iter_file_splice_write+0xf60/0xf60 [ 2837.883291][T31156] ? security_file_permission+0x128/0x300 [ 2837.888985][T31156] ? iter_file_splice_write+0xf60/0xf60 [ 2837.894500][T31156] __se_sys_splice+0x7ee/0x1b70 [ 2837.899363][T31156] ? fput_many+0x42/0x1a0 [ 2837.903943][T31156] ? ksys_write+0x25d/0x2c0 [ 2837.908478][T31156] ? file_open_root+0x450/0x450 [ 2837.913340][T31156] ? __x64_sys_splice+0xf0/0xf0 [ 2837.918163][T31156] ? __x64_sys_splice+0x1d/0xf0 [ 2837.922993][T31156] do_syscall_64+0xcb/0x150 [ 2837.927478][T31156] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2837.933356][T31156] RIP: 0033:0x45ca59 [ 2837.937221][T31156] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2837.956797][T31156] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2837.965192][T31156] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2837.973151][T31156] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2837.981110][T31156] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2837.989055][T31156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2837.996998][T31156] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2838.089955][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2838.102703][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2838.111881][T17682] usb 2-1: config 0 descriptor?? [ 2838.569929][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2838.579910][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2838.592054][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2838.598898][T17682] usb 2-1: USB disconnect, device number 25 15:28:51 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 2839.329774][T17682] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2839.569745][T17682] usb 2-1: Using ep0 maxpacket: 8 15:28:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000001200)) add_key$fscrypt_provisioning(&(0x7f0000000140)='fscrypt-provisioning\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)={0x2, 0x0, "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"}, 0x1008, 0xffffffffffffffff) 15:28:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x3}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)={{0x108, 0x81, 0x3f, 0x29f, 0x62f, 0x0, 0xa9, 0x3}, "c9b6370ac51cab7d6683908ebd89b871bea49188be1248d75fe108607124307eda9d0a69093ffa29517dfb1ef56cafbe939e544df49485d51297c55be389f28c21bbd97b23493de655337d95b6d633ac0fbb8f809e8d5b64f6890630b98f4d2a026a4b0100037d9572c2c2b06547f0c3838550dc4a600d2686ee8bbfed2cfed84f4c648c2220e697c2819dbaf19d179eca91c375269a500cfc51eacbe4faff5d903951fcf0666885abaa2aff74974ebbd28ccce48d73d7e4824aa16572", [[], [], [], [], [], [], []]}, 0x7dd) 15:28:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x8000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:51 executing program 0 (fault-call:11 fault-nth:91): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x4}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x5}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x7}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) 15:28:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0xc}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2839.689934][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2839.704581][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.716911][T31191] FAULT_INJECTION: forcing a failure. [ 2839.716911][T31191] name failslab, interval 1, probability 0, space 0, times 0 [ 2839.718370][T17682] usb 2-1: config 0 descriptor?? [ 2839.735949][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2839.744187][T31191] CPU: 0 PID: 31191 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2839.746873][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2839.754609][T31191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2839.754612][T31191] Call Trace: [ 2839.754630][T31191] dump_stack+0x14a/0x1ce [ 2839.754638][T31191] ? devkmsg_release+0x11c/0x11c [ 2839.754646][T31191] ? show_regs_print_info+0x12/0x12 [ 2839.754655][T31191] should_fail+0x6fb/0x860 [ 2839.754667][T31191] ? setup_fault_attr+0x3d0/0x3d0 [ 2839.798325][T31191] ? skb_clone+0x1b2/0x370 [ 2839.802717][T31191] should_failslab+0x5/0x20 [ 2839.807204][T31191] kmem_cache_alloc+0x36/0x260 [ 2839.811941][T31191] skb_clone+0x1b2/0x370 [ 2839.816165][T31191] ip_mc_output+0x1d1/0x9f0 [ 2839.820642][T31191] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2839.826075][T31191] ? nf_hook_slow+0x1a6/0x1f0 [ 2839.830736][T31191] ? __ip_local_out+0x33b/0x470 [ 2839.835569][T31191] ? ip_send_check+0xd0/0xd0 [ 2839.840142][T31191] ? __ip_local_out+0x470/0x470 [ 2839.844963][T31191] ? inet_rtm_getroute+0x2590/0x2590 [ 2839.850336][T31191] ? csum_partial+0x379/0x470 [ 2839.854999][T31191] ? siphash_3u32+0x22/0x240 [ 2839.859573][T31191] ? csum_partial+0x379/0x470 [ 2839.864226][T31191] ip_send_skb+0xaa/0x140 [ 2839.868826][T31191] udp_send_skb+0x8e9/0x1100 [ 2839.873422][T31191] udp_sendpage+0x2f2/0x5c0 [ 2839.877907][T31191] ? udplite_getfrag+0x70/0x70 [ 2839.882648][T31191] ? mutex_lock+0xa6/0x110 [ 2839.887038][T31191] ? inet_send_prepare+0x1b7/0x470 [ 2839.892125][T31191] ? udplite_getfrag+0x70/0x70 [ 2839.896873][T31191] inet_sendpage+0xd7/0x130 [ 2839.901360][T31191] ? inet_sendmsg+0xc0/0xc0 [ 2839.905852][T31191] sock_sendpage+0xd0/0x120 [ 2839.910438][T31191] pipe_to_sendpage+0x23b/0x300 [ 2839.915261][T31191] ? sock_fasync+0xf0/0xf0 [ 2839.919661][T31191] ? generic_splice_sendpage+0x210/0x210 [ 2839.925280][T31191] __splice_from_pipe+0x2d3/0x870 [ 2839.930387][T31191] ? generic_splice_sendpage+0x210/0x210 [ 2839.936947][T31191] generic_splice_sendpage+0x184/0x210 [ 2839.942390][T31191] ? iter_file_splice_write+0xf60/0xf60 [ 2839.947931][T31191] ? security_file_permission+0x128/0x300 [ 2839.954230][T31191] ? iter_file_splice_write+0xf60/0xf60 [ 2839.959758][T31191] __se_sys_splice+0x7ee/0x1b70 [ 2839.964693][T31191] ? fput_many+0x42/0x1a0 [ 2839.969006][T31191] ? ksys_write+0x25d/0x2c0 [ 2839.973483][T31191] ? file_open_root+0x450/0x450 [ 2839.978313][T31191] ? __x64_sys_splice+0xf0/0xf0 [ 2839.983135][T31191] ? __x64_sys_splice+0x1d/0xf0 [ 2839.987956][T31191] do_syscall_64+0xcb/0x150 [ 2839.992434][T31191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2839.998309][T31191] RIP: 0033:0x45ca59 [ 2840.002191][T31191] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2840.021770][T31191] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2840.030170][T31191] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 15:28:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x14}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2840.038112][T31191] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2840.046066][T31191] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2840.054021][T31191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2840.061973][T31191] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2840.309757][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2840.319754][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2840.329291][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2840.338132][T17682] usb 2-1: USB disconnect, device number 26 15:28:53 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 2841.079644][T17682] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2841.319608][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2841.439676][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2841.449491][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2841.458854][T17682] usb 2-1: config 0 descriptor?? [ 2841.719685][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2841.729643][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2841.739245][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2841.747711][T17682] usb 2-1: USB disconnect, device number 27 15:28:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r2) fchdir(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x24ba1dc0}) 15:28:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x15}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0xeffdffff}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:54 executing program 0 (fault-call:11 fault-nth:92): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 15:28:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$batadv(0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x3c, r5, 0x0, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x22b}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20e1}, 0x841) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000023fb35e67fe4613a2108e57ddc06e53e6831c9348343e0892414f5184bfc4d7966ef60848daa317e4e7dad512f51409816d2714fa688715567fbb1d0d9ef9bbec164d721c690a61549a3ebdb761c934dfee1fdce23638de0a3638f26424bf1901f871c4e3fd0b06b3d45c73a5aa702fa83dbb876baf071ccff7bfe3a724aba69e09", @ANYRES16=r5, @ANYBLOB="000225bd7000fddbdf250c00000008000b00ff7f000008003b000700000005003800010000000500380001000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b90cb6974f527cc14538d1efb1ffe03284f6d33265be9c604c893f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) 