0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 764.487618][ T8190] 9pnet: Insufficient options for proto=fd 02:42:29 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0xe}}) 02:42:29 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="586d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 764.631685][ T8201] [EXFAT] trying to mount... 02:42:29 executing program 5: syz_open_dev$mice(&(0x7f0000000700)='/dev/input/mice\x00', 0x0, 0x4000) [ 764.691014][ T8201] [EXFAT] ffsMountVol failed 02:42:29 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x871e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:29 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4304, 0x0) 02:42:29 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="5c6d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:29 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:29 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="636d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 764.911260][ T8224] [EXFAT] trying to mount... [ 764.923269][ T8224] [EXFAT] ffsMountVol failed 02:42:29 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4404, 0x0) 02:42:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x8000000000000802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) write(r0, &(0x7f0000000040)="e0", 0xfffffe00) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) [ 765.103737][ T8235] [EXFAT] trying to mount... [ 765.111704][ T8235] [EXFAT] ffsMountVol failed 02:42:30 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x10}}) 02:42:30 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x871f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:30 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="646d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:30 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4504, 0x0) 02:42:30 executing program 5: mknod(&(0x7f0000000080)='./bus\x00', 0x8, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000080)={0x0, 0xfffffdf7}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 765.604221][ T8249] [EXFAT] trying to mount... 02:42:30 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="686d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 765.651987][ T8249] [EXFAT] ffsMountVol failed 02:42:30 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4604, 0x0) 02:42:30 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8720, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:30 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="696d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:30 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 765.812859][ T8266] [EXFAT] trying to mount... [ 765.855208][ T8266] [EXFAT] ffsMountVol failed 02:42:31 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x11}}) 02:42:31 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4704, 0x0) 02:42:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6c6d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:31 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8721, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:31 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:31 executing program 5: mknod(&(0x7f0000000080)='./bus\x00', 0x8, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000080)={0x0, 0xfffffdf7}}, 0x0) r2 = socket(0x10, 0xa, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924a61, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = socket$inet(0x2, 0x3, 0x29) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f00000000c0)=0x6ec0, 0x4) splice(r0, 0x0, r3, 0x0, 0x10005, 0x0) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=[0x0, 0x0], 0x0) 02:42:31 executing program 0: r0 = syz_open_dev$vcsa(0x0, 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 766.548071][ T8292] [EXFAT] trying to mount... 02:42:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6e6d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 766.582865][ T8292] [EXFAT] ffsMountVol failed 02:42:31 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4800, 0x0) 02:42:31 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8722, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 766.774614][ T8307] [EXFAT] trying to mount... [ 766.779601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 766.801885][ T8307] [EXFAT] ffsMountVol failed [ 766.858960][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 766.864789][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 767.179007][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 767.184905][ C0] protocol 88fb is buggy, dev hsr_slave_1 02:42:32 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x12}}) 02:42:32 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6f6d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:32 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4804, 0x0) 02:42:32 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8723, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:32 executing program 5 (fault-call:7 fault-nth:0): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:32 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="706d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 767.500201][ T8329] [EXFAT] trying to mount... [ 767.521313][ T8335] FAULT_INJECTION: forcing a failure. [ 767.521313][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 767.523724][ T8329] [EXFAT] ffsMountVol failed [ 767.537660][ T8335] CPU: 0 PID: 8335 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 767.547017][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.557092][ T8335] Call Trace: [ 767.560399][ T8335] dump_stack+0x1d8/0x2f8 [ 767.564766][ T8335] should_fail+0x555/0x770 [ 767.569177][ T8335] __should_failslab+0x11a/0x160 [ 767.574099][ T8335] ? dst_alloc+0x173/0x580 [ 767.578501][ T8335] should_failslab+0x9/0x20 [ 767.582983][ T8335] kmem_cache_alloc+0x56/0x2e0 [ 767.587731][ T8335] dst_alloc+0x173/0x580 [ 767.591962][ T8335] ip_route_output_key_hash_rcu+0x1935/0x26b0 [ 767.598012][ T8335] ip_route_output_key_hash+0x14e/0x260 [ 767.603543][ T8335] ip_route_output_flow+0x29/0xc0 [ 767.608559][ T8335] ? security_sk_classify_flow+0x8f/0xa0 [ 767.614179][ T8335] raw_sendmsg+0x13a5/0x3790 [ 767.618766][ T8335] ? __kasan_check_read+0x11/0x20 [ 767.623777][ T8335] inet_sendmsg+0x147/0x310 [ 767.628279][ T8335] ? security_socket_sendmsg+0xa0/0xd0 [ 767.633714][ T8335] ? inet_send_prepare+0x250/0x250 [ 767.638805][ T8335] kernel_sendmsg+0x109/0x140 [ 767.643468][ T8335] sock_no_sendpage+0x100/0x140 [ 767.648303][ T8335] inet_sendpage+0x18c/0x340 [ 767.652871][ T8335] ? inet_sendmsg+0x310/0x310 [ 767.657524][ T8335] sock_sendpage+0xd3/0x120 [ 767.662008][ T8335] pipe_to_sendpage+0x1f9/0x2a0 [ 767.666837][ T8335] ? sock_fasync+0x100/0x100 [ 767.671419][ T8335] __splice_from_pipe+0x2f7/0x8a0 [ 767.676421][ T8335] ? generic_splice_sendpage+0x180/0x180 [ 767.682042][ T8335] generic_splice_sendpage+0x114/0x180 [ 767.687482][ T8335] ? iter_file_splice_write+0xe20/0xe20 [ 767.693006][ T8335] __se_sys_splice+0x71a/0x1ac0 [ 767.697853][ T8335] ? check_preemption_disabled+0xb7/0x2a0 [ 767.703551][ T8335] ? debug_smp_processor_id+0x1c/0x20 [ 767.709075][ T8335] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 767.715133][ T8335] __x64_sys_splice+0xe5/0x100 [ 767.719877][ T8335] do_syscall_64+0xf7/0x1c0 [ 767.724359][ T8335] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 767.730224][ T8335] RIP: 0033:0x459f49 [ 767.734158][ T8335] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 767.753790][ T8335] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 767.762179][ T8335] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 02:42:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:32 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4904, 0x0) 02:42:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 767.770125][ T8335] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 767.778073][ T8335] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 767.786035][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 767.794331][ T8335] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:32 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8724, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 767.982758][ T8349] [EXFAT] trying to mount... [ 767.989653][ T8349] [EXFAT] ffsMountVol failed 02:42:33 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x25}}) 02:42:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="746d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4a04, 0x0) 02:42:33 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8725, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:33 executing program 5 (fault-call:7 fault-nth:1): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="756d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 768.457712][ T8372] FAULT_INJECTION: forcing a failure. [ 768.457712][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 768.458152][ T8368] [EXFAT] trying to mount... [ 768.482836][ T8372] CPU: 1 PID: 8372 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 768.490710][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.500776][ T8372] Call Trace: [ 768.500885][ T8368] [EXFAT] ffsMountVol failed [ 768.504075][ T8372] dump_stack+0x1d8/0x2f8 [ 768.513069][ T8372] should_fail+0x555/0x770 [ 768.517479][ T8372] __should_failslab+0x11a/0x160 [ 768.522398][ T8372] should_failslab+0x9/0x20 [ 768.526876][ T8372] kmem_cache_alloc_node+0x65/0x280 [ 768.532051][ T8372] ? __alloc_skb+0x9f/0x500 [ 768.536533][ T8372] __alloc_skb+0x9f/0x500 [ 768.540856][ T8372] __ip_append_data+0x2077/0x31a0 [ 768.545862][ T8372] ? do_raw_getsockopt+0x1c0/0x1c0 [ 768.550992][ T8372] ? lock_sock_nested+0xa8/0x120 [ 768.555934][ T8372] ip_append_data+0x11c/0x190 [ 768.560611][ T8372] ? do_raw_getsockopt+0x1c0/0x1c0 [ 768.565712][ T8372] raw_sendmsg+0x1d9e/0x3790 [ 768.570298][ T8372] ? __kasan_check_read+0x11/0x20 [ 768.575403][ T8372] inet_sendmsg+0x147/0x310 [ 768.579883][ T8372] ? security_socket_sendmsg+0xa0/0xd0 [ 768.585318][ T8372] ? inet_send_prepare+0x250/0x250 [ 768.590427][ T8372] kernel_sendmsg+0x109/0x140 [ 768.595086][ T8372] sock_no_sendpage+0x100/0x140 [ 768.600009][ T8372] inet_sendpage+0x18c/0x340 [ 768.604668][ T8372] ? inet_sendmsg+0x310/0x310 [ 768.609329][ T8372] sock_sendpage+0xd3/0x120 [ 768.613825][ T8372] pipe_to_sendpage+0x1f9/0x2a0 [ 768.618651][ T8372] ? sock_fasync+0x100/0x100 [ 768.624173][ T8372] __splice_from_pipe+0x2f7/0x8a0 [ 768.629177][ T8372] ? generic_splice_sendpage+0x180/0x180 [ 768.634806][ T8372] generic_splice_sendpage+0x114/0x180 [ 768.640261][ T8372] ? iter_file_splice_write+0xe20/0xe20 [ 768.645783][ T8372] __se_sys_splice+0x71a/0x1ac0 [ 768.650618][ T8372] ? check_preemption_disabled+0xb7/0x2a0 [ 768.656324][ T8372] ? debug_smp_processor_id+0x1c/0x20 [ 768.661692][ T8372] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 768.667762][ T8372] __x64_sys_splice+0xe5/0x100 [ 768.672506][ T8372] do_syscall_64+0xf7/0x1c0 [ 768.677077][ T8372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 768.682947][ T8372] RIP: 0033:0x459f49 [ 768.686819][ T8372] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:42:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 768.706436][ T8372] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 768.714835][ T8372] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 768.722786][ T8372] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 768.730735][ T8372] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 768.738685][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 768.746723][ T8372] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:33 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8726, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4c00, 0x0) 02:42:33 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x5c}}) 02:42:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="786d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7a6d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 768.999280][ T8391] [EXFAT] trying to mount... [ 769.015586][ T8391] [EXFAT] ffsMountVol failed 02:42:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x5c00, 0x0) 02:42:34 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8727, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:34 executing program 5 (fault-call:7 fault-nth:2): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:34 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6000, 0x0) 02:42:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:34 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="732561636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:34 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8728, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 769.424818][ T8423] FAULT_INJECTION: forcing a failure. [ 769.424818][ T8423] name failslab, interval 1, probability 0, space 0, times 0 [ 769.479482][ T8423] CPU: 0 PID: 8423 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 769.487333][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.497402][ T8423] Call Trace: [ 769.500712][ T8423] dump_stack+0x1d8/0x2f8 [ 769.505070][ T8423] should_fail+0x555/0x770 [ 769.509738][ T8423] __should_failslab+0x11a/0x160 [ 769.514697][ T8423] should_failslab+0x9/0x20 [ 769.519214][ T8423] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 769.525211][ T8423] ? __kmalloc_node_track_caller+0x3c/0x60 [ 769.531027][ T8423] __kmalloc_node_track_caller+0x3c/0x60 [ 769.536762][ T8423] ? __ip_append_data+0x2077/0x31a0 [ 769.541959][ T8423] __alloc_skb+0xe8/0x500 [ 769.546301][ T8423] __ip_append_data+0x2077/0x31a0 [ 769.551338][ T8423] ? do_raw_getsockopt+0x1c0/0x1c0 [ 769.556463][ T8423] ? lock_sock_nested+0xa8/0x120 [ 769.561416][ T8423] ip_append_data+0x11c/0x190 [ 769.566115][ T8423] ? do_raw_getsockopt+0x1c0/0x1c0 [ 769.571679][ T8423] raw_sendmsg+0x1d9e/0x3790 [ 769.576285][ T8423] ? __kasan_check_read+0x11/0x20 [ 769.581323][ T8423] inet_sendmsg+0x147/0x310 [ 769.585825][ T8423] ? security_socket_sendmsg+0xa0/0xd0 [ 769.591285][ T8423] ? inet_send_prepare+0x250/0x250 [ 769.596400][ T8423] kernel_sendmsg+0x109/0x140 [ 769.601087][ T8423] sock_no_sendpage+0x100/0x140 [ 769.605963][ T8423] inet_sendpage+0x18c/0x340 [ 769.610552][ T8423] ? inet_sendmsg+0x310/0x310 [ 769.615313][ T8423] sock_sendpage+0xd3/0x120 [ 769.619820][ T8423] pipe_to_sendpage+0x1f9/0x2a0 [ 769.624690][ T8423] ? sock_fasync+0x100/0x100 [ 769.629284][ T8423] __splice_from_pipe+0x2f7/0x8a0 [ 769.634317][ T8423] ? generic_splice_sendpage+0x180/0x180 [ 769.639972][ T8423] generic_splice_sendpage+0x114/0x180 [ 769.645428][ T8423] ? iter_file_splice_write+0xe20/0xe20 [ 769.650971][ T8423] __se_sys_splice+0x71a/0x1ac0 [ 769.655854][ T8423] ? check_preemption_disabled+0xb7/0x2a0 [ 769.661575][ T8423] ? debug_smp_processor_id+0x1c/0x20 [ 769.666943][ T8423] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 769.673012][ T8423] __x64_sys_splice+0xe5/0x100 [ 769.677765][ T8423] do_syscall_64+0xf7/0x1c0 [ 769.682273][ T8423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 769.688156][ T8423] RIP: 0033:0x459f49 [ 769.692040][ T8423] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 769.711637][ T8423] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 769.720050][ T8423] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 02:42:34 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x40) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./bus\x00', 0x2, 0x5, &(0x7f0000000540)=[{&(0x7f0000000140)="36d22bbc18ca64450f6519d14dd63bd9a5f9461777b3721e2b2ee361c26f70957143d8d64574f0df75dca44b1d9f1e47cb1bf482539d187ab84491a73c08de565353e3ac637028c536af83f3d29b00a2ef44b8e4c0e5cca71649e1aff2d715319c45646d1e6f2b4f37360009f0bd1ebf2620dcf2296e5c69b99ebc900ace5dd2960fc49d1b0ea538d134", 0x8a, 0x3ff}, {&(0x7f00000002c0)="5e8f74e91b4e334eed19b9fbb84736886ed42b011e0b54fc71b8e19759f5306995868153331772646b3cb2eed3ae9f9af630d7382c91b3fc65fb1995d6f484afd7119e0d13b704ebb39b2b77c386103b243dd9427e6c14db13af10310295df0965b2db44120d04f3d01ec00489dbe301ecc4ae8f4aa49c91ace09248a933cc7779b5c61ae858171f7381a164bff01406ab01c91e7208", 0x96, 0x8}, {&(0x7f0000000200)="475169187739fa1148bd19c6a58373bb50afcbceb0cd92e869ab823cb74293c1905fd426a9bcf31545241a1a9b4ad277447d8f753f8a6836fab7e884b72064e11a28cae68098db773f68cfd83090c7106e0f715f3298b1d5740afae3a5ec12ab1fc22f3caa56", 0x66, 0x10000}, {&(0x7f0000000380)="9890eebf3de63f298d73306dcd6c6f85716a9783ee125ec9fe298cae8aac3dd667d86e00f2d3e57670510134139fbd8e2a04e7dc79a6f38eb9f767943784c3c20353a45cfe70381b7f4e0445da9c8619eed4154f95d2be69fa2067a48e0ba15a34d559085bf592541ce9c0798b385225f0247b2209d8c2275f52f1c453866734f01084d826c03b62eefb9df498d7a1aaddcc8bcbf6dc78b8e10ec46857c9d9cd3833adaa1713438f636f693e038fcfcf925e3160756dede1", 0xb8, 0x7fff}, {&(0x7f0000000440)="94bb1cedf00e02037a5ff568f0d62478718a940628b2a89464de18aaf328b5d625f2ff105a71775153e4b3ec784fd8932c6391c5fd4a136a1905b136eb844265ff026e92add21bd0d3d5d2f659c42fa8dc49d37f22b2e63fd755df60a582a122b6cf05a15d3dad01342a959f48cbfcfd88b4602961304f2f0f0e923ee2fd90253ac885f7874b2c5fed8b556616aa873b35e902eb73595469b39cf25e93983f61245d8423c0d3dd754e1dd95c6fa2fb4f643fee8edc49c56c8e4e2bb63d2726d48fbf7153e010eeb912", 0xc9, 0x2}], 0x830080, &(0x7f00000005c0)='/dev/bus/usb/00#/00#\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e000001010000f5ead81767fa642c7266d76ff84b61c49459aa76601d2524", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:42:34 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6800, 0x0) 02:42:34 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d5c636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 769.728035][ T8423] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 769.736000][ T8423] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 769.743963][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 769.751938][ T8423] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:34 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8729, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:35 executing program 5 (fault-call:7 fault-nth:3): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:35 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6c00, 0x0) 02:42:35 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61635c6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:35 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:35 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x80) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000080)={0x990000, 0x6, 0xfffffff8, [], &(0x7f0000000040)={0x9a091c, 0x7, [], @ptr=0x2}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000140)) 02:42:35 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:35 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b2573646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:35 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7400, 0x0) [ 770.322981][ T8470] FAULT_INJECTION: forcing a failure. [ 770.322981][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 770.349192][ T8470] CPU: 0 PID: 8470 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 770.357080][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.367159][ T8470] Call Trace: [ 770.370500][ T8470] dump_stack+0x1d8/0x2f8 [ 770.374864][ T8470] should_fail+0x555/0x770 [ 770.379328][ T8470] __should_failslab+0x11a/0x160 [ 770.384298][ T8470] should_failslab+0x9/0x20 [ 770.388823][ T8470] kmem_cache_alloc_node+0x65/0x280 [ 770.394127][ T8470] ? __alloc_skb+0x9f/0x500 [ 770.398806][ T8470] __alloc_skb+0x9f/0x500 [ 770.403169][ T8470] __ip_append_data+0x2077/0x31a0 [ 770.408219][ T8470] ? do_raw_getsockopt+0x1c0/0x1c0 [ 770.413357][ T8470] ip_append_data+0x11c/0x190 [ 770.418051][ T8470] ? do_raw_getsockopt+0x1c0/0x1c0 [ 770.423219][ T8470] raw_sendmsg+0x1d9e/0x3790 [ 770.427968][ T8470] ? __kasan_check_read+0x11/0x20 [ 770.433022][ T8470] inet_sendmsg+0x147/0x310 [ 770.437558][ T8470] ? security_socket_sendmsg+0xa0/0xd0 [ 770.443031][ T8470] ? inet_send_prepare+0x250/0x250 [ 770.448149][ T8470] kernel_sendmsg+0x109/0x140 [ 770.452856][ T8470] sock_no_sendpage+0x100/0x140 [ 770.457723][ T8470] inet_sendpage+0x18c/0x340 [ 770.462317][ T8470] ? inet_sendmsg+0x310/0x310 [ 770.467008][ T8470] sock_sendpage+0xd3/0x120 02:42:35 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b2e73646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:35 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:35 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) [ 770.467030][ T8470] pipe_to_sendpage+0x1f9/0x2a0 [ 770.467039][ T8470] ? sock_fasync+0x100/0x100 [ 770.467055][ T8470] __splice_from_pipe+0x2f7/0x8a0 [ 770.485993][ T8470] ? generic_splice_sendpage+0x180/0x180 [ 770.491660][ T8470] generic_splice_sendpage+0x114/0x180 [ 770.497228][ T8470] ? iter_file_splice_write+0xe20/0xe20 [ 770.502806][ T8470] __se_sys_splice+0x71a/0x1ac0 [ 770.507670][ T8470] ? check_preemption_disabled+0xb7/0x2a0 [ 770.513403][ T8470] ? debug_smp_processor_id+0x1c/0x20 [ 770.518792][ T8470] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 770.524879][ T8470] __x64_sys_splice+0xe5/0x100 [ 770.529660][ T8470] do_syscall_64+0xf7/0x1c0 [ 770.534182][ T8470] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 770.540082][ T8470] RIP: 0033:0x459f49 [ 770.544010][ T8470] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 770.564688][ T8470] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 770.564699][ T8470] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 770.564703][ T8470] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 770.564721][ T8470] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 770.597213][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 770.605313][ T8470] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:36 executing program 5 (fault-call:7 fault-nth:4): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:36 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)='>', 0x1}], 0x2) 02:42:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7a00, 0x0) 02:42:36 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b2f73646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:36 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) 02:42:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x9926, 0x0) 02:42:36 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b5c73646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 771.213259][ T8510] FAULT_INJECTION: forcing a failure. [ 771.213259][ T8510] name failslab, interval 1, probability 0, space 0, times 0 [ 771.274700][ T8510] CPU: 0 PID: 8510 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 771.282547][ T8510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.292614][ T8510] Call Trace: [ 771.295929][ T8510] dump_stack+0x1d8/0x2f8 [ 771.300287][ T8510] should_fail+0x555/0x770 [ 771.304738][ T8510] __should_failslab+0x11a/0x160 [ 771.309698][ T8510] should_failslab+0x9/0x20 [ 771.314220][ T8510] kmem_cache_alloc_node+0x65/0x280 [ 771.319431][ T8510] ? __alloc_skb+0x9f/0x500 02:42:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xec00, 0x0) [ 771.323950][ T8510] __alloc_skb+0x9f/0x500 [ 771.328292][ T8510] __ip_append_data+0x2077/0x31a0 [ 771.333345][ T8510] ? do_raw_getsockopt+0x1c0/0x1c0 [ 771.338491][ T8510] ip_append_data+0x11c/0x190 [ 771.343179][ T8510] ? do_raw_getsockopt+0x1c0/0x1c0 [ 771.348301][ T8510] raw_sendmsg+0x1d9e/0x3790 [ 771.352924][ T8510] ? __kasan_check_read+0x11/0x20 [ 771.357967][ T8510] inet_sendmsg+0x147/0x310 [ 771.362479][ T8510] ? security_socket_sendmsg+0xa0/0xd0 [ 771.367952][ T8510] ? inet_send_prepare+0x250/0x250 02:42:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) [ 771.373082][ T8510] kernel_sendmsg+0x109/0x140 [ 771.377786][ T8510] sock_no_sendpage+0x100/0x140 [ 771.382667][ T8510] inet_sendpage+0x18c/0x340 [ 771.387274][ T8510] ? inet_sendmsg+0x310/0x310 [ 771.391975][ T8510] sock_sendpage+0xd3/0x120 [ 771.396497][ T8510] pipe_to_sendpage+0x1f9/0x2a0 [ 771.401362][ T8510] ? sock_fasync+0x100/0x100 [ 771.405973][ T8510] __splice_from_pipe+0x2f7/0x8a0 [ 771.411023][ T8510] ? generic_splice_sendpage+0x180/0x180 [ 771.416694][ T8510] generic_splice_sendpage+0x114/0x180 [ 771.422182][ T8510] ? iter_file_splice_write+0xe20/0xe20 [ 771.427770][ T8510] __se_sys_splice+0x71a/0x1ac0 [ 771.432792][ T8510] ? check_preemption_disabled+0xb7/0x2a0 [ 771.438548][ T8510] ? debug_smp_processor_id+0x1c/0x20 [ 771.443941][ T8510] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 771.450046][ T8510] __x64_sys_splice+0xe5/0x100 [ 771.454844][ T8510] do_syscall_64+0xf7/0x1c0 [ 771.459377][ T8510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 771.465285][ T8510] RIP: 0033:0x459f49 [ 771.469189][ T8510] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 771.488804][ T8510] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 771.497229][ T8510] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 771.505213][ T8510] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 771.513223][ T8510] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 771.513238][ T8510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 771.529178][ T8510] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:36 executing program 5 (fault-call:7 fault-nth:5): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:36 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6623646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xedc0, 0x0) 02:42:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, 0x0, 0x0) 02:42:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:37 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="747266642c7266646e6f3d1904eb5455cf9b1a3200000000", @ANYRESOCT=0x0, @ANYBLOB=',wfdno=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) 02:42:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff00, 0x0) 02:42:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}], 0x1) 02:42:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6625646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:37 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x872f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 772.128380][ T8552] FAULT_INJECTION: forcing a failure. [ 772.128380][ T8552] name failslab, interval 1, probability 0, space 0, times 0 [ 772.225007][ T8552] CPU: 0 PID: 8552 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 772.232848][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.242911][ T8552] Call Trace: [ 772.246213][ T8552] dump_stack+0x1d8/0x2f8 [ 772.250558][ T8552] should_fail+0x555/0x770 [ 772.254994][ T8552] __should_failslab+0x11a/0x160 [ 772.259942][ T8552] should_failslab+0x9/0x20 [ 772.264454][ T8552] kmem_cache_alloc_node_trace+0x6e/0x2d0 02:42:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b662a646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff0f, 0x0) [ 772.270181][ T8552] ? __kmalloc_node_track_caller+0x3c/0x60 [ 772.275999][ T8552] __kmalloc_node_track_caller+0x3c/0x60 [ 772.281637][ T8552] ? __ip_append_data+0x2077/0x31a0 [ 772.286840][ T8552] __alloc_skb+0xe8/0x500 [ 772.291172][ T8552] __ip_append_data+0x2077/0x31a0 [ 772.296213][ T8552] ? do_raw_getsockopt+0x1c0/0x1c0 [ 772.301348][ T8552] ip_append_data+0x11c/0x190 [ 772.306031][ T8552] ? do_raw_getsockopt+0x1c0/0x1c0 [ 772.311157][ T8552] raw_sendmsg+0x1d9e/0x3790 [ 772.315768][ T8552] ? __kasan_check_read+0x11/0x20 [ 772.320791][ T8552] inet_sendmsg+0x147/0x310 [ 772.325287][ T8552] ? security_socket_sendmsg+0xa0/0xd0 [ 772.330787][ T8552] ? inet_send_prepare+0x250/0x250 [ 772.335893][ T8552] kernel_sendmsg+0x109/0x140 [ 772.340561][ T8552] sock_no_sendpage+0x100/0x140 [ 772.345419][ T8552] inet_sendpage+0x18c/0x340 [ 772.350002][ T8552] ? inet_sendmsg+0x310/0x310 [ 772.350014][ T8552] sock_sendpage+0xd3/0x120 [ 772.350030][ T8552] pipe_to_sendpage+0x1f9/0x2a0 [ 772.350042][ T8552] ? sock_fasync+0x100/0x100 [ 772.359209][ T8552] __splice_from_pipe+0x2f7/0x8a0 [ 772.359221][ T8552] ? generic_splice_sendpage+0x180/0x180 [ 772.359245][ T8552] generic_splice_sendpage+0x114/0x180 [ 772.359258][ T8552] ? iter_file_splice_write+0xe20/0xe20 [ 772.359269][ T8552] __se_sys_splice+0x71a/0x1ac0 [ 772.359285][ T8552] ? check_preemption_disabled+0xb7/0x2a0 [ 772.359299][ T8552] ? debug_smp_processor_id+0x1c/0x20 [ 772.406553][ T8552] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 772.412616][ T8552] __x64_sys_splice+0xe5/0x100 [ 772.417453][ T8552] do_syscall_64+0xf7/0x1c0 [ 772.421939][ T8552] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 772.427859][ T8552] RIP: 0033:0x459f49 [ 772.431744][ T8552] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 772.451510][ T8552] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 772.459911][ T8552] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 772.467879][ T8552] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 772.475847][ T8552] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 772.483815][ T8552] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 772.491777][ T8552] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:37 executing program 5 (fault-call:7 fault-nth:6): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}], 0x1) 02:42:37 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x20000, 0x0) 02:42:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b662b646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:37 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8730, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}], 0x1) 02:42:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x40000, 0x0) 02:42:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b662d646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {0x0}], 0x2) [ 773.021782][ T8595] FAULT_INJECTION: forcing a failure. [ 773.021782][ T8595] name failslab, interval 1, probability 0, space 0, times 0 02:42:38 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8731, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 773.072298][ T8595] CPU: 0 PID: 8595 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 773.080150][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.090212][ T8595] Call Trace: [ 773.093547][ T8595] dump_stack+0x1d8/0x2f8 [ 773.097895][ T8595] should_fail+0x555/0x770 [ 773.102324][ T8595] __should_failslab+0x11a/0x160 [ 773.107279][ T8595] should_failslab+0x9/0x20 [ 773.111788][ T8595] kmem_cache_alloc_node+0x65/0x280 [ 773.116998][ T8595] ? __alloc_skb+0x9f/0x500 02:42:38 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b662e646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 773.121520][ T8595] __alloc_skb+0x9f/0x500 [ 773.125858][ T8595] __ip_append_data+0x2077/0x31a0 [ 773.130897][ T8595] ? do_raw_getsockopt+0x1c0/0x1c0 [ 773.136039][ T8595] ip_append_data+0x11c/0x190 [ 773.140725][ T8595] ? do_raw_getsockopt+0x1c0/0x1c0 [ 773.145847][ T8595] raw_sendmsg+0x1d9e/0x3790 [ 773.150477][ T8595] ? __kasan_check_read+0x11/0x20 [ 773.155521][ T8595] inet_sendmsg+0x147/0x310 [ 773.160027][ T8595] ? security_socket_sendmsg+0xa0/0xd0 [ 773.165588][ T8595] ? inet_send_prepare+0x250/0x250 [ 773.170705][ T8595] kernel_sendmsg+0x109/0x140 [ 773.170721][ T8595] sock_no_sendpage+0x100/0x140 [ 773.170741][ T8595] inet_sendpage+0x18c/0x340 [ 773.170752][ T8595] ? inet_sendmsg+0x310/0x310 [ 773.170761][ T8595] sock_sendpage+0xd3/0x120 [ 773.170775][ T8595] pipe_to_sendpage+0x1f9/0x2a0 [ 773.170783][ T8595] ? sock_fasync+0x100/0x100 [ 773.170797][ T8595] __splice_from_pipe+0x2f7/0x8a0 [ 773.170810][ T8595] ? generic_splice_sendpage+0x180/0x180 [ 773.170830][ T8595] generic_splice_sendpage+0x114/0x180 [ 773.170844][ T8595] ? iter_file_splice_write+0xe20/0xe20 [ 773.180358][ T8595] __se_sys_splice+0x71a/0x1ac0 [ 773.180375][ T8595] ? check_preemption_disabled+0xb7/0x2a0 [ 773.180390][ T8595] ? debug_smp_processor_id+0x1c/0x20 [ 773.180401][ T8595] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 773.180423][ T8595] __x64_sys_splice+0xe5/0x100 [ 773.180439][ T8595] do_syscall_64+0xf7/0x1c0 [ 773.180451][ T8595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 773.180460][ T8595] RIP: 0033:0x459f49 [ 773.180471][ T8595] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 773.180476][ T8595] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 773.180485][ T8595] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 773.180490][ T8595] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 773.180495][ T8595] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 773.180500][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 773.180504][ T8595] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:38 executing program 5 (fault-call:7 fault-nth:7): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:38 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x60000, 0x0) 02:42:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {0x0}], 0x2) 02:42:38 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6630646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:38 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8732, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:38 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="1118a75b7b691840a732231175a10822819c329317271b20fe92510b1e960fc793decac5a66d5830c36c069eafd46e057e351f5b89f28bd22c64eb30436be12ae9843d77949bd224"]) 02:42:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {0x0}], 0x2) 02:42:38 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b664c646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:38 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x80000, 0x0) 02:42:38 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) sendmsg(r0, &(0x7f0000000b00)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x2, @remote, 'syzkaller1\x00'}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)="7ff01139d250b0f2025e2c9cdfb20fda743fd25df6d6113ef1517b517c44d41ce4be354e1c0d782250f47bc5e81dc8639ff9bf8c99ea6cd2b523f4a34811ef32612ce4e1ad7471157cc871bfecbae511ae2b45008d2785e1ecd8f0ebf4cf6c15765a1b11ab73494ebfc175dd05f81a4c19a1dc45db51d228c7bcffa163615626e4902d54b90159c6a09ee88b7a83a7aebe6a210234bf7a7cc2a71e2597949c1bef549e851ec501ce48e09e470474e7193d6e27f764e36ad20e6c5b1c62d538805600ce447ef2632f987b40da473169ab2d01cf6253cf2f840e2f9d9a69a7ad855c84a73ce029ee0060ff1685bec954c37d", 0xf1}, {&(0x7f0000000240)="87d29b96d40dc630a2b5d913ed096c83776fc15739bb521791a18be094633a0ce34bb866f9f97cb7d5944d7c29", 0x2d}, {&(0x7f00000002c0)="c5b7d023c655eeec4ba29849c404e9d370ace0e7140ab8fc1de32e2a9fad79a1ce7e9814f4d35607cbbcd275f88e7c991760bb0530966ae678f63de63d13551b095b67a578067f08e81fb2f76884606952803faf8b9f1cbe13898f01b80aeb73e66bfcc4e790e667b641697428833ff4e493299ab6fddb058d394f7e562e00cdbe253870296c770c623830b745cb4bde9f9aa0d95b47e893ca92d2fa2d969767b564782b85ba5054d8f6f15b7d2a348565def60c9519e36d7c341a27f5c0a92bdebce8702b4152af100bb0d006f9b63b5308440efef25022a355d81b575c66b3d3f52a", 0xe3}], 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="a8000000000000006f0210bc3f000000849da7835afd83b6cae1ccb12a7f1f8d882205b59189bb3a01670f377f98db56f832548ebbb97b53023f20538725e27da2f3c9c9e1882c21f7c979fceb33e555272b989a9618ae52650ac74fe9c852be635d324a9888d1b1260f704cf21b9a59f7f358fc4cbc3b97b69ed37d76cba38fa4066504dcdbed2efa7797845e533db1e8db332e79a673cba10d64ec6956a9a56227bd000000000008010000000000000d01000004000000430724491a586cdbcf4da71160ddf651e9e9609bd024ed8ce5deec9b0adc73b9888c3fe8845bb3b62e1dd6ebab7fed86bfa497ab7ea45df123e2d99116c2deea5838aa174a66ea43ac269f24a57fd50055d68cef9c3954968a6e158a7e53cb973dc83939b55d763a17f77bdf6068a7ba6f99930fc477eeb5c3a8b0b79a441f8159032ebc26bd6f5d3e0f18bea8a3ef606d983b560eb713570f7cf9eff06ca82523bcb78bf1ec8bb4d85c40882248bc777e68236c7fbb9b1a2a644df06cac8a1f1179422a3b22f942b5a017ab9ba12e4cb7e01408dfe605fa49c9f23504c33e60aee6e0a39fe506009b9f72442957b3b79a5c0283e80a068cdb74186503f66832853e000000900000000000000002010000030000004c255bd93ccd0d35bffd598810ffb838e95de97f2bc822408b8ec6b62b72ca2f7790987400b78f37771be697f7867ec2deb54d73d0ceeb12f51fa345592a9f6381af595a958784319740a2390891e3800323c962178f56c92374636c6a70831e6fa02e31d3d73004e669849bac21e6092f0f694df38909356c2b727500000000e0000000000000000801000026a8d97eeb9d7060c623dc69c92e6f0fd5cd7a0d0e161174e3f7f8a57c962ea6315b682f2bd35555a43f9d50ef16f89fcd02e3a3992d3d532c595b67400fbcb8fc9d27bfd8c4248252412aba2fb76fbd95a5929a210662580071cddf19379303749b5c1a39083fbcf3f96a0cd555aa6326e40b142bfe5655700498e94b8f5d1dd97918999e8276216d8f449fe3bf366e17a6bd90af7f97814cab5484b6e07383c56ffdc7267d55ffef41fa1b203c7a66bc6b136449e10f8e0bdc161c67354f03fd64b968eb4452be1709b92a55bb82524f44a40088000000000000002c0200009b040000cd4767d4085801c902f8c4bdeac55620a688949f91bc4f51d14f3cbf6389015e2025016d8d2a4827ad5150231805a97cb4333eb07b1514e279d6f91979a1ad33bb914ae34cce316b3368fac7e5d744b552a8203b7d668928cc55150719db1f798ea5fae7c8f4fb50d434a6b161d06f905e69a1d39a000000c8000000000000000401000004000000d6ae064761df651b70464a16cbabd81428f9ab65181c27c361beced0a59fa72e5662a346dcb123095d099f48159b11dc54228ecd083173eb9b9f4b77f78dc38bf8488ab6506e92e465c75326645403c7c21dc7441999add3ba997ce9a47519f1255527f30fd27e4eec743102e8b1d5d54562f93a642e150491898f880e42fd6a4e4c8f700a36ae8b72da9fb087c15f2747e79777df65a0cc0281912f3cd8d05c4da7244a7355df301f20bc6131df07cf5a89bf0000000000f800000000000000000000000000000064ba3fb10e97b442d344772b70cf9f1c8ddd0d18a43eb0b9847b000542636ce1306a73f0d739b14f4be7b37cb1d68a82338c50c68d747380984523a8420628c9814c6ee0f0248c7d3d635d58fab3f9a700f2b7c55491fe40065bfc491677a67ffad6ac697e9dea03690b3ebc008bd0b34839d56ba98ffca144f232c515063c6fd473d501d675cff7c2602b5a5835f00992aec9ed5049fb843088ca77683bef827f8d0c067f10c1ae266e027e1ebf60f5b9a118477bc52c8cf91e0dab0a4eaa1b824f574c66cf887f0312d43a00a136469ff17d02cf983ac48eec8efef6a00eae4ee7dc7d47d7d800c800000000000000030100006f0000006bdbb3006090bc147f221d211b9acb4c2119a0c943ad72a2072ffe7527caa20615e92e70784e1b56f49b6c0000000052da600b13b811864502fd072057a6868a19786cd8430c9a3984ccee96ee0b34eb70ec8ee200abe06dd1fa922941cf2ac822132fd508925144d62ef4cc7349ae2672569f744b0e38c62fb2103e8b563f8cff119ed96869f2340a111693ea8e68b26311a476c5963f429dfabcb89d3f4303346a77496926ab4c09878528d4aa458e7700000000000000b00000000000000019010000008000005b93b605b1e429ddd5eacfc14cee64009de7f87aeac1a2ddb0027b164b5263462d5ea37ada34d7baf2efad74857798c3092ae9c58c86e9a857725256521d0463b216aafa458bf1711fcd4076c352e2725c92480693cfc2d3dfdfa989b12506d2f07010af1a5305f859b1042b97b80db82535f153a55938a726d98e31944cf3c396b5f13a72d7ea7858dd88c6932d44f92702d4323dc3df2e223c000000000000a6cd115a5056c6cab10658f9c60f3e09931ff16ff6c9306338c3ee254f1c6fe5e19c98c677de2e40d885250e0bbae7840d238539e9ad24f458f7f586cd830447bc802d29c7620ae308f1d8b136e6950e8868fe027108fc34a39ce792e914a6d04c1da1ad397253a10ae763e6d0e3c8901d88c237b9036079f0a92b9a1b1e4a06a976802a71d218390f870b193021eabb91429f83f0bf1c290a063a18e0224b5f3624479b1374dac3"], 0x6e0}, 0x800) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 773.875572][ T8627] 9pnet: Insufficient options for proto=fd [ 773.893652][ T8633] FAULT_INJECTION: forcing a failure. [ 773.893652][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 773.922696][ T8633] CPU: 0 PID: 8633 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 773.930544][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.940608][ T8633] Call Trace: [ 773.940630][ T8633] dump_stack+0x1d8/0x2f8 [ 773.940647][ T8633] should_fail+0x555/0x770 [ 773.940667][ T8633] __should_failslab+0x11a/0x160 [ 773.940681][ T8633] should_failslab+0x9/0x20 [ 773.940692][ T8633] kmem_cache_alloc_node+0x65/0x280 [ 773.940701][ T8633] ? __alloc_skb+0x9f/0x500 [ 773.940715][ T8633] __alloc_skb+0x9f/0x500 [ 773.940733][ T8633] __ip_append_data+0x2077/0x31a0 [ 773.940758][ T8633] ? do_raw_getsockopt+0x1c0/0x1c0 [ 773.971888][ T8633] ip_append_data+0x11c/0x190 [ 773.971904][ T8633] ? do_raw_getsockopt+0x1c0/0x1c0 [ 773.971918][ T8633] raw_sendmsg+0x1d9e/0x3790 [ 773.981281][ T8633] ? __kasan_check_read+0x11/0x20 [ 773.981304][ T8633] inet_sendmsg+0x147/0x310 [ 773.981316][ T8633] ? security_socket_sendmsg+0xa0/0xd0 [ 773.981325][ T8633] ? inet_send_prepare+0x250/0x250 [ 773.981337][ T8633] kernel_sendmsg+0x109/0x140 [ 773.981354][ T8633] sock_no_sendpage+0x100/0x140 [ 774.000814][ T8633] inet_sendpage+0x18c/0x340 [ 774.000827][ T8633] ? inet_sendmsg+0x310/0x310 [ 774.000840][ T8633] sock_sendpage+0xd3/0x120 [ 774.000854][ T8633] pipe_to_sendpage+0x1f9/0x2a0 [ 774.000866][ T8633] ? sock_fasync+0x100/0x100 [ 774.010374][ T8633] __splice_from_pipe+0x2f7/0x8a0 [ 774.010387][ T8633] ? generic_splice_sendpage+0x180/0x180 [ 774.010411][ T8633] generic_splice_sendpage+0x114/0x180 [ 774.010426][ T8633] ? iter_file_splice_write+0xe20/0xe20 [ 774.010438][ T8633] __se_sys_splice+0x71a/0x1ac0 [ 774.010454][ T8633] ? check_preemption_disabled+0xb7/0x2a0 [ 774.010467][ T8633] ? debug_smp_processor_id+0x1c/0x20 [ 774.010477][ T8633] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 774.010496][ T8633] __x64_sys_splice+0xe5/0x100 [ 774.010511][ T8633] do_syscall_64+0xf7/0x1c0 [ 774.010524][ T8633] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 774.010533][ T8633] RIP: 0033:0x459f49 02:42:39 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6658646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 774.010542][ T8633] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 774.010547][ T8633] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 774.010556][ T8633] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 774.010566][ T8633] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 774.160361][ T8633] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 774.168484][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 02:42:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 774.176463][ T8633] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:39 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xa0000, 0x0) 02:42:39 executing program 5 (fault-call:7 fault-nth:8): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:39 