15:28:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x16}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) 15:28:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x1c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2842.727363][ T440] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2842.737842][T31243] FAULT_INJECTION: forcing a failure. [ 2842.737842][T31243] name failslab, interval 1, probability 0, space 0, times 0 [ 2842.751646][ T440] FAT-fs (loop4): Filesystem has been set read-only [ 2842.761211][T31243] CPU: 0 PID: 31243 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2842.771390][T31243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2842.781431][T31243] Call Trace: [ 2842.784736][T31243] dump_stack+0x14a/0x1ce [ 2842.789077][T31243] ? devkmsg_release+0x11c/0x11c [ 2842.794028][T31243] ? inet_sendpage+0xd7/0x130 [ 2842.798709][T31243] ? show_regs_print_info+0x12/0x12 [ 2842.803883][T31243] should_fail+0x6fb/0x860 [ 2842.808283][T31243] ? setup_fault_attr+0x3d0/0x3d0 [ 2842.813292][T31243] ? dst_alloc+0x137/0x4f0 [ 2842.817685][T31243] should_failslab+0x5/0x20 [ 2842.822175][T31243] kmem_cache_alloc+0x36/0x260 [ 2842.826910][T31243] dst_alloc+0x137/0x4f0 [ 2842.831166][T31243] rt_dst_clone+0x53/0x670 [ 2842.835593][T31243] ip_mc_finish_output+0xad/0x3a0 [ 2842.840653][T31243] ip_mc_output+0x3fb/0x9f0 [ 2842.845178][T31243] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2842.850652][T31243] ? nf_hook_slow+0x1a6/0x1f0 [ 2842.855300][T31243] ? ip_mc_output+0x9f0/0x9f0 [ 2842.859998][T31243] ? ip_send_check+0xd0/0xd0 [ 2842.864558][T31243] ? __ip_local_out+0x470/0x470 [ 2842.869384][T31243] ? inet_rtm_getroute+0x2590/0x2590 [ 2842.874696][T31243] ? csum_partial+0x379/0x470 [ 2842.879378][T31243] ? siphash_3u32+0x22/0x240 [ 2842.883966][T31243] ? csum_partial+0x379/0x470 [ 2842.888661][T31243] ip_send_skb+0xaa/0x140 [ 2842.892963][T31243] udp_send_skb+0x8e9/0x1100 [ 2842.897564][T31243] udp_sendpage+0x2f2/0x5c0 [ 2842.902036][T31243] ? udplite_getfrag+0x70/0x70 [ 2842.906771][T31243] ? mutex_lock+0xa6/0x110 [ 2842.911157][T31243] ? inet_send_prepare+0x1b7/0x470 [ 2842.916264][T31243] ? udplite_getfrag+0x70/0x70 [ 2842.920999][T31243] inet_sendpage+0xd7/0x130 [ 2842.925471][T31243] ? inet_sendmsg+0xc0/0xc0 [ 2842.929944][T31243] sock_sendpage+0xd0/0x120 [ 2842.934440][T31243] pipe_to_sendpage+0x23b/0x300 [ 2842.939261][T31243] ? sock_fasync+0xf0/0xf0 [ 2842.943644][T31243] ? generic_splice_sendpage+0x210/0x210 [ 2842.949257][T31243] __splice_from_pipe+0x2d3/0x870 [ 2842.949496][T17452] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2842.954272][T31243] ? generic_splice_sendpage+0x210/0x210 [ 2842.954283][T31243] generic_splice_sendpage+0x184/0x210 [ 2842.972870][T31243] ? iter_file_splice_write+0xf60/0xf60 [ 2842.978405][T31243] ? security_file_permission+0x128/0x300 [ 2842.984102][T31243] ? iter_file_splice_write+0xf60/0xf60 [ 2842.989628][T31243] __se_sys_splice+0x7ee/0x1b70 [ 2842.994450][T31243] ? fput_many+0x42/0x1a0 [ 2842.998749][T31243] ? ksys_write+0x25d/0x2c0 [ 2843.003237][T31243] ? file_open_root+0x450/0x450 [ 2843.008071][T31243] ? __x64_sys_splice+0xf0/0xf0 [ 2843.012891][T31243] ? __x64_sys_splice+0x1d/0xf0 [ 2843.017727][T31243] do_syscall_64+0xcb/0x150 [ 2843.023157][T31243] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2843.029017][T31243] RIP: 0033:0x45ca59 [ 2843.032883][T31243] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2843.052461][T31243] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2843.060842][T31243] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2843.068785][T31243] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2843.076748][T31243] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2843.084693][T31243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2843.092647][T31243] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:55 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x1d}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:55 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:28:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0xfffffdef}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2843.199543][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2843.260009][T31267] FAULT_INJECTION: forcing a failure. [ 2843.260009][T31267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2843.273316][T31267] CPU: 0 PID: 31267 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2843.283445][T31267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2843.293606][T31267] Call Trace: [ 2843.296883][T31267] dump_stack+0x14a/0x1ce [ 2843.301188][T31267] ? devkmsg_release+0x11c/0x11c [ 2843.306097][T31267] ? show_regs_print_info+0x12/0x12 [ 2843.311442][T31267] ? avc_has_perm+0xd5/0x280 [ 2843.316037][T31267] ? avc_has_perm+0x176/0x280 [ 2843.319522][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2843.320792][T31267] should_fail+0x6fb/0x860 [ 2843.320800][T31267] ? setup_fault_attr+0x3d0/0x3d0 [ 2843.320807][T31267] ? memset+0x1f/0x40 [ 2843.320820][T31267] __alloc_pages_nodemask+0x1ee/0x7c0 [ 2843.330145][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.334302][T31267] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2843.334309][T31267] ? memset+0x1f/0x40 [ 2843.334324][T31267] ? unwind_next_frame+0x1c90/0x2330 [ 2843.354866][T17452] usb 2-1: config 0 descriptor?? [ 2843.356619][T31267] ? __rcu_read_lock+0x50/0x50 [ 2843.356629][T31267] skb_page_frag_refill+0xf9/0x370 [ 2843.356642][T31267] tun_build_skb+0x157/0xbe0 [ 2843.392686][T31267] ? unwind_get_return_address_ptr+0x130/0x130 [ 2843.398863][T31267] ? tun_get_user+0x3440/0x3440 [ 2843.403707][T31267] ? stack_trace_save+0x1f0/0x1f0 [ 2843.409176][T31267] ? __kernel_text_address+0x93/0x110 [ 2843.414533][T31267] ? unwind_get_return_address+0x48/0x90 [ 2843.421112][T31267] ? arch_stack_walk+0xd8/0x120 [ 2843.425952][T31267] tun_get_user+0x610/0x3440 [ 2843.430534][T31267] ? _kstrtoull+0x380/0x490 [ 2843.435136][T31267] ? kstrtouint_from_user+0x22d/0x2b0 [ 2843.440532][T31267] ? tun_do_read+0x1ed0/0x1ed0 [ 2843.445424][T31267] ? __kasan_slab_free+0x1f2/0x230 [ 2843.450555][T31267] ? __rcu_read_lock+0x50/0x50 [ 2843.455309][T31267] ? perf_trace_ext4_da_reserve_space+0x4fa/0x540 [ 2843.461877][T31267] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2843.468448][T31267] ? __rcu_read_lock+0x50/0x50 [ 2843.473193][T31267] ? proc_fail_nth_write+0x18f/0x250 [ 2843.478455][T31267] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2843.483627][T31267] tun_chr_write_iter+0x121/0x1a0 [ 2843.488627][T31267] __vfs_write+0x59d/0x720 [ 2843.493020][T31267] ? __kernel_write+0x340/0x340 [ 2843.497845][T31267] ? avc_policy_seqno+0x17/0x70 [ 2843.502774][T31267] ? security_file_permission+0x128/0x300 [ 2843.509871][T31267] vfs_write+0x217/0x4f0 [ 2843.514114][T31267] ksys_write+0x18c/0x2c0 [ 2843.518438][T31267] ? file_open_root+0x450/0x450 [ 2843.523282][T31267] ? __ia32_sys_read+0x80/0x80 [ 2843.528032][T31267] do_syscall_64+0xcb/0x150 [ 2843.532771][T31267] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2843.538648][T31267] RIP: 0033:0x416591 [ 2843.542532][T31267] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2843.562159][T31267] RSP: 002b:00007f951e945c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2843.570557][T31267] RAX: ffffffffffffffda RBX: 00000000005088a0 RCX: 0000000000416591 [ 2843.578509][T31267] RDX: 0000000000000056 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2843.586576][T31267] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2843.594555][T31267] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 2843.602508][T31267] R13: 0000000000000bdb R14: 00000000004ce2db R15: 00007f951e9466d4 15:28:56 executing program 0 (fault-call:11 fault-nth:93): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2843.619487][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2843.629488][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2843.639164][T17452] asix: probe of 2-1:0.0 failed with error -71 [ 2843.648132][T17452] usb 2-1: USB disconnect, device number 28 [ 2843.730188][T31278] FAULT_INJECTION: forcing a failure. [ 2843.730188][T31278] name failslab, interval 1, probability 0, space 0, times 0 [ 2843.742819][T31278] CPU: 1 PID: 31278 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2843.752993][T31278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2843.763128][T31278] Call Trace: [ 2843.766412][T31278] dump_stack+0x14a/0x1ce [ 2843.770810][T31278] ? devkmsg_release+0x11c/0x11c [ 2843.775724][T31278] ? __kmalloc_track_caller+0x201/0x2c0 [ 2843.781265][T31278] ? show_regs_print_info+0x12/0x12 [ 2843.786622][T31278] ? __ip_append_data+0x1fb9/0x3170 [ 2843.791817][T31278] ? udp_sendmsg+0x3ef/0x2f40 [ 2843.796481][T31278] ? memset+0x1f/0x40 [ 2843.800536][T31278] should_fail+0x6fb/0x860 [ 2843.804997][T31278] ? setup_fault_attr+0x3d0/0x3d0 [ 2843.809997][T31278] ? arch_stack_walk+0xb8/0x120 [ 2843.814845][T31278] ? skb_clone+0x1b2/0x370 [ 2843.819249][T31278] should_failslab+0x5/0x20 [ 2843.824075][T31278] kmem_cache_alloc+0x36/0x260 [ 2843.828812][T31278] skb_clone+0x1b2/0x370 [ 2843.833047][T31278] dev_queue_xmit_nit+0x279/0x9e0 [ 2843.838068][T31278] ? validate_xmit_skb+0x630/0xc60 [ 2843.843175][T31278] xmit_one+0x7b/0x460 [ 2843.847232][T31278] dev_hard_start_xmit+0xac/0x1b0 [ 2843.852317][T31278] sch_direct_xmit+0x23b/0x970 [ 2843.857320][T31278] ? nvmem_get_mac_address+0x310/0x310 [ 2843.862811][T31278] ? stack_trace_save+0x123/0x1f0 [ 2843.867862][T31278] __qdisc_run+0x245/0x420 [ 2843.872293][T31278] ? sch_direct_xmit+0x970/0x970 [ 2843.877202][T31278] ? pfifo_fast_enqueue+0x36e/0x580 [ 2843.882374][T31278] __dev_queue_xmit+0x11fa/0x2680 [ 2843.887376][T31278] ? dev_queue_xmit+0x20/0x20 [ 2843.892032][T31278] ? ip_finish_output2+0x936/0x1810 [ 2843.897222][T31278] ip_finish_output2+0xbdf/0x1810 [ 2843.902273][T31278] ? ip_fragment+0x210/0x210 [ 2843.906847][T31278] ? __ip_finish_output+0x4e1/0x6d0 [ 2843.912052][T31278] ip_mc_output+0x8b5/0x9f0 [ 2843.916532][T31278] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2843.921970][T31278] ? nf_hook_slow+0x1a6/0x1f0 [ 2843.926626][T31278] ? ip_mc_output+0x9f0/0x9f0 [ 2843.931282][T31278] ? ip_send_check+0xd0/0xd0 [ 2843.935886][T31278] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2843.941189][T31278] ? inet_rtm_getroute+0x2590/0x2590 [ 2843.946445][T31278] ? csum_partial+0x379/0x470 [ 2843.951094][T31278] ? siphash_3u32+0x22/0x240 [ 2843.955702][T31278] ? csum_partial+0x379/0x470 [ 2843.960490][T31278] ip_send_skb+0xaa/0x140 [ 2843.964832][T31278] udp_send_skb+0x8e9/0x1100 [ 2843.969416][T31278] udp_sendpage+0x2f2/0x5c0 [ 2843.973896][T31278] ? udplite_getfrag+0x70/0x70 [ 2843.978645][T31278] ? mutex_lock+0xa6/0x110 [ 2843.983034][T31278] ? inet_send_prepare+0x1b7/0x470 [ 2843.988129][T31278] ? udplite_getfrag+0x70/0x70 [ 2843.992879][T31278] inet_sendpage+0xd7/0x130 [ 2843.997355][T31278] ? inet_sendmsg+0xc0/0xc0 [ 2844.001834][T31278] sock_sendpage+0xd0/0x120 [ 2844.006328][T31278] pipe_to_sendpage+0x23b/0x300 [ 2844.011181][T31278] ? sock_fasync+0xf0/0xf0 [ 2844.015597][T31278] ? generic_splice_sendpage+0x210/0x210 [ 2844.021216][T31278] __splice_from_pipe+0x2d3/0x870 [ 2844.026224][T31278] ? generic_splice_sendpage+0x210/0x210 [ 2844.031834][T31278] generic_splice_sendpage+0x184/0x210 [ 2844.037306][T31278] ? iter_file_splice_write+0xf60/0xf60 [ 2844.042864][T31278] ? security_file_permission+0x128/0x300 [ 2844.048554][T31278] ? iter_file_splice_write+0xf60/0xf60 [ 2844.054071][T31278] __se_sys_splice+0x7ee/0x1b70 [ 2844.058896][T31278] ? fput_many+0x42/0x1a0 [ 2844.063215][T31278] ? ksys_write+0x25d/0x2c0 [ 2844.067688][T31278] ? file_open_root+0x450/0x450 [ 2844.072510][T31278] ? __x64_sys_splice+0xf0/0xf0 [ 2844.077333][T31278] ? __x64_sys_splice+0x1d/0xf0 [ 2844.082184][T31278] do_syscall_64+0xcb/0x150 [ 2844.086661][T31278] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2844.092558][T31278] RIP: 0033:0x45ca59 [ 2844.096435][T31278] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2844.116606][T31278] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2844.124990][T31278] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2844.133233][T31278] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2844.141185][T31278] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2844.149135][T31278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2844.157102][T31278] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:28:56 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:56 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x21}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:56 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:28:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0xffffff7f}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:56 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x24}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:56 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x25}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:56 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:56 executing program 0 (fault-call:11 fault-nth:94): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:56 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) [ 2844.535311][T31288] FAULT_INJECTION: forcing a failure. [ 2844.535311][T31288] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.550186][T31288] CPU: 1 PID: 31288 Comm: syz-executor.4 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2844.560483][T31288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.570538][T31288] Call Trace: [ 2844.573828][T31288] dump_stack+0x14a/0x1ce [ 2844.578131][T31288] ? devkmsg_release+0x11c/0x11c [ 2844.583046][T31288] ? show_regs_print_info+0x12/0x12 [ 2844.588224][T31288] should_fail+0x6fb/0x860 [ 2844.592978][T31288] ? setup_fault_attr+0x3d0/0x3d0 [ 2844.597994][T31288] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 2844.603527][T31288] ? build_skb+0x29/0x450 [ 2844.607849][T31288] should_failslab+0x5/0x20 [ 2844.612433][T31288] kmem_cache_alloc+0x36/0x260 [ 2844.617182][T31288] ? copy_page_from_iter+0x3f3/0x660 [ 2844.622768][T31288] build_skb+0x29/0x450 [ 2844.626916][T31288] tun_build_skb+0x47b/0xbe0 [ 2844.631488][T31288] ? tun_get_user+0x3440/0x3440 [ 2844.636424][T31288] ? stack_trace_save+0x1f0/0x1f0 [ 2844.641447][T31288] ? __kernel_text_address+0x93/0x110 [ 2844.646798][T31288] ? unwind_get_return_address+0x48/0x90 [ 2844.652415][T31288] ? arch_stack_walk+0xd8/0x120 [ 2844.657263][T31288] tun_get_user+0x610/0x3440 [ 2844.661941][T31288] ? _kstrtoull+0x380/0x490 [ 2844.666583][T31288] ? kstrtouint_from_user+0x22d/0x2b0 [ 2844.671940][T31288] ? tun_do_read+0x1ed0/0x1ed0 [ 2844.676772][T31288] ? __kasan_slab_free+0x1f2/0x230 [ 2844.681862][T31288] ? __rcu_read_lock+0x50/0x50 [ 2844.686601][T31288] ? perf_trace_ext4_da_reserve_space+0x4fa/0x540 [ 2844.693014][T31288] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2844.699059][T31288] ? __rcu_read_lock+0x50/0x50 [ 2844.703813][T31288] ? proc_fail_nth_write+0x18f/0x250 [ 2844.709084][T31288] ? proc_fail_nth_read+0x1d0/0x1d0 [ 2844.714277][T31288] tun_chr_write_iter+0x121/0x1a0 [ 2844.719431][T31288] __vfs_write+0x59d/0x720 [ 2844.723860][T31288] ? __kernel_write+0x340/0x340 [ 2844.728708][T31288] ? avc_policy_seqno+0x17/0x70 [ 2844.733539][T31288] ? security_file_permission+0x128/0x300 [ 2844.739243][T31288] vfs_write+0x217/0x4f0 [ 2844.743478][T31288] ksys_write+0x18c/0x2c0 [ 2844.747783][T31288] ? file_open_root+0x450/0x450 [ 2844.752605][T31288] ? __ia32_sys_read+0x80/0x80 [ 2844.757360][T31288] do_syscall_64+0xcb/0x150 [ 2844.761842][T31288] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2844.767712][T31288] RIP: 0033:0x416591 [ 2844.771582][T31288] Code: 75 14 b8 01 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 c4 1b 00 00 c3 48 83 ec 08 e8 ca fc ff ff 48 89 04 24 b8 01 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 13 fd ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 2844.791507][T31288] RSP: 002b:00007f951e945c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2844.799892][T31288] RAX: ffffffffffffffda RBX: 00000000005088a0 RCX: 0000000000416591 [ 2844.807839][T31288] RDX: 0000000000000056 RSI: 0000000020000080 RDI: 00000000000000f0 [ 2844.815789][T31288] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2844.823743][T31288] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000005 [ 2844.831688][T31288] R13: 0000000000000bdb R14: 00000000004ce2db R15: 00007f951e9466d4 [ 2844.848186][T31311] FAULT_INJECTION: forcing a failure. [ 2844.848186][T31311] name failslab, interval 1, probability 0, space 0, times 0 [ 2844.860830][T31311] CPU: 0 PID: 31311 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2844.870958][T31311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2844.880988][T31311] Call Trace: [ 2844.884257][T31311] dump_stack+0x14a/0x1ce [ 2844.888561][T31311] ? devkmsg_release+0x11c/0x11c [ 2844.893488][T31311] ? __kmalloc_track_caller+0x201/0x2c0 [ 2844.899026][T31311] ? show_regs_print_info+0x12/0x12 [ 2844.904206][T31311] ? __ip_append_data+0x1fb9/0x3170 [ 2844.909391][T31311] ? udp_sendmsg+0x3ef/0x2f40 [ 2844.914068][T31311] ? memset+0x1f/0x40 [ 2844.918033][T31311] should_fail+0x6fb/0x860 [ 2844.922448][T31311] ? setup_fault_attr+0x3d0/0x3d0 [ 2844.927455][T31311] ? arch_stack_walk+0xb8/0x120 [ 2844.932282][T31311] ? skb_clone+0x1b2/0x370 [ 2844.936684][T31311] should_failslab+0x5/0x20 [ 2844.941166][T31311] kmem_cache_alloc+0x36/0x260 [ 2844.945924][T31311] skb_clone+0x1b2/0x370 [ 