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8733, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:39 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b665c646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:39 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6663646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:39 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xc0000, 0x0) 02:42:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1) [ 774.788663][ T8669] FAULT_INJECTION: forcing a failure. [ 774.788663][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 774.853566][ T8669] CPU: 1 PID: 8669 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 774.861411][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 774.871466][ T8669] Call Trace: [ 774.874778][ T8669] dump_stack+0x1d8/0x2f8 [ 774.879124][ T8669] should_fail+0x555/0x770 [ 774.883553][ T8669] __should_failslab+0x11a/0x160 [ 774.888498][ T8669] should_failslab+0x9/0x20 [ 774.893097][ T8669] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 774.898795][ T8669] ? __kmalloc_node_track_caller+0x3c/0x60 [ 774.904608][ T8669] __kmalloc_node_track_caller+0x3c/0x60 [ 774.910244][ T8669] ? __ip_append_data+0x2077/0x31a0 [ 774.915444][ T8669] __alloc_skb+0xe8/0x500 [ 774.919772][ T8669] __ip_append_data+0x2077/0x31a0 [ 774.919790][ T8669] ? do_raw_getsockopt+0x1c0/0x1c0 [ 774.919824][ T8669] ip_append_data+0x11c/0x190 [ 774.929907][ T8669] ? do_raw_getsockopt+0x1c0/0x1c0 [ 774.929923][ T8669] raw_sendmsg+0x1d9e/0x3790 [ 774.929959][ T8669] ? __kasan_check_read+0x11/0x20 [ 774.929980][ T8669] inet_sendmsg+0x147/0x310 [ 774.929993][ T8669] ? security_socket_sendmsg+0xa0/0xd0 [ 774.930010][ T8669] ? inet_send_prepare+0x250/0x250 [ 774.939755][ T8669] kernel_sendmsg+0x109/0x140 [ 774.939770][ T8669] sock_no_sendpage+0x100/0x140 [ 774.939792][ T8669] inet_sendpage+0x18c/0x340 [ 774.939809][ T8669] ? inet_sendmsg+0x310/0x310 [ 774.939820][ T8669] sock_sendpage+0xd3/0x120 [ 774.939834][ T8669] pipe_to_sendpage+0x1f9/0x2a0 [ 774.939845][ T8669] ? sock_fasync+0x100/0x100 [ 774.949425][ T8669] __splice_from_pipe+0x2f7/0x8a0 [ 774.949439][ T8669] ? generic_splice_sendpage+0x180/0x180 [ 774.949463][ T8669] generic_splice_sendpage+0x114/0x180 [ 774.949478][ T8669] ? iter_file_splice_write+0xe20/0xe20 [ 774.949489][ T8669] __se_sys_splice+0x71a/0x1ac0 [ 774.949508][ T8669] ? check_preemption_disabled+0xb7/0x2a0 [ 775.029572][ T8669] ? debug_smp_processor_id+0x1c/0x20 [ 775.029588][ T8669] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 775.041245][ T8669] __x64_sys_splice+0xe5/0x100 [ 775.046017][ T8669] do_syscall_64+0xf7/0x1c0 [ 775.050558][ T8669] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.056451][ T8669] RIP: 0033:0x459f49 [ 775.060426][ T8669] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.080135][ T8669] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 775.088548][ T8669] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 775.096702][ T8669] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:42:40 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x10) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@dont_hash='dont_hash'}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, 'rfdno'}}, {@context={'context', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x27}}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef', 0x3d, 'wfdno'}}]}}) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x3) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000280)=""/187) 02:42:40 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8734, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:40 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6664646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 775.104693][ T8669] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 775.112658][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 775.120632][ T8669] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:40 executing program 5 (fault-call:7 fault-nth:9): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:40 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xe0000, 0x0) 02:42:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1) 02:42:40 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6668646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:40 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8735, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:40 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6669646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1) 02:42:40 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfeffff, 0x0) [ 775.685447][ T8710] FAULT_INJECTION: forcing a failure. [ 775.685447][ T8710] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 775.698689][ T8710] CPU: 1 PID: 8710 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 775.698696][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.698700][ T8710] Call Trace: [ 775.698718][ T8710] dump_stack+0x1d8/0x2f8 [ 775.698733][ T8710] should_fail+0x555/0x770 [ 775.698748][ T8710] should_fail_alloc_page+0x55/0x60 02:42:40 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b666c646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 775.728733][ T8710] prepare_alloc_pages+0x283/0x460 [ 775.728748][ T8710] __alloc_pages_nodemask+0xb2/0x5d0 [ 775.744335][ T8710] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.750426][ T8710] kmem_getpages+0x4d/0xa00 [ 775.754945][ T8710] cache_grow_begin+0x7e/0x2c0 [ 775.759734][ T8710] cache_alloc_refill+0x311/0x3f0 [ 775.764784][ T8710] ? check_preemption_disabled+0xb7/0x2a0 [ 775.770564][ T8710] kmem_cache_alloc_node_trace+0x2a3/0x2d0 [ 775.776501][ T8710] ? __kmalloc_node_track_caller+0x3c/0x60 [ 775.782322][ T8710] __kmalloc_node_track_caller+0x3c/0x60 [ 775.787967][ T8710] ? __ip_append_data+0x2077/0x31a0 [ 775.793189][ T8710] __alloc_skb+0xe8/0x500 [ 775.797572][ T8710] __ip_append_data+0x2077/0x31a0 [ 775.797592][ T8710] ? do_raw_getsockopt+0x1c0/0x1c0 [ 775.807752][ T8710] ip_append_data+0x11c/0x190 [ 775.812444][ T8710] ? do_raw_getsockopt+0x1c0/0x1c0 [ 775.817570][ T8710] raw_sendmsg+0x1d9e/0x3790 [ 775.822189][ T8710] ? __kasan_check_read+0x11/0x20 [ 775.827243][ T8710] inet_sendmsg+0x147/0x310 [ 775.831756][ T8710] ? security_socket_sendmsg+0xa0/0xd0 [ 775.837327][ T8710] ? inet_send_prepare+0x250/0x250 [ 775.842435][ T8710] kernel_sendmsg+0x109/0x140 [ 775.847279][ T8710] sock_no_sendpage+0x100/0x140 [ 775.852299][ T8710] inet_sendpage+0x18c/0x340 [ 775.856908][ T8710] ? inet_sendmsg+0x310/0x310 [ 775.861724][ T8710] sock_sendpage+0xd3/0x120 [ 775.866224][ T8710] pipe_to_sendpage+0x1f9/0x2a0 [ 775.871186][ T8710] ? sock_fasync+0x100/0x100 [ 775.875783][ T8710] __splice_from_pipe+0x2f7/0x8a0 [ 775.880814][ T8710] ? generic_splice_sendpage+0x180/0x180 [ 775.886537][ T8710] generic_splice_sendpage+0x114/0x180 [ 775.891988][ T8710] ? iter_file_splice_write+0xe20/0xe20 [ 775.897678][ T8710] __se_sys_splice+0x71a/0x1ac0 [ 775.902527][ T8710] ? check_preemption_disabled+0xb7/0x2a0 [ 775.908271][ T8710] ? debug_smp_processor_id+0x1c/0x20 [ 775.913676][ T8710] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 775.919755][ T8710] __x64_sys_splice+0xe5/0x100 [ 775.924522][ T8710] do_syscall_64+0xf7/0x1c0 [ 775.929014][ T8710] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 775.934895][ T8710] RIP: 0033:0x459f49 [ 775.938786][ T8710] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 775.958384][ T8710] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 775.966800][ T8710] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 775.974757][ T8710] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 775.982723][ T8710] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 775.991031][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 775.999204][ T8710] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:41 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xfffffff7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x6, 0x9}, &(0x7f0000000200)=0x90) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 02:42:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000340)}], 0x2) 02:42:41 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1000000, 0x0) [ 776.176799][ T8728] [EXFAT] trying to mount... [ 776.192076][ T8728] [EXFAT] ffsMountVol failed 02:42:41 executing program 5 (fault-call:7 fault-nth:10): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:41 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8736, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:41 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b666e646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:41 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2000000, 0x0) 02:42:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000340)}], 0x2) [ 776.525913][ T8738] [EXFAT] trying to mount... 02:42:41 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b666f646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000340)}], 0x2) [ 776.551597][ T8738] [EXFAT] ffsMountVol failed 02:42:41 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2040000, 0x0) [ 776.617670][ T8750] FAULT_INJECTION: forcing a failure. [ 776.617670][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 776.647375][ T8750] CPU: 0 PID: 8750 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 776.655244][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.665332][ T8750] Call Trace: [ 776.668659][ T8750] dump_stack+0x1d8/0x2f8 [ 776.673036][ T8750] should_fail+0x555/0x770 [ 776.677585][ T8750] __should_failslab+0x11a/0x160 [ 776.677602][ T8750] ? skb_clone+0x1cc/0x380 [ 776.687051][ T8750] should_failslab+0x9/0x20 [ 776.691571][ T8750] kmem_cache_alloc+0x56/0x2e0 [ 776.696352][ T8750] ? nf_hook+0x2ba/0x310 [ 776.700608][ T8750] skb_clone+0x1cc/0x380 [ 776.704864][ T8750] ip_mc_output+0x24e/0x620 [ 776.709383][ T8750] ip_send_skb+0x126/0x1e0 02:42:41 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x3000000, 0x0) [ 776.713809][ T8750] ip_push_pending_frames+0x66/0x80 [ 776.719020][ T8750] raw_sendmsg+0x1e06/0x3790 [ 776.723631][ T8750] ? __kasan_check_read+0x11/0x20 [ 776.728682][ T8750] inet_sendmsg+0x147/0x310 [ 776.733198][ T8750] ? security_socket_sendmsg+0xa0/0xd0 [ 776.738672][ T8750] ? inet_send_prepare+0x250/0x250 [ 776.743800][ T8750] kernel_sendmsg+0x109/0x140 [ 776.748488][ T8750] sock_no_sendpage+0x100/0x140 [ 776.754096][ T8750] inet_sendpage+0x18c/0x340 [ 776.758697][ T8750] ? inet_sendmsg+0x310/0x310 [ 776.763389][ T8750] sock_sendpage+0xd3/0x120 [ 776.768090][ T8750] pipe_to_sendpage+0x1f9/0x2a0 [ 776.772940][ T8750] ? sock_fasync+0x100/0x100 [ 776.772952][ T8750] __splice_from_pipe+0x2f7/0x8a0 [ 776.772962][ T8750] ? generic_splice_sendpage+0x180/0x180 [ 776.772981][ T8750] generic_splice_sendpage+0x114/0x180 [ 776.772993][ T8750] ? iter_file_splice_write+0xe20/0xe20 [ 776.773003][ T8750] __se_sys_splice+0x71a/0x1ac0 [ 776.773023][ T8750] ? check_preemption_disabled+0xb7/0x2a0 [ 776.773035][ T8750] ? debug_smp_processor_id+0x1c/0x20 [ 776.773046][ T8750] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 776.773067][ T8750] __x64_sys_splice+0xe5/0x100 [ 776.773082][ T8750] do_syscall_64+0xf7/0x1c0 [ 776.773097][ T8750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 776.830763][ T8757] [EXFAT] trying to mount... [ 776.836405][ T8750] RIP: 0033:0x459f49 [ 776.836417][ T8750] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 776.836422][ T8750] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 776.836432][ T8750] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 776.836438][ T8750] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 776.836443][ T8750] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 776.836449][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 776.836454][ T8750] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 776.904634][ T8757] [EXFAT] ffsMountVol failed 02:42:41 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="9b3648e5e19f", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:42:41 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8737, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x2) [ 777.107523][ T8770] 9pnet: Insufficient options for proto=fd [ 777.115970][ T8770] 9pnet: Insufficient options for proto=fd 02:42:42 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4000000, 0x0) 02:42:42 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8738, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:42 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6670646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:42 executing program 5 (fault-call:7 fault-nth:11): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x2) 02:42:42 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'\x00', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x2) [ 777.456489][ T8785] [EXFAT] trying to mount... 02:42:42 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6674646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 777.488630][ T8782] 9pnet: Insufficient options for proto=fd [ 777.494694][ T8785] [EXFAT] ffsMountVol failed [ 777.553125][ T8793] FAULT_INJECTION: forcing a failure. [ 777.553125][ T8793] name failslab, interval 1, probability 0, space 0, times 0 [ 777.566394][ T8793] CPU: 0 PID: 8793 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 777.574249][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 777.585719][ T8793] Call Trace: [ 777.589035][ T8793] dump_stack+0x1d8/0x2f8 [ 777.593389][ T8793] should_fail+0x555/0x770 [ 777.597867][ T8793] __should_failslab+0x11a/0x160 [ 777.602826][ T8793] should_failslab+0x9/0x20 [ 777.607351][ T8793] kmem_cache_alloc_node+0x65/0x280 [ 777.612556][ T8793] ? __alloc_skb+0x9f/0x500 [ 777.612610][ T8793] ? mark_lock+0x107/0x1650 [ 777.612623][ T8793] __alloc_skb+0x9f/0x500 [ 777.612641][ T8793] __pskb_copy_fclone+0xac/0x12b0 [ 777.612652][ T8793] ? lockdep_hardirqs_on+0x295/0x7d0 [ 777.612671][ T8793] hsr_forward_skb+0xca9/0x2040 [ 777.612694][ T8793] ? hsr_port_get_hsr+0xc6/0xf0 [ 777.625997][ T8793] hsr_dev_xmit+0x77/0x90 02:42:42 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x5000000, 0x0) 02:42:42 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8739, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:42 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000140)=""/224) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x80, 0xff, &(0x7f0000000040)=0xfffffffffffffff7}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}}) [ 777.650810][ T8793] dev_hard_start_xmit+0x1c1/0x3f0 [ 777.656063][ T8793] __dev_queue_xmit+0x1e53/0x3010 [ 777.661152][ T8793] dev_queue_xmit+0x17/0x20 [ 777.665703][ T8793] neigh_connected_output+0x3df/0x410 [ 777.672216][ T8793] ip_finish_output2+0x13be/0x18d0 [ 777.672227][ T8793] ? ip_fraglist_prepare+0x2e5/0x590 02:42:42 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6675646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 777.672244][ T8793] ip_do_fragment+0x1528/0x1d10 [ 777.672253][ T8793] ? ip_fragment+0x210/0x210 [ 777.672275][ T8793] ? rcu_lock_release+0xd/0x30 [ 777.672282][ T8793] ? ipv4_mtu+0x2bc/0x3c0 [ 777.672294][ T8793] ip_fragment+0x11f/0x210 [ 777.672306][ T8793] __ip_finish_output+0x3fc/0x4b0 [ 777.672319][ T8793] ip_finish_output+0x52/0x1e0 [ 777.672327][ T8793] ? ip_mc_output+0x4c6/0x620 [ 777.672338][ T8793] ip_mc_output+0x4db/0x620 [ 777.672351][ T8793] ip_send_skb+0x126/0x1e0 [ 777.672363][ T8793] ip_push_pending_frames+0x66/0x80 [ 777.672376][ T8793] raw_sendmsg+0x1e06/0x3790 [ 777.672405][ T8793] ? __kasan_check_read+0x11/0x20 [ 777.672428][ T8793] inet_sendmsg+0x147/0x310 [ 777.672439][ T8793] ? security_socket_sendmsg+0xa0/0xd0 [ 777.672448][ T8793] ? inet_send_prepare+0x250/0x250 [ 777.672461][ T8793] kernel_sendmsg+0x109/0x140 [ 777.672474][ T8793] sock_no_sendpage+0x100/0x140 [ 777.672494][ T8793] inet_sendpage+0x18c/0x340 [ 777.672505][ T8793] ? inet_sendmsg+0x310/0x310 [ 777.672514][ T8793] sock_sendpage+0xd3/0x120 [ 777.672529][ T8793] pipe_to_sendpage+0x1f9/0x2a0 [ 777.672537][ T8793] ? sock_fasync+0x100/0x100 [ 777.672549][ T8793] __splice_from_pipe+0x2f7/0x8a0 [ 777.672560][ T8793] ? generic_splice_sendpage+0x180/0x180 [ 777.672581][ T8793] generic_splice_sendpage+0x114/0x180 [ 777.672593][ T8793] ? iter_file_splice_write+0xe20/0xe20 [ 777.672603][ T8793] __se_sys_splice+0x71a/0x1ac0 [ 777.672619][ T8793] ? check_preemption_disabled+0xb7/0x2a0 [ 777.672632][ T8793] ? debug_smp_processor_id+0x1c/0x20 [ 777.672643][ T8793] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 777.672662][ T8793] __x64_sys_splice+0xe5/0x100 [ 777.672677][ T8793] do_syscall_64+0xf7/0x1c0 [ 777.672691][ T8793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 777.672701][ T8793] RIP: 0033:0x459f49 [ 777.672711][ T8793] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 777.672715][ T8793] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 777.672723][ T8793] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 777.672728][ T8793] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 777.672733][ T8793] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 777.672737][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 777.672742][ T8793] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 777.808412][ T8808] [EXFAT] trying to mount... [ 777.811571][ T8808] [EXFAT] ffsMountVol failed 02:42:43 executing program 5 (fault-call:7 fault-nth:12): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:43 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:43 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6000000, 0x0) 02:42:43 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6678646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:43 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da", 0x3}, {&(0x7f0000000340)}], 0x2) 02:42:43 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b667a646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 778.391982][ T8823] [EXFAT] trying to mount... [ 778.411717][ T8823] [EXFAT] ffsMountVol failed 02:42:43 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:43 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da", 0x3}, {&(0x7f0000000340)}], 0x2) 02:42:43 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6040000, 0x0) 02:42:43 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673116566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 778.484603][ T8831] FAULT_INJECTION: forcing a failure. [ 778.484603][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 778.497328][ T8831] CPU: 0 PID: 8831 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 778.505143][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 778.515227][ T8831] Call Trace: [ 778.518543][ T8831] dump_stack+0x1d8/0x2f8 [ 778.522897][ T8831] should_fail+0x555/0x770 [ 778.527342][ T8831] __should_failslab+0x11a/0x160 [ 778.532298][ T8831] should_failslab+0x9/0x20 [ 778.536803][ T8831] kmem_cache_alloc_node+0x65/0x280 [ 778.542014][ T8831] ? __alloc_skb+0x9f/0x500 [ 778.546545][ T8831] ? mark_lock+0x107/0x1650 [ 778.551107][ T8831] __alloc_skb+0x9f/0x500 [ 778.555472][ T8831] __pskb_copy_fclone+0xac/0x12b0 [ 778.560514][ T8831] ? lockdep_hardirqs_on+0x295/0x7d0 [ 778.565832][ T8831] hsr_forward_skb+0xca9/0x2040 [ 778.570710][ T8831] ? hsr_port_get_hsr+0xc6/0xf0 [ 778.575577][ T8831] hsr_dev_xmit+0x77/0x90 [ 778.579933][ T8831] dev_hard_start_xmit+0x1c1/0x3f0 [ 778.579953][ T8831] __dev_queue_xmit+0x1e53/0x3010 [ 778.579978][ T8831] dev_queue_xmit+0x17/0x20 [ 778.594607][ T8831] neigh_connected_output+0x3df/0x410 [ 778.594632][ T8831] ip_finish_output2+0x13be/0x18d0 [ 778.594641][ T8831] ? ip_fraglist_prepare+0x2e5/0x590 02:42:43 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="0100ffffffffffff", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:42:43 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7000000, 0x0) [ 778.594660][ T8831] ip_do_fragment+0x1528/0x1d10 [ 778.594669][ T8831] ? ip_fragment+0x210/0x210 [ 778.594693][ T8831] ? rcu_lock_release+0xd/0x30 [ 778.594702][ T8831] ? ipv4_mtu+0x2bc/0x3c0 [ 778.594714][ T8831] ip_fragment+0x11f/0x210 [ 778.594728][ T8831] __ip_finish_output+0x3fc/0x4b0 [ 778.594742][ T8831] ip_finish_output+0x52/0x1e0 [ 778.594751][ T8831] ? ip_mc_output+0x4c6/0x620 [ 778.594763][ T8831] ip_mc_output+0x4db/0x620 [ 778.594783][ T8831] ip_send_skb+0x126/0x1e0 [ 778.594798][ T8831] ip_push_pending_frames+0x66/0x80 [ 778.594813][ T8831] raw_sendmsg+0x1e06/0x3790 [ 778.594846][ T8831] ? __kasan_check_read+0x11/0x20 [ 778.594871][ T8831] inet_sendmsg+0x147/0x310 [ 778.594884][ T8831] ? security_socket_sendmsg+0xa0/0xd0 [ 778.594894][ T8831] ? inet_send_prepare+0x250/0x250 [ 778.594907][ T8831] kernel_sendmsg+0x109/0x140 [ 778.594920][ T8831] sock_no_sendpage+0x100/0x140 [ 778.594941][ T8831] inet_sendpage+0x18c/0x340 [ 778.594953][ T8831] ? inet_sendmsg+0x310/0x310 [ 778.594963][ T8831] sock_sendpage+0xd3/0x120 [ 778.594980][ T8831] pipe_to_sendpage+0x1f9/0x2a0 [ 778.594988][ T8831] ? sock_fasync+0x100/0x100 [ 778.595002][ T8831] __splice_from_pipe+0x2f7/0x8a0 [ 778.595014][ T8831] ? generic_splice_sendpage+0x180/0x180 [ 778.595037][ T8831] generic_splice_sendpage+0x114/0x180 [ 778.595051][ T8831] ? iter_file_splice_write+0xe20/0xe20 [ 778.595062][ T8831] __se_sys_splice+0x71a/0x1ac0 [ 778.595077][ T8831] ? check_preemption_disabled+0xb7/0x2a0 [ 778.595091][ T8831] ? debug_smp_processor_id+0x1c/0x20 [ 778.595102][ T8831] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 778.595122][ T8831] __x64_sys_splice+0xe5/0x100 [ 778.595139][ T8831] do_syscall_64+0xf7/0x1c0 [ 778.595154][ T8831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 778.595177][ T8831] RIP: 0033:0x459f49 [ 778.595188][ T8831] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 778.595193][ T8831] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 778.595204][ T8831] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 778.595209][ T8831] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 778.595215][ T8831] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 778.595220][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 778.595226][ T8831] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 778.832007][ T8849] [EXFAT] trying to mount... [ 778.844956][ T8850] 9pnet: Insufficient options for proto=fd [ 778.855339][ T8849] [EXFAT] ffsMountVol failed 02:42:44 executing program 5 (fault-call:7 fault-nth:13): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:44 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:44 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b66735c6566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:44 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) exit(0x7) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x4, 0x200) r1 = creat(&(0x7f0000000080)='./bus\x00', 0xcb) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x8}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x8000, 0x0, 0x8, 0x6, 0x14, 0x6f, 0x6, 0x80, 0xfffffffd, 0x34, 0x2, 0x7}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,\x00\x00\x00\x00\x00=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c70726976706f72742c020000000000000061702c76657273696f73733d757365722c6163636573733d636c69656e742c76657273696f6e3d3970323030302c616669643d30783030303030303030303030303066ec06b7e5"]) 02:42:44 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x8000000, 0x0) 02:42:44 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da", 0x3}, {&(0x7f0000000340)}], 0x2) 02:42:44 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00", 0x4}, {&(0x7f0000000340)}], 0x2) 02:42:44 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673642566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:44 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x9000000, 0x0) [ 779.326455][ T8862] [EXFAT] trying to mount... [ 779.339513][ T8862] [EXFAT] ffsMountVol failed [ 779.380326][ T8871] FAULT_INJECTION: forcing a failure. [ 779.380326][ T8871] name failslab, interval 1, probability 0, space 0, times 0 [ 779.393218][ T8871] CPU: 0 PID: 8871 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 779.401032][ T8871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 779.411090][ T8871] Call Trace: [ 779.411113][ T8871] dump_stack+0x1d8/0x2f8 [ 779.411131][ T8871] should_fail+0x555/0x770 [ 779.411158][ T8871] __should_failslab+0x11a/0x160 [ 779.428118][ T8871] should_failslab+0x9/0x20 [ 779.432650][ T8871] kmem_cache_alloc_node+0x65/0x280 [ 779.437952][ T8871] ? __alloc_skb+0x9f/0x500 [ 779.442467][ T8871] __alloc_skb+0x9f/0x500 [ 779.446815][ T8871] __pskb_copy_fclone+0xac/0x12b0 [ 779.451850][ T8871] ? hsr_addr_subst_dest+0x211/0x4b0 [ 779.457146][ T8871] hsr_forward_skb+0xca9/0x2040 [ 779.462020][ T8871] hsr_dev_xmit+0x77/0x90 [ 779.467234][ T8871] dev_hard_start_xmit+0x1c1/0x3f0 [ 779.472360][ T8871] __dev_queue_xmit+0x1e53/0x3010 [ 779.473874][ T8877] 9pnet: Insufficient options for proto=fd [ 779.477405][ T8871] dev_queue_xmit+0x17/0x20 [ 779.477423][ T8871] neigh_connected_output+0x3df/0x410 [ 779.493153][ T8871] ip_finish_output2+0x13be/0x18d0 [ 779.498288][ T8871] ip_do_fragment+0x9bf/0x1d10 [ 779.502577][ T8878] [EXFAT] trying to mount... [ 779.503059][ T8871] ? ip_fragment+0x210/0x210 [ 779.512227][ T8871] ? ip_route_input_rcu+0xf20/0x4da0 [ 779.514672][ T8878] [EXFAT] ffsMountVol failed [ 779.517513][ T8871] ip_fragment+0x11f/0x210 [ 779.517532][ T8871] __ip_finish_output+0x3fc/0x4b0 [ 779.531515][ T8871] ip_finish_output+0x52/0x1e0 [ 779.536260][ T8871] ? ip_mc_output+0x4c6/0x620 [ 779.540916][ T8871] ip_mc_output+0x4db/0x620 [ 779.545398][ T8871] ip_send_skb+0x126/0x1e0 [ 779.550067][ T8871] ip_push_pending_frames+0x66/0x80 [ 779.555250][ T8871] raw_sendmsg+0x1e06/0x3790 [ 779.559841][ T8871] ? __kasan_check_read+0x11/0x20 [ 779.564851][ T8871] inet_sendmsg+0x147/0x310 [ 779.569333][ T8871] ? security_socket_sendmsg+0xa0/0xd0 [ 779.574789][ T8871] ? inet_send_prepare+0x250/0x250 [ 779.579877][ T8871] kernel_sendmsg+0x109/0x140 [ 779.584548][ T8871] sock_no_sendpage+0x100/0x140 [ 779.589392][ T8871] inet_sendpage+0x18c/0x340 [ 779.593958][ T8871] ? inet_sendmsg+0x310/0x310 [ 779.598623][ T8871] sock_sendpage+0xd3/0x120 [ 779.603114][ T8871] pipe_to_sendpage+0x1f9/0x2a0 [ 779.607954][ T8871] ? sock_fasync+0x100/0x100 [ 779.612534][ T8871] __splice_from_pipe+0x2f7/0x8a0 [ 779.617710][ T8871] ? generic_splice_sendpage+0x180/0x180 [ 779.623327][ T8871] generic_splice_sendpage+0x114/0x180 [ 779.628857][ T8871] ? iter_file_splice_write+0xe20/0xe20 [ 779.634381][ T8871] __se_sys_splice+0x71a/0x1ac0 [ 779.639242][ T8871] ? check_preemption_disabled+0xb7/0x2a0 [ 779.644939][ T8871] ? debug_smp_processor_id+0x1c/0x20 [ 779.650288][ T8871] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 779.656351][ T8871] __x64_sys_splice+0xe5/0x100 [ 779.661105][ T8871] do_syscall_64+0xf7/0x1c0 [ 779.665587][ T8871] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 779.671458][ T8871] RIP: 0033:0x459f49 [ 779.675331][ T8871] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 779.695264][ T8871] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 779.703650][ T8871] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 779.711598][ T8871] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 779.719547][ T8871] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:42:44 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673645c66465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 779.729143][ T8871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 779.737094][ T8871] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:44 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xa000000, 0x0) 02:42:44 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 779.918413][ T8889] [EXFAT] trying to mount... [ 779.924847][ T8889] [EXFAT] ffsMountVol failed 02:42:45 executing program 5 (fault-call:7 fault-nth:14): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:45 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00", 0x4}, {&(0x7f0000000340)}], 0x2) 02:42:45 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xb000000, 0x0) 02:42:45 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646525465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:45 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:45 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trus|ed.overlay.redirect\x00', &(0x7f0000000140)='./bus\x00', 0x6, 0x1) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000001c0)={0xf3fd, 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/hci\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000300)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)=0xae82, 0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 02:42:45 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b667364652e465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 780.258545][ T8905] [EXFAT] trying to mount... 