2844.950145][T31311] dev_queue_xmit_nit+0x279/0x9e0 [ 2844.955150][T31311] ? validate_xmit_skb+0x630/0xc60 [ 2844.960245][T31311] xmit_one+0x7b/0x460 [ 2844.964311][T31311] dev_hard_start_xmit+0xac/0x1b0 [ 2844.969338][T31311] sch_direct_xmit+0x23b/0x970 [ 2844.974079][T31311] ? nvmem_get_mac_address+0x310/0x310 [ 2844.979512][T31311] ? stack_trace_save+0x123/0x1f0 [ 2844.984509][T31311] __qdisc_run+0x245/0x420 [ 2844.988899][T31311] ? sch_direct_xmit+0x970/0x970 [ 2844.993808][T31311] ? pfifo_fast_enqueue+0x36e/0x580 [ 2844.998983][T31311] __dev_queue_xmit+0x11fa/0x2680 [ 2845.004008][T31311] ? dev_queue_xmit+0x20/0x20 [ 2845.008688][T31311] ? ip_finish_output2+0x936/0x1810 [ 2845.013869][T31311] ip_finish_output2+0xbdf/0x1810 [ 2845.018893][T31311] ? ip_fragment+0x210/0x210 [ 2845.023477][T31311] ? __ip_finish_output+0x4e1/0x6d0 [ 2845.028652][T31311] ip_mc_output+0x8b5/0x9f0 [ 2845.033134][T31311] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2845.038595][T31311] ? nf_hook_slow+0x1a6/0x1f0 [ 2845.043268][T31311] ? ip_mc_output+0x9f0/0x9f0 [ 2845.047924][T31311] ? ip_send_check+0xd0/0xd0 [ 2845.052495][T31311] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2845.057780][T31311] ? inet_rtm_getroute+0x2590/0x2590 [ 2845.063046][T31311] ? csum_partial+0x379/0x470 [ 2845.067695][T31311] ? siphash_3u32+0x22/0x240 [ 2845.072267][T31311] ? csum_partial+0x379/0x470 [ 2845.076930][T31311] ip_send_skb+0xaa/0x140 [ 2845.081245][T31311] udp_send_skb+0x8e9/0x1100 [ 2845.085821][T31311] udp_sendpage+0x2f2/0x5c0 [ 2845.090314][T31311] ? udplite_getfrag+0x70/0x70 [ 2845.095061][T31311] ? mutex_lock+0xa6/0x110 [ 2845.099457][T31311] ? inet_send_prepare+0x1b7/0x470 [ 2845.104583][T31311] ? udplite_getfrag+0x70/0x70 [ 2845.109327][T31311] inet_sendpage+0xd7/0x130 [ 2845.113824][T31311] ? inet_sendmsg+0xc0/0xc0 [ 2845.118341][T31311] sock_sendpage+0xd0/0x120 [ 2845.122850][T31311] pipe_to_sendpage+0x23b/0x300 [ 2845.127695][T31311] ? sock_fasync+0xf0/0xf0 [ 2845.132088][T31311] ? generic_splice_sendpage+0x210/0x210 [ 2845.137694][T31311] __splice_from_pipe+0x2d3/0x870 [ 2845.142715][T31311] ? generic_splice_sendpage+0x210/0x210 [ 2845.148327][T31311] generic_splice_sendpage+0x184/0x210 [ 2845.153761][T31311] ? iter_file_splice_write+0xf60/0xf60 [ 2845.159294][T31311] ? security_file_permission+0x128/0x300 [ 2845.164992][T31311] ? iter_file_splice_write+0xf60/0xf60 [ 2845.170510][T31311] __se_sys_splice+0x7ee/0x1b70 [ 2845.175336][T31311] ? fput_many+0x42/0x1a0 [ 2845.179662][T31311] ? ksys_write+0x25d/0x2c0 [ 2845.184161][T31311] ? __x64_sys_splice+0xf0/0xf0 [ 2845.189007][T31311] ? __x64_sys_splice+0x1d/0xf0 [ 2845.193831][T31311] do_syscall_64+0xcb/0x150 [ 2845.198311][T31311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2845.204184][T31311] RIP: 0033:0x45ca59 [ 2845.208074][T31311] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2845.227653][T31311] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2845.236056][T31311] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2845.244003][T31311] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2845.251953][T31311] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2845.259906][T31311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2845.267860][T31311] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2845.429307][T17682] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2845.669282][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2845.789410][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2845.798565][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.807652][T17682] usb 2-1: config 0 descriptor?? [ 2846.069337][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2846.079297][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2846.088806][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2846.095869][T17682] usb 2-1: USB disconnect, device number 29 15:28:58 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:28:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x28}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:58 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:58 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:28:58 executing program 0 (fault-call:11 fault-nth:95): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:28:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x4000000000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:28:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x2c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:58 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x2d}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x30}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:28:58 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:28:58 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) [ 2846.625101][T31350] FAULT_INJECTION: forcing a failure. [ 2846.625101][T31350] name failslab, interval 1, probability 0, space 0, times 0 [ 2846.637819][T31350] CPU: 1 PID: 31350 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2846.647955][T31350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2846.658064][T31350] Call Trace: [ 2846.661383][T31350] dump_stack+0x14a/0x1ce [ 2846.665703][T31350] ? devkmsg_release+0x11c/0x11c [ 2846.670640][T31350] ? show_regs_print_info+0x12/0x12 [ 2846.675825][T31350] ? selinux_socket_sock_rcv_skb+0x239/0xcd0 [ 2846.681796][T31350] should_fail+0x6fb/0x860 [ 2846.686200][T31350] ? setup_fault_attr+0x3d0/0x3d0 [ 2846.691214][T31350] ? sch_direct_xmit+0x23b/0x970 [ 2846.696130][T31350] ? __qdisc_run+0x245/0x420 [ 2846.700698][T31350] ? __dev_queue_xmit+0x11fa/0x2680 [ 2846.705877][T31350] ? ip_finish_output2+0xbdf/0x1810 [ 2846.711062][T31350] ? ip_mc_output+0x8b5/0x9f0 [ 2846.715819][T31350] ? udp_send_skb+0x8e9/0x1100 [ 2846.720563][T31350] ? udp_sendpage+0x2f2/0x5c0 [ 2846.725230][T31350] ? inet_sendpage+0xd7/0x130 [ 2846.729892][T31350] ? sock_sendpage+0xd0/0x120 [ 2846.734554][T31350] ? ___pskb_trim+0x19d/0xfa0 [ 2846.739215][T31350] should_failslab+0x5/0x20 [ 2846.743700][T31350] __kmalloc_track_caller+0x5d/0x2c0 [ 2846.748965][T31350] ? ___pskb_trim+0x19d/0xfa0 [ 2846.753680][T31350] pskb_expand_head+0x10d/0xfb0 [ 2846.758512][T31350] ? memcpy+0x38/0x50 [ 2846.762529][T31350] ___pskb_trim+0x19d/0xfa0 [ 2846.767015][T31350] sk_filter_trim_cap+0x2bc/0x420 [ 2846.772028][T31350] sock_queue_rcv_skb+0x1f/0x50 [ 2846.777007][T31350] packet_rcv_spkt+0x36b/0x490 [ 2846.781799][T31350] ? packet_rcv+0x1410/0x1410 [ 2846.786458][T31350] dev_queue_xmit_nit+0x36c/0x9e0 [ 2846.791467][T31350] xmit_one+0x7b/0x460 [ 2846.795520][T31350] dev_hard_start_xmit+0xac/0x1b0 [ 2846.800523][T31350] sch_direct_xmit+0x23b/0x970 [ 2846.805302][T31350] ? nvmem_get_mac_address+0x310/0x310 [ 2846.810740][T31350] ? stack_trace_save+0x123/0x1f0 [ 2846.815745][T31350] __qdisc_run+0x245/0x420 [ 2846.820142][T31350] ? sch_direct_xmit+0x970/0x970 [ 2846.825124][T31350] ? pfifo_fast_enqueue+0x36e/0x580 [ 2846.830304][T31350] __dev_queue_xmit+0x11fa/0x2680 [ 2846.835323][T31350] ? dev_queue_xmit+0x20/0x20 [ 2846.839197][T17682] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2846.839996][T31350] ? ip_finish_output2+0x936/0x1810 [ 2846.840009][T31350] ip_finish_output2+0xbdf/0x1810 [ 2846.857751][T31350] ? ip_fragment+0x210/0x210 [ 2846.862335][T31350] ? __ip_finish_output+0x4e1/0x6d0 [ 2846.867513][T31350] ip_mc_output+0x8b5/0x9f0 [ 2846.872000][T31350] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2846.877440][T31350] ? nf_hook_slow+0x1a6/0x1f0 [ 2846.882098][T31350] ? ip_mc_output+0x9f0/0x9f0 [ 2846.886764][T31350] ? ip_send_check+0xd0/0xd0 [ 2846.891346][T31350] ? ip_mc_finish_output+0x3a0/0x3a0 [ 2846.896616][T31350] ? inet_rtm_getroute+0x2590/0x2590 [ 2846.901892][T31350] ? csum_partial+0x379/0x470 [ 2846.906558][T31350] ? siphash_3u32+0x22/0x240 [ 2846.911136][T31350] ? csum_partial+0x379/0x470 [ 2846.915799][T31350] ip_send_skb+0xaa/0x140 [ 2846.920114][T31350] udp_send_skb+0x8e9/0x1100 [ 2846.924976][T31350] udp_sendpage+0x2f2/0x5c0 [ 2846.929462][T31350] ? udplite_getfrag+0x70/0x70 [ 2846.934267][T31350] ? mutex_lock+0xa6/0x110 [ 2846.938670][T31350] ? inet_send_prepare+0x1b7/0x470 [ 2846.943764][T31350] ? udplite_getfrag+0x70/0x70 [ 2846.948510][T31350] inet_sendpage+0xd7/0x130 [ 2846.953035][T31350] ? inet_sendmsg+0xc0/0xc0 [ 2846.957521][T31350] sock_sendpage+0xd0/0x120 [ 2846.962010][T31350] pipe_to_sendpage+0x23b/0x300 [ 2846.966844][T31350] ? sock_fasync+0xf0/0xf0 [ 2846.971242][T31350] ? generic_splice_sendpage+0x210/0x210 [ 2846.976993][T31350] __splice_from_pipe+0x2d3/0x870 [ 2846.982012][T31350] ? generic_splice_sendpage+0x210/0x210 [ 2846.987624][T31350] generic_splice_sendpage+0x184/0x210 [ 2846.993066][T31350] ? iter_file_splice_write+0xf60/0xf60 [ 2846.998597][T31350] ? security_file_permission+0x128/0x300 [ 2847.004299][T31350] ? iter_file_splice_write+0xf60/0xf60 [ 