02:42:45 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00", 0x4}, {&(0x7f0000000340)}], 0x2) [ 780.284320][ T8905] [EXFAT] ffsMountVol failed [ 780.315387][ T8911] FAULT_INJECTION: forcing a failure. [ 780.315387][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 780.328092][ T8911] CPU: 0 PID: 8911 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 780.335996][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.346055][ T8911] Call Trace: [ 780.349465][ T8911] dump_stack+0x1d8/0x2f8 [ 780.353818][ T8911] should_fail+0x555/0x770 [ 780.358257][ T8911] __should_failslab+0x11a/0x160 [ 780.363204][ T8911] should_failslab+0x9/0x20 [ 780.367703][ T8911] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 780.373426][ T8911] ? __kmalloc_node_track_caller+0x3c/0x60 [ 780.379581][ T8911] __kmalloc_node_track_caller+0x3c/0x60 [ 780.385316][ T8911] ? __pskb_copy_fclone+0xac/0x12b0 [ 780.390625][ T8911] __alloc_skb+0xe8/0x500 [ 780.394960][ T8911] __pskb_copy_fclone+0xac/0x12b0 [ 780.400035][ T8911] ? lockdep_hardirqs_on+0x295/0x7d0 [ 780.405465][ T8911] hsr_forward_skb+0xca9/0x2040 [ 780.410404][ T8911] ? hsr_port_get_hsr+0xc6/0xf0 [ 780.415253][ T8911] hsr_dev_xmit+0x77/0x90 [ 780.419659][ T8911] dev_hard_start_xmit+0x1c1/0x3f0 [ 780.424781][ T8911] __dev_queue_xmit+0x1e53/0x3010 [ 780.430020][ T8911] dev_queue_xmit+0x17/0x20 [ 780.434619][ T8911] neigh_connected_output+0x3df/0x410 [ 780.440039][ T8911] ip_finish_output2+0x13be/0x18d0 [ 780.445162][ T8911] ? ip_fraglist_prepare+0x300/0x590 [ 780.450541][ T8911] ip_do_fragment+0x1528/0x1d10 [ 780.455427][ T8911] ? ip_fragment+0x210/0x210 [ 780.460044][ T8911] ? rcu_lock_release+0xd/0x30 [ 780.464810][ T8911] ? ipv4_mtu+0x2bc/0x3c0 [ 780.469153][ T8911] ip_fragment+0x11f/0x210 [ 780.473588][ T8911] __ip_finish_output+0x3fc/0x4b0 [ 780.478616][ T8911] ip_finish_output+0x52/0x1e0 [ 780.483388][ T8911] ? ip_mc_output+0x4c6/0x620 [ 780.488169][ T8911] ip_mc_output+0x4db/0x620 [ 780.492682][ T8911] ip_send_skb+0x126/0x1e0 [ 780.497111][ T8911] ip_push_pending_frames+0x66/0x80 [ 780.502504][ T8911] raw_sendmsg+0x1e06/0x3790 [ 780.507101][ T8911] ? __kasan_check_read+0x11/0x20 [ 780.512254][ T8911] inet_sendmsg+0x147/0x310 [ 780.516752][ T8911] ? security_socket_sendmsg+0xa0/0xd0 [ 780.522214][ T8911] ? inet_send_prepare+0x250/0x250 [ 780.527324][ T8911] kernel_sendmsg+0x109/0x140 [ 780.532129][ T8911] sock_no_sendpage+0x100/0x140 [ 780.537006][ T8911] inet_sendpage+0x18c/0x340 [ 780.541590][ T8911] ? inet_sendmsg+0x310/0x310 [ 780.546340][ T8911] sock_sendpage+0xd3/0x120 [ 780.550853][ T8911] pipe_to_sendpage+0x1f9/0x2a0 [ 780.556053][ T8911] ? sock_fasync+0x100/0x100 [ 780.560641][ T8911] __splice_from_pipe+0x2f7/0x8a0 [ 780.565658][ T8911] ? generic_splice_sendpage+0x180/0x180 [ 780.571462][ T8911] generic_splice_sendpage+0x114/0x180 [ 780.576996][ T8911] ? iter_file_splice_write+0xe20/0xe20 [ 780.582527][ T8911] __se_sys_splice+0x71a/0x1ac0 [ 780.587461][ T8911] ? check_preemption_disabled+0xb7/0x2a0 [ 780.593442][ T8911] ? debug_smp_processor_id+0x1c/0x20 [ 780.598820][ T8911] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 780.604903][ T8911] __x64_sys_splice+0xe5/0x100 [ 780.609664][ T8911] do_syscall_64+0xf7/0x1c0 [ 780.614161][ T8911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 780.620053][ T8911] RIP: 0033:0x459f49 [ 780.623943][ T8911] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 780.643630][ T8911] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 780.652048][ T8911] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 02:42:45 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b667364652f465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:45 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xc000000, 0x0) [ 780.660018][ T8911] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 780.667979][ T8911] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 780.676646][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 780.685737][ T8911] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:45 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x873f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:45 executing program 0 (fault-call:4 fault-nth:0): r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 780.846909][ T8924] [EXFAT] trying to mount... [ 780.858737][ T8924] [EXFAT] ffsMountVol failed [ 780.901974][ T8928] FAULT_INJECTION: forcing a failure. [ 780.901974][ T8928] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 780.923097][ T8928] CPU: 1 PID: 8928 Comm: syz-executor.0 Not tainted 5.4.0-rc5+ #0 [ 780.931043][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 780.941129][ T8928] Call Trace: [ 780.944443][ T8928] dump_stack+0x1d8/0x2f8 [ 780.948910][ T8928] should_fail+0x555/0x770 [ 780.953342][ T8928] should_fail_alloc_page+0x55/0x60 [ 780.958578][ T8928] prepare_alloc_pages+0x283/0x460 [ 780.963713][ T8928] __alloc_pages_nodemask+0xb2/0x5d0 [ 780.969120][ T8928] alloc_pages_current+0x2db/0x500 [ 780.974361][ T8928] __get_free_pages+0xc/0x30 [ 780.979258][ T8928] vcs_write+0x70/0xcc0 [ 780.983545][ T8928] ? security_file_permission+0x148/0x350 [ 780.989268][ T8928] ? rw_verify_area+0x1c2/0x360 [ 780.994144][ T8928] do_iter_write+0x454/0x590 [ 780.998863][ T8928] do_writev+0x239/0x490 [ 781.003140][ T8928] ? prepare_exit_to_usermode+0x1f7/0x580 [ 781.008873][ T8928] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 781.014701][ T8928] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 781.020184][ T8928] ? trace_irq_disable_rcuidle+0x23/0x1e0 [ 781.025921][ T8928] ? do_syscall_64+0x1d/0x1c0 [ 781.030644][ T8928] __x64_sys_writev+0x7d/0x90 [ 781.035335][ T8928] do_syscall_64+0xf7/0x1c0 [ 781.039847][ T8928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.045736][ T8928] RIP: 0033:0x459f49 [ 781.049632][ T8928] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.069247][ T8928] RSP: 002b:00007f73e2c58c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 781.077753][ T8928] RAX: ffffffffffffffda RBX: 00007f73e2c58c90 RCX: 0000000000459f49 [ 781.085921][ T8928] RDX: 0000000000000002 RSI: 0000000020000040 RDI: 0000000000000003 [ 781.093902][ T8928] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 02:42:46 executing program 5 (fault-call:7 fault-nth:15): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:46 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b667364655c465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:46 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xd000000, 0x0) [ 781.101883][ T8928] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f73e2c596d4 [ 781.109857][ T8928] R13: 00000000004c76d0 R14: 00000000004e2ac0 R15: 0000000000000006 02:42:46 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8740, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:46 executing program 0 (fault-call:4 fault-nth:1): r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:46 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e1f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:syslogd_initrc_exec_t:s0\x00', 0x2b, 0x2) [ 781.203429][ T8939] [EXFAT] trying to mount... 02:42:46 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b66736465663d5d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 781.253135][ T8939] [EXFAT] ffsMountVol failed [ 781.307278][ T8949] FAULT_INJECTION: forcing a failure. [ 781.307278][ T8949] name failslab, interval 1, probability 0, space 0, times 0 [ 781.319964][ T8949] CPU: 1 PID: 8949 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 781.327785][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.338143][ T8949] Call Trace: [ 781.338174][ T8949] dump_stack+0x1d8/0x2f8 [ 781.345792][ T8949] should_fail+0x555/0x770 [ 781.350242][ T8949] __should_failslab+0x11a/0x160 [ 781.355223][ T8949] should_failslab+0x9/0x20 [ 781.355240][ T8949] kmem_cache_alloc_node+0x65/0x280 [ 781.355254][ T8949] ? __alloc_skb+0x9f/0x500 [ 781.355268][ T8949] __alloc_skb+0x9f/0x500 [ 781.355286][ T8949] __pskb_copy_fclone+0xac/0x12b0 [ 781.355305][ T8949] ? hsr_addr_subst_dest+0x211/0x4b0 [ 781.355321][ T8949] hsr_forward_skb+0xca9/0x2040 [ 781.355351][ T8949] hsr_dev_xmit+0x77/0x90 [ 781.355364][ T8949] dev_hard_start_xmit+0x1c1/0x3f0 [ 781.355384][ T8949] __dev_queue_xmit+0x1e53/0x3010 [ 781.355412][ T8949] dev_queue_xmit+0x17/0x20 [ 781.355423][ T8949] neigh_connected_output+0x3df/0x410 [ 781.355457][ T8949] ip_finish_output2+0x13be/0x18d0 [ 781.355469][ T8949] ? ip_fraglist_prepare+0x300/0x590 [ 781.355489][ T8949] ip_do_fragment+0x1528/0x1d10 [ 781.355501][ T8949] ? ip_fragment+0x210/0x210 [ 781.355526][ T8949] ? rcu_lock_release+0xd/0x30 [ 781.355536][ T8949] ? ipv4_mtu+0x2bc/0x3c0 [ 781.355549][ T8949] ip_fragment+0x11f/0x210 [ 781.355561][ T8949] __ip_finish_output+0x3fc/0x4b0 02:42:46 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xe000000, 0x0) [ 781.355575][ T8949] ip_finish_output+0x52/0x1e0 [ 781.355583][ T8949] ? ip_mc_output+0x4c6/0x620 [ 781.355594][ T8949] ip_mc_output+0x4db/0x620 [ 781.355608][ T8949] ip_send_skb+0x126/0x1e0 [ 781.355622][ T8949] ip_push_pending_frames+0x66/0x80 [ 781.355632][ T8949] raw_sendmsg+0x1e06/0x3790 [ 781.355659][ T8949] ? __kasan_check_read+0x11/0x20 [ 781.355681][ T8949] inet_sendmsg+0x147/0x310 [ 781.355693][ T8949] ? security_socket_sendmsg+0xa0/0xd0 [ 781.355704][ T8949] ? inet_send_prepare+0x250/0x250 [ 781.355718][ T8949] kernel_sendmsg+0x109/0x140 [ 781.355731][ T8949] sock_no_sendpage+0x100/0x140 [ 781.355752][ T8949] inet_sendpage+0x18c/0x340 [ 781.355765][ T8949] ? inet_sendmsg+0x310/0x310 [ 781.355776][ T8949] sock_sendpage+0xd3/0x120 [ 781.355792][ T8949] pipe_to_sendpage+0x1f9/0x2a0 [ 781.355805][ T8949] ? sock_fasync+0x100/0x100 [ 781.404853][ T8949] __splice_from_pipe+0x2f7/0x8a0 [ 781.404873][ T8949] ? generic_splice_sendpage+0x180/0x180 [ 781.425425][ T8949] generic_splice_sendpage+0x114/0x180 [ 781.425443][ T8949] ? iter_file_splice_write+0xe20/0xe20 [ 781.425455][ T8949] __se_sys_splice+0x71a/0x1ac0 [ 781.425472][ T8949] ? check_preemption_disabled+0xb7/0x2a0 [ 781.425487][ T8949] ? debug_smp_processor_id+0x1c/0x20 [ 781.425503][ T8949] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 781.496665][ T8955] [EXFAT] trying to mount... [ 781.497162][ T8949] __x64_sys_splice+0xe5/0x100 [ 781.497181][ T8949] do_syscall_64+0xf7/0x1c0 [ 781.497196][ T8949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.497206][ T8949] RIP: 0033:0x459f49 [ 781.497220][ T8949] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.503189][ T8955] [EXFAT] ffsMountVol failed [ 781.506988][ T8949] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 781.506999][ T8949] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 781.507005][ T8949] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:42:46 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b66736465665c5d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:46 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x10000000, 0x0) [ 781.507011][ T8949] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 781.507017][ T8949] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 781.507023][ T8949] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 781.557427][ T8957] 9pnet: Insufficient options for proto=fd 02:42:46 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:46 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d765c6e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 781.726071][ T8959] [EXFAT] trying to mount... [ 781.766496][ T8959] [EXFAT] ffsMountVol failed [ 781.767461][ T8948] 9pnet: Insufficient options for proto=fd 02:42:46 executing program 5 (fault-call:7 fault-nth:16): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:46 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8741, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:46 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000000)=0x670) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r3, 0x0, 0x111) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x5, 0x1, 0x7f, 0x3, 0x0, 0x2, 0x4000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd06e636, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x50804, 0x5, 0x6, 0x4, 0x0, 0x2, 0x1}, r3, 0x3, r0, 0xa) 02:42:46 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x11000000, 0x0) 02:42:46 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a85000d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:46 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76622578c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:47 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e25c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:47 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da02d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 782.151475][ T8981] [EXFAT] trying to mount... [ 782.163849][ T8981] [EXFAT] ffsMountVol failed 02:42:47 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x12000000, 0x0) [ 782.232200][ T8991] FAULT_INJECTION: forcing a failure. [ 782.232200][ T8991] name failslab, interval 1, probability 0, space 0, times 0 [ 