2847.009826][T31350] __se_sys_splice+0x7ee/0x1b70 [ 2847.014693][T31350] ? fput_many+0x42/0x1a0 [ 2847.019011][T31350] ? ksys_write+0x25d/0x2c0 [ 2847.023501][T31350] ? file_open_root+0x450/0x450 [ 2847.028386][T31350] ? __x64_sys_splice+0xf0/0xf0 [ 2847.033229][T31350] ? __x64_sys_splice+0x1d/0xf0 [ 2847.038067][T31350] do_syscall_64+0xcb/0x150 [ 2847.042571][T31350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2847.048755][T31350] RIP: 0033:0x45ca59 [ 2847.052641][T31350] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2847.072570][T31350] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2847.079247][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2847.081159][T31350] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2847.081163][T31350] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2847.081168][T31350] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2847.081172][T31350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2847.081177][T31350] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2847.239265][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2847.248508][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.257838][T17682] usb 2-1: config 0 descriptor?? [ 2847.519326][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2847.529720][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2847.541371][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2847.548956][T17682] usb 2-1: USB disconnect, device number 30 15:29:00 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) 15:29:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x34}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x56, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:29:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x100000000000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:29:00 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:29:00 executing program 0 (fault-call:11 fault-nth:96): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:29:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, 0x0, 0x0) 15:29:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x35}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, 0x0, 0x0) 15:29:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x3c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, 0x0, 0x0) 15:29:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x3d}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, 0x0}, 0x10) 15:29:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x44}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2848.075631][T31389] FAULT_INJECTION: forcing a failure. [ 2848.075631][T31389] name failslab, interval 1, probability 0, space 0, times 0 [ 2848.091111][T31389] CPU: 0 PID: 31389 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2848.101435][T31389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2848.111658][T31389] Call Trace: [ 2848.115042][T31389] dump_stack+0x14a/0x1ce [ 2848.119632][T31389] ? devkmsg_release+0x11c/0x11c [ 2848.124968][T31389] ? show_regs_print_info+0x12/0x12 [ 2848.130349][T31389] ? stack_trace_save+0x123/0x1f0 [ 2848.135417][T31389] should_fail+0x6fb/0x860 [ 2848.139823][T31389] ? setup_fault_attr+0x3d0/0x3d0 [ 2848.145045][T31389] ? dst_alloc+0x137/0x4f0 [ 2848.149460][T31389] should_failslab+0x5/0x20 [ 2848.154038][T31389] kmem_cache_alloc+0x36/0x260 [ 2848.158794][T31389] dst_alloc+0x137/0x4f0 [ 2848.163122][T31389] ? __dev_queue_xmit+0x1501/0x2680 [ 2848.168311][T31389] ip_route_output_key_hash_rcu+0xea5/0x2230 [ 2848.174406][T31389] ? ip_route_output_key_hash+0x220/0x220 [ 2848.180117][T31389] ip_route_output_flow+0x150/0x2a0 [ 2848.185503][T31389] ? ipv4_sk_update_pmtu+0x1ce0/0x1ce0 [ 2848.190970][T31389] ? __rcu_read_lock+0x50/0x50 [ 2848.195852][T31389] ? selinux_sk_getsecid+0x24/0xb0 [ 2848.200953][T31389] udp_sendmsg+0x1803/0x2f40 [ 2848.205537][T31389] ? ttwu_do_wakeup+0x154/0x5b0 [ 2848.210613][T31389] ? ip_do_fragment+0x22c0/0x22c0 [ 2848.215731][T31389] ? udp_cmsg_send+0x340/0x340 [ 2848.220487][T31389] ? __cgroup_account_cputime+0x2ba/0x2e0 [ 2848.226196][T31389] ? pick_next_task_fair+0x4bf/0x850 [ 2848.231499][T31389] udp_sendpage+0x110/0x5c0 [ 2848.236101][T31389] ? udplite_getfrag+0x70/0x70 [ 2848.240925][T31389] ? mutex_lock+0xa6/0x110 [ 2848.245327][T31389] ? inet_send_prepare+0x1b7/0x470 [ 2848.250438][T31389] ? udplite_getfrag+0x70/0x70 [ 2848.255266][T31389] inet_sendpage+0xd7/0x130 [ 2848.259758][T31389] ? inet_sendmsg+0xc0/0xc0 [ 2848.264250][T31389] sock_sendpage+0xd0/0x120 [ 2848.268739][T31389] pipe_to_sendpage+0x23b/0x300 [ 2848.273574][T31389] ? sock_fasync+0xf0/0xf0 [ 2848.278131][T31389] ? generic_splice_sendpage+0x210/0x210 [ 2848.283764][T31389] __splice_from_pipe+0x2d3/0x870 [ 2848.288844][T31389] ? generic_splice_sendpage+0x210/0x210 [ 2848.294577][T31389] generic_splice_sendpage+0x184/0x210 [ 2848.300027][T31389] ? iter_file_splice_write+0xf60/0xf60 [ 2848.305562][T31389] ? security_file_permission+0x128/0x300 [ 2848.311273][T31389] ? iter_file_splice_write+0xf60/0xf60 [ 2848.316804][T31389] __se_sys_splice+0x7ee/0x1b70 [ 2848.321645][T31389] ? fput_many+0x42/0x1a0 [ 2848.325980][T31389] ? ksys_write+0x25d/0x2c0 [ 2848.330469][T31389] ? __x64_sys_splice+0xf0/0xf0 [ 2848.335383][T31389] ? __x64_sys_splice+0x1d/0xf0 [ 2848.340222][T31389] do_syscall_64+0xcb/0x150 [ 2848.344976][T31389] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2848.350885][T31389] RIP: 0033:0x45ca59 [ 2848.354774][T31389] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2848.379206][T31389] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2848.387627][T31389] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2848.395715][T31389] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2848.403678][T31389] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2848.411644][T31389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 15:29:00 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0xe, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) [ 2848.419715][T31389] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:29:00 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x200000000000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) [ 2848.579205][T17682] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2848.829107][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2848.959182][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2848.968411][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2848.978014][T17682] usb 2-1: config 0 descriptor?? [ 2849.239128][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2849.249251][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 2849.260575][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2849.267535][T17682] usb 2-1: USB disconnect, device number 31 15:29:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x45}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, 0x0}, 0x10) 15:29:02 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x96, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:29:02 executing program 0 (fault-call:11 fault-nth:97): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:29:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x0, 0x99, "e747dc77ab4960962e5f45d1eb027781cdac37265b26b42ba0a57788cfa6eace68f11f73acaaaad980291a58254783f6c273c237c6512274aee704b0d9ddb8a2cfd61372c4fa713ac84581a546ed887b37e68ea8d55e59de46ccfffdb714f66bb3d631d3a1617b165ced714d11460dd4d900b2247a62c464cc9b32e9a2f8920092dc31d9b0fa6352a7efe87efa9657779e944d8ae608da76d5"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:29:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0x800000000000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:29:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x48}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, 0x0}, 0x10) 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) 15:29:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x4c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) 15:29:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x4d}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x0, &(0x7f0000000400)}, 0x10) 15:29:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x50}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2849.785909][T31450] FAULT_INJECTION: forcing a failure. [ 2849.785909][T31450] name failslab, interval 1, probability 0, space 0, times 0 [ 2849.799395][T31450] CPU: 0 PID: 31450 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2849.809563][T31450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2849.819952][T31450] Call Trace: [ 2849.823231][T31450] dump_stack+0x14a/0x1ce [ 2849.827696][T31450] ? devkmsg_release+0x11c/0x11c [ 2849.832617][T31450] ? __kernel_text_address+0x93/0x110 [ 2849.837976][T31450] ? show_regs_print_info+0x12/0x12 [ 2849.843161][T31450] ? unwind_get_return_address+0x48/0x90 [ 2849.848777][T31450] ? arch_stack_walk+0xd8/0x120 [ 2849.853613][T31450] should_fail+0x6fb/0x860 [ 2849.858141][T31450] ? setup_fault_attr+0x3d0/0x3d0 [ 2849.863293][T31450] ? stack_trace_save+0x123/0x1f0 [ 2849.868309][T31450] ? stack_trace_snprint+0x150/0x150 [ 2849.873586][T31450] ? __alloc_skb+0x88/0x4d0 [ 2849.878075][T31450] should_failslab+0x5/0x20 [ 2849.882563][T31450] kmem_cache_alloc+0x36/0x260 [ 2849.887315][T31450] __alloc_skb+0x88/0x4d0 [ 2849.891633][T31450] ? __kasan_kmalloc+0x189/0x1c0 [ 2849.896671][T31450] alloc_skb_with_frags+0xb1/0x580 [ 2849.901946][T31450] ? sock_sendpage+0xd0/0x120 [ 2849.906706][T31450] ? pipe_to_sendpage+0x23b/0x300 [ 2849.911762][T31450] ? __splice_from_pipe+0x2d3/0x870 [ 2849.916963][T31450] ? generic_splice_sendpage+0x184/0x210 [ 2849.922699][T31450] ? do_syscall_64+0xcb/0x150 [ 2849.927370][T31450] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2849.933425][T31450] sock_alloc_send_pskb+0x87e/0xcc0 [ 2849.938611][T31450] ? sock_kzfree_s+0x50/0x50 [ 2849.943188][T31450] ? rt_set_nexthop+0x48b/0x1140 [ 2849.948113][T31450] __ip_append_data+0x1fb9/0x3170 [ 2849.953134][T31450] ? ip_do_fragment+0x22c0/0x22c0 [ 2849.958541][T31450] ? inet_rtm_getroute+0x2590/0x2590 [ 2849.963828][T31450] ? ip_setup_cork+0x810/0x810 [ 2849.968582][T31450] ? ip_setup_cork+0x46b/0x810 [ 2849.976122][T31450] ? sock_def_destruct+0x10/0x10 [ 2849.981092][T31450] ip_append_data+0x12c/0x1a0 [ 2849.985763][T31450] ? ip_do_fragment+0x22c0/0x22c0 [ 2849.990774][T31450] udp_sendmsg+0x3ef/0x2f40 [ 2849.995268][T31450] ? ip_do_fragment+0x22c0/0x22c0 [ 2850.000405][T31450] ? udp_cmsg_send+0x340/0x340 [ 2850.005158][T31450] ? perf_pmu_sched_task+0x370/0x370 [ 2850.010430][T31450] ? finish_task_switch+0x2be/0x4c0 [ 2850.015622][T31450] udp_sendpage+0x110/0x5c0 [ 2850.020232][T31450] ? udplite_getfrag+0x70/0x70 [ 2850.025001][T31450] ? mutex_lock+0xa6/0x110 [ 2850.029503][T31450] ? inet_send_prepare+0x1b7/0x470 [ 2850.034598][T31450] ? udplite_getfrag+0x70/0x70 [ 2850.039345][T31450] inet_sendpage+0xd7/0x130 [ 2850.043837][T31450] ? inet_sendmsg+0xc0/0xc0 [ 2850.048328][T31450] sock_sendpage+0xd0/0x120 [ 2850.052823][T31450] pipe_to_sendpage+0x23b/0x300 [ 2850.057825][T31450] ? sock_fasync+0xf0/0xf0 [ 2850.062244][T31450] ? generic_splice_sendpage+0x210/0x210 [ 2850.067875][T31450] __splice_from_pipe+0x2d3/0x870 [ 2850.072889][T31450] ? generic_splice_sendpage+0x210/0x210 [ 2850.078640][T31450] generic_splice_sendpage+0x184/0x210 [ 2850.084088][T31450] ? iter_file_splice_write+0xf60/0xf60 [ 2850.089624][T31450] ? security_file_permission+0x128/0x300 [ 2850.095325][T31450] ? iter_file_splice_write+0xf60/0xf60 [ 2850.100863][T31450] __se_sys_splice+0x7ee/0x1b70 [ 2850.105701][T31450] ? fput_many+0x42/0x1a0 [ 2850.110024][T31450] ? ksys_write+0x25d/0x2c0 [ 2850.114518][T31450] ? __x64_sys_splice+0xf0/0xf0 [ 2850.119351][T31450] ? __x64_sys_splice+0x1d/0xf0 [ 2850.124184][T31450] do_syscall_64+0xcb/0x150 [ 2850.128678][T31450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2850.134673][T31450] RIP: 0033:0x45ca59 [ 2850.138672][T31450] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2850.158384][T31450] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2850.166850][T31450] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2850.174957][T31450] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2850.182918][T31450] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2850.190992][T31450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2850.199168][T31450] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 15:29:02 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) [ 2850.358962][T17682] usb 2-1: new high-speed USB device number 32 using dummy_hcd 15:29:02 executing program 0 (fault-call:11 fault-nth:98): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) [ 2850.598974][T17682] usb 2-1: Using ep0 maxpacket: 8 [ 2850.640498][T31464] FAULT_INJECTION: forcing a failure. [ 2850.640498][T31464] name failslab, interval 1, probability 0, space 0, times 0 [ 2850.653274][T31464] CPU: 0 PID: 31464 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2850.663807][T31464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2850.673957][T31464] Call Trace: [ 2850.677317][T31464] dump_stack+0x14a/0x1ce [ 2850.681763][T31464] ? devkmsg_release+0x11c/0x11c [ 2850.686837][T31464] ? __kernel_text_address+0x93/0x110 [ 2850.692205][T31464] ? show_regs_print_info+0x12/0x12 [ 2850.697483][T31464] ? unwind_get_return_address+0x48/0x90 [ 2850.703459][T31464] ? arch_stack_walk+0xd8/0x120 [ 2850.708493][T31464] should_fail+0x6fb/0x860 [ 2850.713121][T31464] ? setup_fault_attr+0x3d0/0x3d0 [ 2850.718144][T31464] ? stack_trace_save+0x123/0x1f0 [ 2850.723158][T31464] ? stack_trace_snprint+0x150/0x150 [ 2850.728434][T31464] ? __alloc_skb+0x88/0x4d0 [ 2850.732928][T31464] should_failslab+0x5/0x20 [ 2850.737706][T31464] kmem_cache_alloc+0x36/0x260 [ 2850.742592][T31464] __alloc_skb+0x88/0x4d0 [ 2850.746912][T31464] ? __kasan_kmalloc+0x189/0x1c0 [ 2850.751846][T31464] alloc_skb_with_frags+0xb1/0x580 [ 2850.757065][T31464] ? sock_sendpage+0xd0/0x120 [ 2850.761881][T31464] ? pipe_to_sendpage+0x23b/0x300 [ 2850.771430][T31464] ? __splice_from_pipe+0x2d3/0x870 [ 2850.776762][T31464] ? generic_splice_sendpage+0x184/0x210 [ 2850.782524][T31464] ? do_syscall_64+0xcb/0x150 [ 2850.787319][T31464] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2850.793457][T31464] sock_alloc_send_pskb+0x87e/0xcc0 [ 2850.798780][T31464] ? sock_kzfree_s+0x50/0x50 [ 2850.803357][T31464] ? rt_set_nexthop+0x48b/0x1140 [ 2850.808415][T31464] __ip_append_data+0x1fb9/0x3170 [ 2850.813519][T31464] ? ip_do_fragment+0x22c0/0x22c0 [ 2850.818534][T31464] ? inet_rtm_getroute+0x2590/0x2590 [ 2850.823936][T31464] ? ip_setup_cork+0x810/0x810 [ 2850.828787][T31464] ? ip_setup_cork+0x46b/0x810 [ 2850.833538][T31464] ? sock_def_destruct+0x10/0x10 [ 2850.838605][T31464] ip_append_data+0x12c/0x1a0 [ 2850.843267][T31464] ? ip_do_fragment+0x22c0/0x22c0 [ 2850.848277][T31464] udp_sendmsg+0x3ef/0x2f40 [ 2850.852961][T31464] ? update_misfit_status+0x5e0/0x5e0 [ 2850.858339][T31464] ? ip_do_fragment+0x22c0/0x22c0 [ 2850.863453][T31464] ? udp_cmsg_send+0x340/0x340 [ 2850.868208][T31464] ? perf_pmu_sched_task+0x370/0x370 [ 2850.873482][T31464] ? find_next_bit+0xf7/0x120 [ 2850.878493][T31464] ? finish_task_switch+0x2be/0x4c0 [ 2850.883687][T31464] udp_sendpage+0x110/0x5c0 [ 2850.888195][T31464] ? udplite_getfrag+0x70/0x70 [ 2850.892954][T31464] ? mutex_lock+0xa6/0x110 [ 2850.897484][T31464] ? inet_send_prepare+0x1b7/0x470 [ 2850.902585][T31464] ? udplite_getfrag+0x70/0x70 [ 2850.907335][T31464] inet_sendpage+0xd7/0x130 [ 2850.911942][T31464] ? inet_sendmsg+0xc0/0xc0 [ 2850.916512][T31464] sock_sendpage+0xd0/0x120 [ 2850.921004][T31464] pipe_to_sendpage+0x23b/0x300 [ 2850.925971][T31464] ? sock_fasync+0xf0/0xf0 [ 2850.930392][T31464] ? generic_splice_sendpage+0x210/0x210 [ 2850.936171][T31464] __splice_from_pipe+0x2d3/0x870 [ 2850.941185][T31464] ? generic_splice_sendpage+0x210/0x210 [ 2850.946809][T31464] generic_splice_sendpage+0x184/0x210 [ 2850.952252][T31464] ? iter_file_splice_write+0xf60/0xf60 [ 2850.957909][T31464] ? security_file_permission+0x128/0x300 [ 2850.963801][T31464] ? iter_file_splice_write+0xf60/0xf60 [ 2850.969341][T31464] __se_sys_splice+0x7ee/0x1b70 [ 2850.974184][T31464] ? fput_many+0x42/0x1a0 [ 2850.978770][T31464] ? ksys_write+0x25d/0x2c0 [ 2850.983407][T31464] ? file_open_root+0x450/0x450 [ 2850.988245][T31464] ? __x64_sys_splice+0xf0/0xf0 [ 2850.993244][T31464] ? __x64_sys_splice+0x1d/0xf0 [ 2850.998094][T31464] do_syscall_64+0xcb/0x150 [ 2851.002823][T31464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2851.008702][T31464] RIP: 0033:0x45ca59 [ 2851.012581][T31464] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2851.032737][T31464] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2851.041312][T31464] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2851.049269][T31464] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2851.057227][T31464] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2851.065183][T31464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2851.073139][T31464] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2851.138972][T17682] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2851.148160][T17682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.157393][T17682] usb 2-1: config 0 descriptor?? [ 2851.638924][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 2851.648960][T17682] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 2851.660917][T17682] asix: probe of 2-1:0.0 failed with error -71 [ 2851.667723][T17682] usb 2-1: USB disconnect, device number 32 15:29:04 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:29:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x54}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:04 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:29:04 executing program 5 (fault-call:1 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) 15:29:04 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0xeffdffff00000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:29:04 executing program 0 (fault-call:11 fault-nth:99): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:29:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) 15:29:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x5c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x300, 0x35, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) 15:29:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x60}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) 15:29:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x61}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2852.185411][T31500] FAULT_INJECTION: forcing a failure. [ 2852.185411][T31500] name failslab, interval 1, probability 0, space 0, times 0 [ 2852.199073][T31500] CPU: 0 PID: 31500 Comm: syz-executor.0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2852.209484][T31500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2852.219715][T31500] Call Trace: [ 2852.222999][T31500] dump_stack+0x14a/0x1ce [ 2852.227318][T31500] ? devkmsg_release+0x11c/0x11c [ 2852.232245][T31500] ? show_regs_print_info+0x12/0x12 [ 2852.237431][T31500] should_fail+0x6fb/0x860 [ 2852.241835][T31500] ? setup_fault_attr+0x3d0/0x3d0 [ 2852.246957][T31500] ? skb_clone+0x1b2/0x370 [ 2852.251367][T31500] should_failslab+0x5/0x20 [ 2852.255858][T31500] kmem_cache_alloc+0x36/0x260 [ 2852.260757][T31500] skb_clone+0x1b2/0x370 [ 2852.264985][T31500] ip_mc_output+0x1d1/0x9f0 [ 2852.269626][T31500] ? ip_build_and_send_pkt+0x9d0/0x9d0 [ 2852.275227][T31500] ? nf_hook_slow+0x1a6/0x1f0 [ 2852.279989][T31500] ? __ip_local_out+0x33b/0x470 [ 2852.284833][T31500] ? ip_send_check+0xd0/0xd0 [ 2852.289413][T31500] ? __ip_local_out+0x470/0x470 [ 2852.294248][T31500] ? inet_rtm_getroute+0x2590/0x2590 [ 2852.299518][T31500] ? csum_partial+0x379/0x470 [ 2852.304178][T31500] ? siphash_3u32+0x22/0x240 [ 2852.308757][T31500] ? csum_partial+0x379/0x470 [ 2852.313425][T31500] ip_send_skb+0xaa/0x140 [ 2852.317839][T31500] udp_send_skb+0x8e9/0x1100 [ 2852.322418][T31500] udp_sendpage+0x2f2/0x5c0 [ 2852.327007][T31500] ? udplite_getfrag+0x70/0x70 [ 2852.331872][T31500] ? mutex_lock+0xa6/0x110 [ 2852.336277][T31500] ? inet_send_prepare+0x1b7/0x470 [ 2852.341375][T31500] ? udplite_getfrag+0x70/0x70 [ 2852.346136][T31500] inet_sendpage+0xd7/0x130 [ 2852.350624][T31500] ? inet_sendmsg+0xc0/0xc0 [ 2852.355121][T31500] sock_sendpage+0xd0/0x120 [ 2852.359614][T31500] pipe_to_sendpage+0x23b/0x300 [ 2852.364454][T31500] ? sock_fasync+0xf0/0xf0 [ 2852.368857][T31500] ? generic_splice_sendpage+0x210/0x210 [ 2852.374476][T31500] __splice_from_pipe+0x2d3/0x870 [ 2852.379608][T31500] ? generic_splice_sendpage+0x210/0x210 [ 2852.385232][T31500] generic_splice_sendpage+0x184/0x210 [ 2852.390682][T31500] ? iter_file_splice_write+0xf60/0xf60 [ 2852.396346][T31500] ? security_file_permission+0x128/0x300 [ 2852.402052][T31500] ? iter_file_splice_write+0xf60/0xf60 [ 2852.407663][T31500] __se_sys_splice+0x7ee/0x1b70 [ 2852.412505][T31500] ? fput_many+0x42/0x1a0 [ 2852.416825][T31500] ? ksys_write+0x25d/0x2c0 [ 2852.421313][T31500] ? file_open_root+0x450/0x450 [ 2852.426156][T31500] ? __x64_sys_splice+0xf0/0xf0 [ 2852.431003][T31500] ? __x64_sys_splice+0x1d/0xf0 [ 2852.435843][T31500] do_syscall_64+0xcb/0x150 [ 2852.440473][T31500] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2852.446369][T31500] RIP: 0033:0x45ca59 [ 2852.450262][T31500] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2852.470061][T31500] RSP: 002b:00007fb172945c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 2852.478597][T31500] RAX: ffffffffffffffda RBX: 00000000005084a0 RCX: 000000000045ca59 [ 2852.486568][T31500] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2852.494542][T31500] RBP: 000000000078bfa0 R08: 0000000000030005 R09: 0000000000000000 [ 2852.502632][T31500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 2852.510771][T31500] R13: 0000000000000bcb R14: 00000000004cec7a R15: 00007fb1729466d4 [ 2852.678822][T17452] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2852.928757][T17452] usb 2-1: Using ep0 maxpacket: 8 [ 2853.048897][T17452] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=dc.dc [ 2853.058086][T17452] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2853.067334][T17452] usb 2-1: config 0 descriptor?? [ 2853.328811][T17452] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read MAC address: 0 [ 2853.341321][T17452] asix 2-1:0.0 eth1: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88172A USB 2.0 Ethernet, 96:80:64:b1:44:e9 [ 2853.529879][T17452] usb 2-1: USB disconnect, device number 33 [ 2853.536167][T17452] asix 2-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88172A USB 2.0 Ethernet [ 2853.578851][T17452] ================================================================== [ 2853.587031][T17452] BUG: KASAN: use-after-free in ax88172a_unbind+0x6a/0xc0 [ 2853.594128][T17452] Read of size 8 at addr ffff8881d2196400 by task kworker/1:0/17452 [ 2853.602088][T17452] [ 2853.604413][T17452] CPU: 1 PID: 17452 Comm: kworker/1:0 Not tainted 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2853.614282][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2853.624714][T17452] Workqueue: usb_hub_wq hub_event [ 2853.629722][T17452] Call Trace: [ 2853.633002][T17452] dump_stack+0x14a/0x1ce [ 2853.637404][T17452] ? show_regs_print_info+0x12/0x12 [ 2853.642718][T17452] ? printk+0xd2/0x114 [ 2853.646783][T17452] print_address_description+0x93/0x620 [ 2853.652437][T17452] ? _raw_spin_lock+0x170/0x170 [ 2853.657587][T17452] __kasan_report+0x16d/0x1e0 [ 2853.662268][T17452] ? ax88172a_unbind+0x6a/0xc0 [ 2853.667142][T17452] kasan_report+0x34/0x60 [ 2853.671488][T17452] ax88172a_unbind+0x6a/0xc0 [ 2853.676067][T17452] ? ax88172a_bind+0x980/0x980 [ 2853.680938][T17452] usbnet_disconnect+0x14e/0x340 [ 2853.685870][T17452] usb_unbind_interface+0x1d8/0x850 [ 2853.691066][T17452] ? usb_driver_release_interface+0x1b0/0x1b0 [ 2853.697123][T17452] device_release_driver_internal+0x515/0x7b0 [ 2853.703419][T17452] bus_remove_device+0x2e7/0x350 [ 2853.708493][T17452] device_del+0x7bc/0x1200 [ 2853.713066][T17452] ? kill_device+0xc0/0xc0 [ 2853.717744][T17452] usb_disable_device+0x3fe/0xc90 [ 2853.722941][T17452] usb_disconnect+0x341/0x880 [ 2853.727697][T17452] hub_event+0x1c6c/0x4fa0 [ 2853.732195][T17452] ? _raw_spin_lock+0xa1/0x170 [ 2853.737062][T17452] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 2853.743124][T17452] ? led_work+0x530/0x530 [ 2853.747502][T17452] ? _raw_spin_unlock_irq+0x5/0x20 [ 2853.752601][T17452] ? enqueue_task+0x210/0xf00 [ 2853.757266][T17452] ? read_word_at_a_time+0xe/0x20 [ 2853.762319][T17452] ? strscpy+0xa6/0x260 [ 2853.766509][T17452] process_one_work+0x777/0xf90 [ 2853.771404][T17452] worker_thread+0xa8f/0x1430 [ 2853.776079][T17452] kthread+0x2df/0x300 [ 2853.780143][T17452] ? process_one_work+0xf90/0xf90 [ 2853.785207][T17452] ? kthread_destroy_worker+0x280/0x280 [ 2853.791186][T17452] ret_from_fork+0x1f/0x30 [ 2853.795731][T17452] [ 2853.798101][T17452] Allocated by task 17452: [ 2853.802730][T17452] __kasan_kmalloc+0x12c/0x1c0 [ 2853.809878][T17452] kmem_cache_alloc_trace+0xc3/0x280 [ 2853.815359][T17452] ax88172a_bind+0xc7/0x980 [ 2853.819850][T17452] usbnet_probe+0xa9f/0x2770 [ 2853.824699][T17452] usb_probe_interface+0x631/0xad0 [ 2853.829921][T17452] really_probe+0x764/0xf70 [ 2853.834523][T17452] driver_probe_device+0xe6/0x230 [ 2853.839605][T17452] bus_for_each_drv+0x17a/0x200 [ 2853.844674][T17452] __device_attach+0x27b/0x420 [ 2853.849523][T17452] bus_probe_device+0xbb/0x200 [ 2853.854344][T17452] device_add+0x13db/0x17c0 [ 2853.858865][T17452] usb_set_configuration+0x197f/0x1f00 [ 2853.864583][T17452] generic_probe+0x82/0x140 [ 2853.869071][T17452] really_probe+0x764/0xf70 [ 2853.873559][T17452] driver_probe_device+0xe6/0x230 [ 2853.878567][T17452] bus_for_each_drv+0x17a/0x200 [ 2853.883403][T17452] __device_attach+0x27b/0x420 [ 2853.888206][T17452] bus_probe_device+0xbb/0x200 [ 2853.892953][T17452] device_add+0x13db/0x17c0 [ 2853.897441][T17452] usb_new_device+0xda7/0x1710 [ 2853.902189][T17452] hub_event+0x2963/0x4fa0 [ 2853.906650][T17452] process_one_work+0x777/0xf90 [ 2853.911478][T17452] worker_thread+0xa8f/0x1430 [ 2853.916226][T17452] kthread+0x2df/0x300 [ 2853.920317][T17452] ret_from_fork+0x1f/0x30 [ 2853.924852][T17452] [ 2853.927160][T17452] Freed by task 17452: [ 2853.931214][T17452] __kasan_slab_free+0x181/0x230 [ 2853.936139][T17452] slab_free_freelist_hook+0xd0/0x150 [ 2853.941622][T17452] kfree+0x12b/0x600 [ 2853.945512][T17452] ax88172a_bind+0x844/0x980 [ 2853.950111][T17452] usbnet_probe+0xa9f/0x2770 [ 2853.954683][T17452] usb_probe_interface+0x631/0xad0 [ 2853.960008][T17452] really_probe+0x764/0xf70 [ 2853.964494][T17452] driver_probe_device+0xe6/0x230 [ 2853.969573][T17452] bus_for_each_drv+0x17a/0x200 [ 2853.974409][T17452] __device_attach+0x27b/0x420 [ 2853.979156][T17452] bus_probe_device+0xbb/0x200 [ 2853.983902][T17452] device_add+0x13db/0x17c0 [ 2853.988387][T17452] usb_set_configuration+0x197f/0x1f00 [ 2853.993829][T17452] generic_probe+0x82/0x140 [ 2853.998321][T17452] really_probe+0x764/0xf70 [ 2854.002808][T17452] driver_probe_device+0xe6/0x230 [ 2854.007812][T17452] bus_for_each_drv+0x17a/0x200 [ 2854.012651][T17452] __device_attach+0x27b/0x420 [ 2854.017520][T17452] bus_probe_device+0xbb/0x200 [ 2854.022325][T17452] device_add+0x13db/0x17c0 [ 2854.026813][T17452] usb_new_device+0xda7/0x1710 [ 2854.031676][T17452] hub_event+0x2963/0x4fa0 [ 2854.036118][T17452] process_one_work+0x777/0xf90 [ 2854.040947][T17452] worker_thread+0xa8f/0x1430 [ 2854.045604][T17452] kthread+0x2df/0x300 [ 2854.049801][T17452] ret_from_fork+0x1f/0x30 [ 2854.054193][T17452] [ 2854.056505][T17452] The buggy address belongs to the object at ffff8881d2196400 [ 2854.056505][T17452] which belongs to the cache kmalloc-64 of size 64 [ 2854.070367][T17452] The buggy address is located 0 bytes inside of [ 2854.070367][T17452] 64-byte region [ffff8881d2196400, ffff8881d2196440) [ 2854.083507][T17452] The buggy address belongs to the page: [ 2854.089123][T17452] page:ffffea0007486580 refcount:1 mapcount:0 mapping:ffff8881da803180 index:0x0 [ 2854.098214][T17452] flags: 0x8000000000000200(slab) [ 2854.103231][T17452] raw: 8000000000000200 ffffea00076a3180 0000000600000006 ffff8881da803180 [ 2854.111852][T17452] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 2854.120414][T17452] page dumped because: kasan: bad access detected [ 2854.126813][T17452] [ 2854.129118][T17452] Memory state around the buggy address: [ 2854.134726][T17452] ffff8881d2196300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2854.142766][T17452] ffff8881d2196380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2854.150808][T17452] >ffff8881d2196400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2854.158846][T17452] ^ [ 2854.162894][T17452] ffff8881d2196480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2854.171003][T17452] ffff8881d2196500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2854.179223][T17452] ================================================================== [ 2854.187265][T17452] Disabling lock debugging due to kernel taint [ 2854.199973][T17452] asix 2-1:0.0 eth1 (unregistered): deregistering mdio bus [ 2854.207552][T17452] ------------[ cut here ]------------ [ 2854.213010][T17452] kernel BUG at drivers/net/phy/mdio_bus.c:456! [ 2854.219617][T17452] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 2854.225895][T17452] CPU: 1 PID: 17452 Comm: kworker/1:0 Tainted: G B 5.4.46-syzkaller-00106-ga191332e9e93 #0 [ 2854.237239][T17452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2854.247491][T17452] Workqueue: usb_hub_wq hub_event [ 2854.252508][T17452] RIP: 0010:mdiobus_unregister+0x1da/0x1e0 [ 2854.258306][T17452] Code: f5 fe e9 80 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 94 fe ff ff 4c 89 ff e8 e0 39 f5 fe e9 87 fe ff ff e8 f6 0e c7 fe <0f> 0b 0f 1f 40 00 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 [ 2854.277900][T17452] RSP: 0018:ffff88819ad0f620 EFLAGS: 00010246 [ 2854.283955][T17452] RAX: ffffffff827aebca RBX: 0000000000000000 RCX: 0000000000040000 [ 2854.291941][T17452] RDX: ffffc9000cec4000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2854.300021][T17452] RBP: 1ffff110390c6cd3 R08: ffffffff827aea36 R09: ffffed103b725df0 [ 2854.307977][T17452] R10: ffffed103b725df0 R11: 0000000000000000 R12: dffffc0000000000 [ 2854.316185][T17452] R13: dffffc0000000000 R14: ffff8881c8636600 R15: ffff8881c8636698 [ 2854.324216][T17452] FS: 0000000000000000(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2854.333131][T17452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2854.339791][T17452] CR2: 00007f790f128028 CR3: 00000001d3447006 CR4: 00000000001606e0 [ 2854.347887][T17452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2854.355846][T17452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2854.363958][T17452] Call Trace: [ 2854.367277][T17452] ax88172a_unbind+0x99/0xc0 [ 2854.371852][T17452] ? ax88172a_bind+0x980/0x980 [ 2854.376997][T17452] usbnet_disconnect+0x14e/0x340 [ 2854.381928][T17452] usb_unbind_interface+0x1d8/0x850 [ 2854.387203][T17452] ? usb_driver_release_interface+0x1b0/0x1b0 [ 2854.393687][T17452] device_release_driver_internal+0x515/0x7b0 [ 2854.399747][T17452] bus_remove_device+0x2e7/0x350 [ 2854.404691][T17452] device_del+0x7bc/0x1200 [ 2854.409174][T17452] ? kill_device+0xc0/0xc0 [ 2854.413576][T17452] usb_disable_device+0x3fe/0xc90 [ 2854.419198][T17452] usb_disconnect+0x341/0x880 [ 2854.423860][T17452] hub_event+0x1c6c/0x4fa0 [ 2854.428382][T17452] ? _raw_spin_lock+0xa1/0x170 [ 2854.433133][T17452] ? __perf_event_task_sched_out+0xfe4/0x1110 [ 2854.440038][T17452] ? led_work+0x530/0x530 [ 2854.444367][T17452] ? _raw_spin_unlock_irq+0x5/0x20 [ 2854.449616][T17452] ? enqueue_task+0x210/0xf00 [ 2854.454374][T17452] ? read_word_at_a_time+0xe/0x20 [ 2854.460354][T17452] ? strscpy+0xa6/0x260 [ 2854.464923][T17452] process_one_work+0x777/0xf90 [ 2854.470625][T17452] worker_thread+0xa8f/0x1430 [ 2854.476607][T17452] kthread+0x2df/0x300 [ 2854.480818][T17452] ? process_one_work+0xf90/0xf90 [ 2854.486024][T17452] ? kthread_destroy_worker+0x280/0x280 [ 2854.491593][T17452] ret_from_fork+0x1f/0x30 [ 2854.496032][T17452] Modules linked in: [ 2854.500346][T17452] ---[ end trace aa6d102fe8aa6027 ]--- [ 2854.505950][T17452] RIP: 0010:mdiobus_unregister+0x1da/0x1e0 [ 2854.512585][T17452] Code: f5 fe e9 80 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 94 fe ff ff 4c 89 ff e8 e0 39 f5 fe e9 87 fe ff ff e8 f6 0e c7 fe <0f> 0b 0f 1f 40 00 41 57 41 56 41 55 41 54 53 49 89 ff 49 bc 00 00 [ 2854.534053][T17452] RSP: 0018:ffff88819ad0f620 EFLAGS: 00010246 [ 2854.541076][T17452] RAX: ffffffff827aebca RBX: 0000000000000000 RCX: 0000000000040000 [ 2854.549354][T17452] RDX: ffffc9000cec4000 RSI: 000000000003ffff RDI: 0000000000040000 [ 2854.558466][T17452] RBP: 1ffff110390c6cd3 R08: ffffffff827aea36 R09: ffffed103b725df0 [ 2854.567623][T17452] R10: ffffed103b725df0 R11: 0000000000000000 R12: dffffc0000000000 15:29:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xed, 0x1, 0x94, 0x8, 0xb95, 0x172a, 0xdcdc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xdf, 0x91}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7b}, &(0x7f00000003c0)={0x20, 0x0, 0xdb, {0xd9, "956fc4ed4787582defcfd860f3cdb7fefe553c24fd8e38a38bcf9da569802b0edd9ede006b0c2c0052bb1866e0868d68fddcb3a438f3fab22b153b5cb6b2b8d6bde82e6f4e4319b771529b16684130258e70a8480447237572eae48fa7728377733f0b89b5f4645faf53e3e4da0b9b4a1175230c2a2fcdd9288b69712e09b82deb4c6153a75d87d5942e5237aa1eebb81b680d9f09d3fb23030ad8fcf2cde79a2b0654737f396c3c2a849a96bb4f400a00b0c7fc75b96b252511964170fdc8a98bad323e73adbfcad4db9dda517c0519b08177642ab5e3eb3f"}}, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x60}, &(0x7f0000000500)={0x20, 0x0, 0x1}}) 15:29:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) 15:29:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x64}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) 15:29:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x200000d6, &(0x7f0000000080)={@empty, @random="355b33e459f0", @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "84b76104ebe838168d4d0737a1305ac78e5ad0b9ab287fb3842883c8d60f47efdf9e3028879bed2d157ab5afe96002b6beff1cf9247ee039e5fc0da49ae234f1"}}}}, 0x0) 15:29:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0, 0xffffff7f00000000}}, {{&(0x7f0000000100)=@xdp, 0x80, 0x0}}], 0x2, 0x0) 15:29:06 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000440)=[{0x80000006, 0x0, 0x0, 0x5}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x30005, 0x0) 15:29:06 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{}]}, 0x10) [ 2854.575851][T17452] R13: dffffc0000000000 R14: ffff8881c8636600 R15: ffff8881c8636698 [ 2854.583859][T17452] FS: 0000000000000000(0000) GS:ffff8881db900000(0000) knlGS:0000000000000000 [ 2854.592816][T17452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2854.599556][T17452] CR2: 00007f790f128028 CR3: 00000001d3447006 CR4: 00000000001606e0 [ 2854.617202][T17452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 15:29:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000580)={0x1, &(0x7f0000000400)=[{0x6c}]}, 0x10) wait4(0x0, 0x0, 0x0, 0x0) [ 2854.631548][T17452] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2854.644892][T17452] Kernel panic - not syncing: Fatal exception [ 2854.651873][T17452] Kernel Offset: disabled [ 2854.656473][T17452] Rebooting in 86400 seconds..