782.244899][ T8991] CPU: 1 PID: 8991 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 782.252715][ T8991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.262883][ T8991] Call Trace: [ 782.266190][ T8991] dump_stack+0x1d8/0x2f8 [ 782.270665][ T8991] should_fail+0x555/0x770 [ 782.275219][ T8991] __should_failslab+0x11a/0x160 [ 782.280206][ T8991] should_failslab+0x9/0x20 [ 782.284751][ T8991] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 782.290503][ T8991] ? __kmalloc_node_track_caller+0x3c/0x60 [ 782.296358][ T8991] __kmalloc_node_track_caller+0x3c/0x60 [ 782.296368][ T8991] ? __pskb_copy_fclone+0xac/0x12b0 [ 782.296380][ T8991] __alloc_skb+0xe8/0x500 [ 782.296394][ T8991] __pskb_copy_fclone+0xac/0x12b0 [ 782.296410][ T8991] ? hsr_addr_subst_dest+0x211/0x4b0 [ 782.296427][ T8991] hsr_forward_skb+0xca9/0x2040 [ 782.296455][ T8991] hsr_dev_xmit+0x77/0x90 02:42:47 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8742, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:47 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7865e49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 782.296468][ T8991] dev_hard_start_xmit+0x1c1/0x3f0 [ 782.296488][ T8991] __dev_queue_xmit+0x1e53/0x3010 [ 782.296521][ T8991] dev_queue_xmit+0x17/0x20 [ 782.296533][ T8991] neigh_connected_output+0x3df/0x410 [ 782.296575][ T8991] ip_finish_output2+0x13be/0x18d0 [ 782.356451][ T8991] ? ip_fraglist_prepare+0x300/0x590 [ 782.356469][ T8991] ip_do_fragment+0x1528/0x1d10 [ 782.366799][ T8991] ? ip_fragment+0x210/0x210 02:42:47 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f5ca4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 782.366818][ T8991] ? rcu_lock_release+0xd/0x30 [ 782.366825][ T8991] ? ipv4_mtu+0x2bc/0x3c0 [ 782.366834][ T8991] ip_fragment+0x11f/0x210 [ 782.366845][ T8991] __ip_finish_output+0x3fc/0x4b0 [ 782.366855][ T8991] ip_finish_output+0x52/0x1e0 [ 782.366861][ T8991] ? ip_mc_output+0x4c6/0x620 [ 782.366870][ T8991] ip_mc_output+0x4db/0x620 [ 782.366884][ T8991] ip_send_skb+0x126/0x1e0 [ 782.366898][ T8991] ip_push_pending_frames+0x66/0x80 [ 782.366912][ T8991] raw_sendmsg+0x1e06/0x3790 [ 782.366942][ T8991] ? __kasan_check_read+0x11/0x20 [ 782.366964][ T8991] inet_sendmsg+0x147/0x310 [ 782.366977][ T8991] ? security_socket_sendmsg+0xa0/0xd0 [ 782.366986][ T8991] ? inet_send_prepare+0x250/0x250 [ 782.366998][ T8991] kernel_sendmsg+0x109/0x140 [ 782.367010][ T8991] sock_no_sendpage+0x100/0x140 [ 782.367027][ T8991] inet_sendpage+0x18c/0x340 [ 782.367042][ T8991] ? inet_sendmsg+0x310/0x310 [ 782.367053][ T8991] sock_sendpage+0xd3/0x120 [ 782.367070][ T8991] pipe_to_sendpage+0x1f9/0x2a0 [ 782.367079][ T8991] ? sock_fasync+0x100/0x100 [ 782.367091][ T8991] __splice_from_pipe+0x2f7/0x8a0 [ 782.367102][ T8991] ? generic_splice_sendpage+0x180/0x180 [ 782.367124][ T8991] generic_splice_sendpage+0x114/0x180 [ 782.367136][ T8991] ? iter_file_splice_write+0xe20/0xe20 [ 782.367145][ T8991] __se_sys_splice+0x71a/0x1ac0 [ 782.367159][ T8991] ? check_preemption_disabled+0xb7/0x2a0 [ 782.367174][ T8991] ? debug_smp_processor_id+0x1c/0x20 [ 782.367186][ T8991] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 782.367207][ T8991] __x64_sys_splice+0xe5/0x100 [ 782.367222][ T8991] do_syscall_64+0xf7/0x1c0 [ 782.367234][ T8991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 782.367244][ T8991] RIP: 0033:0x459f49 [ 782.367254][ T8991] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.367259][ T8991] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 782.367269][ T8991] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 782.367274][ T8991] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 782.367279][ T8991] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 782.367285][ T8991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 782.367289][ T8991] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 782.510207][ T9004] [EXFAT] trying to mount... [ 782.511827][ T9004] [EXFAT] ffsMountVol failed 02:42:47 executing program 5 (fault-call:7 fault-nth:17): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:47 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8743, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:47 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a08b5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:47 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1b270000, 0x0) 02:42:47 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da04d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:47 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='\x00=\x00', 0x20, &(0x7f0000000300)={'\x00\xa0\x00', {'rfdno', 0x3d, r0}, 0x2c, {'c\x00', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_any='\x8ej\xc6\xafl\x04\x00'}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}]}}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x3, 0x201) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) sendto$llc(r4, &(0x7f0000000380)="daebe081b9ff8fd306883b37f77f95921a28d6b1f1903cd3f34110ae3e02422fc381182a905a8009d33bfce5bfed5f994aa910", 0x33, 0x40000, &(0x7f00000003c0)={0x1a, 0x0, 0x20, 0x1f, 0x80, 0x0, @random="9b6af8439d6a"}, 0x10) fcntl$dupfd(r3, 0xc0a, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xa4) bind$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x4, {0xff, 0x6, 0x8, 0x2, 0x8, 0x7f}, 0x3, 0x4}, 0xe) 02:42:48 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a09b5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:48 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1f3fffff, 0x0) 02:42:48 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da19d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 783.136573][ T9029] FAULT_INJECTION: forcing a failure. [ 783.136573][ T9029] name failslab, interval 1, probability 0, space 0, times 0 [ 783.149296][ T9029] CPU: 1 PID: 9029 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 783.157892][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.167961][ T9029] Call Trace: [ 783.171270][ T9029] dump_stack+0x1d8/0x2f8 [ 783.175634][ T9029] should_fail+0x555/0x770 [ 783.180071][ T9029] __should_failslab+0x11a/0x160 02:42:48 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a5cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 783.185029][ T9029] should_failslab+0x9/0x20 [ 783.189546][ T9029] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 783.195369][ T9029] ? __kmalloc_node_track_caller+0x3c/0x60 [ 783.201188][ T9029] __kmalloc_node_track_caller+0x3c/0x60 [ 783.206841][ T9029] ? __pskb_copy_fclone+0xac/0x12b0 [ 783.212061][ T9029] __alloc_skb+0xe8/0x500 [ 783.216407][ T9029] __pskb_copy_fclone+0xac/0x12b0 [ 783.221446][ T9029] ? hsr_addr_subst_dest+0x211/0x4b0 [ 783.226777][ T9029] hsr_forward_skb+0xca9/0x2040 [ 783.231688][ T9029] hsr_dev_xmit+0x77/0x90 02:42:48 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8744, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 783.231704][ T9029] dev_hard_start_xmit+0x1c1/0x3f0 [ 783.231724][ T9029] __dev_queue_xmit+0x1e53/0x3010 [ 783.231754][ T9029] dev_queue_xmit+0x17/0x20 02:42:48 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$vnet(r1, &(0x7f0000000040)={0x1, {&(0x7f0000000140)=""/225, 0xe1, &(0x7f00000002c0)=""/153, 0x0, 0x3}}, 0x68) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 783.231766][ T9029] neigh_connected_output+0x3df/0x410 [ 783.231792][ T9029] ip_finish_output2+0x13be/0x18d0 [ 783.231802][ T9029] ? ip_fraglist_prepare+0x2e5/0x590 [ 783.231821][ T9029] ip_do_fragment+0x1528/0x1d10 [ 783.231831][ T9029] ? ip_fragment+0x210/0x210 [ 783.231857][ T9029] ? rcu_lock_release+0xd/0x30 [ 783.231866][ T9029] ? ipv4_mtu+0x2bc/0x3c0 [ 783.231879][ T9029] ip_fragment+0x11f/0x210 [ 783.231893][ T9029] __ip_finish_output+0x3fc/0x4b0 [ 783.231908][ T9029] ip_finish_output+0x52/0x1e0 [ 783.231917][ T9029] ? ip_mc_output+0x4c6/0x620 [ 783.231930][ T9029] ip_mc_output+0x4db/0x620 [ 783.231945][ T9029] ip_send_skb+0x126/0x1e0 [ 783.231959][ T9029] ip_push_pending_frames+0x66/0x80 [ 783.231973][ T9029] raw_sendmsg+0x1e06/0x3790 [ 783.232007][ T9029] ? __kasan_check_read+0x11/0x20 [ 783.232038][ T9029] inet_sendmsg+0x147/0x310 [ 783.232051][ T9029] ? security_socket_sendmsg+0xa0/0xd0 [ 783.232062][ T9029] ? inet_send_prepare+0x250/0x250 [ 783.232076][ T9029] kernel_sendmsg+0x109/0x140 [ 783.232091][ T9029] sock_no_sendpage+0x100/0x140 [ 783.232113][ T9029] inet_sendpage+0x18c/0x340 [ 783.232125][ T9029] ? inet_sendmsg+0x310/0x310 [ 783.232136][ T9029] sock_sendpage+0xd3/0x120 [ 783.232154][ T9029] pipe_to_sendpage+0x1f9/0x2a0 [ 783.232163][ T9029] ? sock_fasync+0x100/0x100 [ 783.232177][ T9029] __splice_from_pipe+0x2f7/0x8a0 [ 783.232190][ T9029] ? generic_splice_sendpage+0x180/0x180 [ 783.232214][ T9029] generic_splice_sendpage+0x114/0x180 [ 783.232229][ T9029] ? iter_file_splice_write+0xe20/0xe20 [ 783.232241][ T9029] __se_sys_splice+0x71a/0x1ac0 [ 783.232257][ T9029] ? check_preemption_disabled+0xb7/0x2a0 [ 783.232271][ T9029] ? debug_smp_processor_id+0x1c/0x20 [ 783.232283][ T9029] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 783.232304][ T9029] __x64_sys_splice+0xe5/0x100 [ 783.232325][ T9029] do_syscall_64+0xf7/0x1c0 [ 783.232338][ T9029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.232349][ T9029] RIP: 0033:0x459f49 [ 783.232361][ T9029] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.232367][ T9029] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 783.232377][ T9029] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 783.232383][ T9029] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 783.232389][ T9029] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 783.232395][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 783.232401][ T9029] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:48 executing program 5 (fault-call:7 fault-nth:18): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:48 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da50d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:42:48 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1f400000, 0x0) 02:42:48 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e25e8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:48 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8745, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:48 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d5e175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:48 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0xfa4}, {&(0x7f0000000340)}], 0x2) [ 783.975307][ T9162] [EXFAT] trying to mount... [ 783.989438][ T9162] [EXFAT] ffsMountVol failed [ 784.035441][ T9166] FAULT_INJECTION: forcing a failure. [ 784.035441][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 784.048115][ T9166] CPU: 0 PID: 9166 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 784.056089][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.066149][ T9166] Call Trace: [ 784.069812][ T9166] dump_stack+0x1d8/0x2f8 [ 784.074154][ T9166] should_fail+0x555/0x770 [ 784.078579][ T9166] __should_failslab+0x11a/0x160 [ 784.078600][ T9166] should_failslab+0x9/0x20 [ 784.078617][ T9166] kmem_cache_alloc_node+0x65/0x280 [ 784.088039][ T9166] ? __alloc_skb+0x9f/0x500 [ 784.097710][ T9166] ? mark_lock+0x107/0x1650 [ 784.102213][ T9166] __alloc_skb+0x9f/0x500 [ 784.106552][ T9166] __pskb_copy_fclone+0xac/0x12b0 [ 784.111609][ T9166] ? lockdep_hardirqs_on+0x295/0x7d0 [ 784.116908][ T9166] hsr_forward_skb+0xca9/0x2040 [ 784.121770][ T9166] ? hsr_port_get_hsr+0xc6/0xf0 [ 784.126720][ T9166] hsr_dev_xmit+0x77/0x90 [ 784.131047][ T9166] dev_hard_start_xmit+0x1c1/0x3f0 [ 784.136171][ T9166] __dev_queue_xmit+0x1e53/0x3010 [ 784.136199][ T9166] dev_queue_xmit+0x17/0x20 [ 784.136215][ T9166] neigh_connected_output+0x3df/0x410 [ 784.151101][ T9166] ip_finish_output2+0x13be/0x18d0 [ 784.156222][ T9166] ? ip_fraglist_prepare+0x300/0x590 [ 784.161532][ T9166] ip_do_fragment+0x1528/0x1d10 [ 784.166386][ T9166] ? ip_fragment+0x210/0x210 [ 784.170994][ T9166] ? rcu_lock_release+0xd/0x30 [ 784.175754][ T9166] ? ipv4_mtu+0x2bc/0x3c0 [ 784.180087][ T9166] ip_fragment+0x11f/0x210 02:42:49 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x20000000, 0x0) 02:42:49 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8746, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:49 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d5e5844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 784.184501][ T9166] __ip_finish_output+0x3fc/0x4b0 [ 784.189528][ T9166] ip_finish_output+0x52/0x1e0 [ 784.194291][ T9166] ? ip_mc_output+0x4c6/0x620 [ 784.198982][ T9166] ip_mc_output+0x4db/0x620 [ 784.203489][ T9166] ip_send_skb+0x126/0x1e0 [ 784.207907][ T9166] ip_push_pending_frames+0x66/0x80 [ 784.213114][ T9166] raw_sendmsg+0x1e06/0x3790 [ 784.217739][ T9166] ? __kasan_check_read+0x11/0x20 [ 784.222779][ T9166] inet_sendmsg+0x147/0x310 [ 784.227317][ T9166] ? security_socket_sendmsg+0xa0/0xd0 [ 784.232807][ T9166] ? inet_send_prepare+0x250/0x250 [ 784.232836][ T9166] kernel_sendmsg+0x109/0x140 [ 784.232861][ T9166] sock_no_sendpage+0x100/0x140 [ 784.232888][ T9166] inet_sendpage+0x18c/0x340 [ 784.232907][ T9166] ? inet_sendmsg+0x310/0x310 [ 784.232919][ T9166] sock_sendpage+0xd3/0x120 [ 784.232935][ T9166] pipe_to_sendpage+0x1f9/0x2a0 [ 784.232948][ T9166] ? sock_fasync+0x100/0x100 [ 784.270969][ T9166] __splice_from_pipe+0x2f7/0x8a0 [ 784.270983][ T9166] ? generic_splice_sendpage+0x180/0x180 [ 784.271009][ T9166] generic_splice_sendpage+0x114/0x180 02:42:49 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x20100000, 0x0) 02:42:49 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=f=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7fff) [ 784.271024][ T9166] ? iter_file_splice_write+0xe20/0xe20 [ 784.271036][ T9166] __se_sys_splice+0x71a/0x1ac0 [ 784.271054][ T9166] ? check_preemption_disabled+0xb7/0x2a0 [ 784.271068][ T9166] ? debug_smp_processor_id+0x1c/0x20 [ 784.271082][ T9166] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 784.271103][ T9166] __x64_sys_splice+0xe5/0x100 [ 784.271122][ T9166] do_syscall_64+0xf7/0x1c0 [ 784.271137][ T9166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.271148][ T9166] RIP: 0033:0x459f49 [ 784.271158][ T9166] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.271164][ T9166] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 784.271174][ T9166] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 784.271180][ T9166] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 784.271186][ T9166] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 784.271192][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 784.271198][ T9166] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 784.335454][ T9178] [EXFAT] trying to mount... [ 784.335814][ T9178] [EXFAT] ffsMountVol failed [ 784.337581][ T9178] [EXFAT] trying to mount... [ 784.359035][ T9178] [EXFAT] ffsMountVol failed [ 784.461552][ T9184] 9pnet: Could not find request transport: f=0x0000000000000003 [ 784.532858][ T9184] 9pnet: Could not find request transport: f=0x0000000000000003 02:42:49 executing program 5 (fault-call:7 fault-nth:19): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:49 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8747, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:49 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d172544dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:49 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x25000000, 0x0) 02:42:49 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c77e7646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 02:42:49 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x20000085}, {&(0x7f0000000340)}], 0x2) 02:42:49 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x7ffff000}, {&(0x7f0000000340)}], 0x2) 02:42:49 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175e44dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 784.904414][ T9204] [EXFAT] trying to mount... [ 784.912681][ T9196] 9pnet: Insufficient options for proto=fd [ 784.915607][ T9204] [EXFAT] ffsMountVol failed [ 784.936119][ T9209] 9pnet: Insufficient options for proto=fd 02:42:49 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2e040000, 0x0) [ 784.954554][ T9211] FAULT_INJECTION: forcing a failure. [ 784.954554][ T9211] name failslab, interval 1, probability 0, space 0, times 0 [ 784.967781][ T9211] CPU: 1 PID: 9211 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 784.975678][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.985764][ T9211] Call Trace: [ 784.985785][ T9211] dump_stack+0x1d8/0x2f8 02:42:49 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000040)='rfdno', &(0x7f0000000080)='./file0\x00', r1) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',Wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 02:42:50 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8748, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 784.985800][ T9211] should_fail+0x555/0x770 02:42:50 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x3f000000, 0x0) [ 784.985815][ T9211] __should_failslab+0x11a/0x160 [ 784.985830][ T9211] should_failslab+0x9/0x20 [ 784.985842][ T9211] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 784.985850][ T9211] ? __kmalloc_node_track_caller+0x3c/0x60 [ 784.985860][ T9211] __kmalloc_node_track_caller+0x3c/0x60 [ 784.985868][ T9211] ? __pskb_copy_fclone+0xac/0x12b0 [ 784.985876][ T9211] __alloc_skb+0xe8/0x500 [ 784.985887][ T9211] __pskb_copy_fclone+0xac/0x12b0 [ 784.985897][ T9211] ? lockdep_hardirqs_on+0x295/0x7d0 [ 784.985911][ T9211] hsr_forward_skb+0xca9/0x2040 [ 784.985934][ T9211] ? hsr_port_get_hsr+0xc6/0xf0 [ 784.985944][ T9211] hsr_dev_xmit+0x77/0x90 [ 784.985955][ T9211] dev_hard_start_xmit+0x1c1/0x3f0 [ 784.985969][ T9211] __dev_queue_xmit+0x1e53/0x3010 [ 784.985988][ T9211] dev_queue_xmit+0x17/0x20 [ 784.985996][ T9211] neigh_connected_output+0x3df/0x410 [ 784.986013][ T9211] ip_finish_output2+0x13be/0x18d0 [ 784.986021][ T9211] ? ip_fraglist_prepare+0x300/0x590 [ 784.986038][ T9211] ip_do_fragment+0x1528/0x1d10 [ 784.986048][ T9211] ? ip_fragment+0x210/0x210 [ 784.986065][ T9211] ? rcu_lock_release+0xd/0x30 [ 784.986071][ T9211] ? ipv4_mtu+0x2bc/0x3c0 [ 784.986080][ T9211] ip_fragment+0x11f/0x210 [ 784.986091][ T9211] __ip_finish_output+0x3fc/0x4b0 [ 784.986103][ T9211] ip_finish_output+0x52/0x1e0 [ 784.986110][ T9211] ? ip_mc_output+0x4c6/0x620 [ 784.986121][ T9211] ip_mc_output+0x4db/0x620 [ 784.986134][ T9211] ip_send_skb+0x126/0x1e0 [ 784.986147][ T9211] ip_push_pending_frames+0x66/0x80 [ 784.986156][ T9211] raw_sendmsg+0x1e06/0x3790 [ 784.986181][ T9211] ? __kasan_check_read+0x11/0x20 [ 784.986201][ T9211] inet_sendmsg+0x147/0x310 [ 784.986211][ T9211] ? security_socket_sendmsg+0xa0/0xd0 [ 784.986221][ T9211] ? inet_send_prepare+0x250/0x250 [ 784.986234][ T9211] kernel_sendmsg+0x109/0x140 [ 784.986247][ T9211] sock_no_sendpage+0x100/0x140 [ 784.986267][ T9211] inet_sendpage+0x18c/0x340 [ 784.986278][ T9211] ? inet_sendmsg+0x310/0x310 [ 784.986287][ T9211] sock_sendpage+0xd3/0x120 [ 784.986301][ T9211] pipe_to_sendpage+0x1f9/0x2a0 [ 784.986310][ T9211] ? sock_fasync+0x100/0x100 [ 784.986323][ T9211] __splice_from_pipe+0x2f7/0x8a0 [ 784.986334][ T9211] ? generic_splice_sendpage+0x180/0x180 [ 784.986357][ T9211] generic_splice_sendpage+0x114/0x180 [ 784.986368][ T9211] ? iter_file_splice_write+0xe20/0xe20 [ 784.986377][ T9211] __se_sys_splice+0x71a/0x1ac0 [ 784.986388][ T9211] ? check_preemption_disabled+0xb7/0x2a0 [ 784.986404][ T9211] ? debug_smp_processor_id+0x1c/0x20 [ 784.986416][ T9211] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 784.986435][ T9211] __x64_sys_splice+0xe5/0x100 [ 784.986450][ T9211] do_syscall_64+0xf7/0x1c0 [ 784.986463][ T9211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.986473][ T9211] RIP: 0033:0x459f49 [ 784.986484][ T9211] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.986489][ T9211] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 784.986498][ T9211] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 784.986505][ T9211] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 784.986510][ T9211] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 784.986516][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 784.986522][ T9211] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 785.256455][ T9228] [EXFAT] trying to mount... [ 785.287154][ T9231] 9pnet: Insufficient options for proto=fd [ 785.293333][ T9228] [EXFAT] ffsMountVol failed [ 785.576988][ T9232] 9pnet: Insufficient options for proto=fd 02:42:50 executing program 5 (fault-call:7 fault-nth:20): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:50 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d176344dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0xffffffffffffffff}, {&(0x7f0000000340)}], 0x2) 02:42:50 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x3f040000, 0x0) 02:42:50 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) 02:42:50 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8749, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:50 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d176444dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:50 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x40000000, 0x0) 02:42:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x2}], 0x2) [ 785.851035][ T9252] FAULT_INJECTION: forcing a failure. [ 785.851035][ T9252] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.864279][ T9252] CPU: 0 PID: 9252 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 785.872120][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 785.882180][ T9252] Call Trace: [ 785.885481][ T9252] dump_stack+0x1d8/0x2f8 [ 785.889821][ T9252] should_fail+0x555/0x770 [ 785.894248][ T9252] should_fail_alloc_page+0x55/0x60 [ 785.899453][ T9252] prepare_alloc_pages+0x283/0x460 [ 785.904570][ T9252] __alloc_pages_nodemask+0xb2/0x5d0 [ 785.909856][ T9252] ? ip_push_pending_frames+0x66/0x80 [ 785.915310][ T9252] ? raw_sendmsg+0x1e06/0x3790 [ 785.920080][ T9252] ? kernel_sendmsg+0x109/0x140 [ 785.920097][ T9252] kmem_getpages+0x4d/0xa00 [ 785.920107][ T9252] ? __dev_queue_xmit+0x1e53/0x3010 [ 785.920114][ T9252] ? dev_queue_xmit+0x17/0x20 [ 785.920124][ T9252] cache_grow_begin+0x7e/0x2c0 [ 785.920136][ T9252] cache_alloc_refill+0x311/0x3f0 [ 785.920150][ T9252] ? check_preemption_disabled+0x47/0x2a0 [ 785.920168][ T9252] kmem_cache_alloc_node_trace+0x2a3/0x2d0 [ 785.920178][ T9252] ? __kmalloc_node_track_caller+0x3c/0x60 [ 785.920192][ T9252] __kmalloc_node_track_caller+0x3c/0x60 [ 785.920201][ T9252] ? __pskb_copy_fclone+0xac/0x12b0 [ 785.920213][ T9252] __alloc_skb+0xe8/0x500 [ 785.978181][ T9259] [EXFAT] trying to mount... [ 785.981651][ T9252] __pskb_copy_fclone+0xac/0x12b0 [ 785.981666][ T9252] ? lockdep_hardirqs_on+0x295/0x7d0 [ 785.981685][ T9252] hsr_forward_skb+0xca9/0x2040 [ 785.981710][ T9252] ? hsr_port_get_hsr+0xc6/0xf0 [ 785.981722][ T9252] hsr_dev_xmit+0x77/0x90 [ 785.981733][ T9252] dev_hard_start_xmit+0x1c1/0x3f0 [ 785.981750][ T9252] __dev_queue_xmit+0x1e53/0x3010 [ 785.981776][ T9252] dev_queue_xmit+0x17/0x20 [ 785.981788][ T9252] neigh_connected_output+0x3df/0x410 [ 785.981811][ T9252] ip_finish_output2+0x13be/0x18d0 [ 785.981820][ T9252] ? ip_fraglist_prepare+0x300/0x590 [ 785.981838][ T9252] ip_do_fragment+0x1528/0x1d10 [ 785.998350][ T9259] [EXFAT] ffsMountVol failed [ 786.001540][ T9252] ? ip_fragment+0x210/0x210 [ 786.001563][ T9252] ? rcu_lock_release+0xd/0x30 [ 786.001571][ T9252] ? ipv4_mtu+0x2bc/0x3c0 [ 786.001584][ T9252] ip_fragment+0x11f/0x210 [ 786.001599][ T9252] __ip_finish_output+0x3fc/0x4b0 [ 786.001613][ T9252] ip_finish_output+0x52/0x1e0 [ 786.001622][ T9252] ? ip_mc_output+0x4c6/0x620 [ 786.001638][ T9252] ip_mc_output+0x4db/0x620 [ 786.001652][ T9252] ip_send_skb+0x126/0x1e0 [ 786.001662][ T9252] ip_push_pending_frames+0x66/0x80 [ 786.001673][ T9252] raw_sendmsg+0x1e06/0x3790 [ 786.001703][ T9252] ? __kasan_check_read+0x11/0x20 [ 786.001725][ T9252] inet_sendmsg+0x147/0x310 [ 786.111499][ T9252] ? security_socket_sendmsg+0xa0/0xd0 [ 786.116945][ T9252] ? inet_send_prepare+0x250/0x250 [ 786.122298][ T9252] kernel_sendmsg+0x109/0x140 [ 786.126960][ T9252] sock_no_sendpage+0x100/0x140 [ 786.131795][ T9252] inet_sendpage+0x18c/0x340 [ 786.136362][ T9252] ? inet_sendmsg+0x310/0x310 [ 786.141015][ T9252] sock_sendpage+0xd3/0x120 [ 786.145522][ T9252] pipe_to_sendpage+0x1f9/0x2a0 [ 786.150370][ T9252] ? sock_fasync+0x100/0x100 [ 786.154957][ T9252] __splice_from_pipe+0x2f7/0x8a0 [ 786.159967][ T9252] ? generic_splice_sendpage+0x180/0x180 [ 786.165601][ T9252] generic_splice_sendpage+0x114/0x180 [ 786.171051][ T9252] ? iter_file_splice_write+0xe20/0xe20 [ 786.176591][ T9252] __se_sys_splice+0x71a/0x1ac0 [ 786.181464][ T9252] ? check_preemption_disabled+0xb7/0x2a0 [ 786.187172][ T9252] ? debug_smp_processor_id+0x1c/0x20 [ 786.192553][ T9252] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 786.198610][ T9252] __x64_sys_splice+0xe5/0x100 [ 786.203377][ T9252] do_syscall_64+0xf7/0x1c0 [ 786.207868][ T9252] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 786.215232][ T9252] RIP: 0033:0x459f49 [ 786.219294][ T9252] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 786.238887][ T9252] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 02:42:51 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:51 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d176944dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 786.247291][ T9252] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 786.255260][ T9252] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 786.264437][ T9252] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 786.272398][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 786.280525][ T9252] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:51 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x4}], 0x2) 02:42:51 executing program 5 (fault-call:7 fault-nth:21): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:51 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d176c44dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:51 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x40040000, 0x0) 02:42:51 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:51 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x19}], 0x2) 02:42:51 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xf674b166643e34f0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r1, &(0x7f0000000500)=""/246, 0xf6, 0x80000002, &(0x7f0000000600)={0xa, 0x4e20, 0x9, @mcast1, 0x10001}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e843d66642c7266646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) 02:42:51 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x50}], 0x2) 02:42:51 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x41040000, 0x0) 02:42:51 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d176f44dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 786.768264][ T9295] FAULT_INJECTION: forcing a failure. [ 786.768264][ T9295] name failslab, interval 1, probability 0, space 0, times 0 [ 786.781006][ T9295] CPU: 0 PID: 9295 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 786.788817][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 786.798884][ T9295] Call Trace: [ 786.802192][ T9295] dump_stack+0x1d8/0x2f8 [ 786.806533][ T9295] should_fail+0x555/0x770 [ 786.811058][ T9295] __should_failslab+0x11a/0x160 [ 786.816034][ T9295] should_failslab+0x9/0x20 [ 786.820548][ T9295] kmem_cache_alloc_node+0x65/0x280 [ 786.820562][ T9295] ? __alloc_skb+0x9f/0x500 [ 786.820576][ T9295] __alloc_skb+0x9f/0x500 [ 786.820592][ T9295] __pskb_copy_fclone+0xac/0x12b0 [ 786.820607][ T9295] ? hsr_addr_subst_dest+0x211/0x4b0 [ 786.820623][ T9295] hsr_forward_skb+0xca9/0x2040 [ 786.820654][ T9295] hsr_dev_xmit+0x77/0x90 [ 786.820666][ T9295] dev_hard_start_xmit+0x1c1/0x3f0 [ 786.820684][ T9295] __dev_queue_xmit+0x1e53/0x3010 [ 786.820706][ T9295] dev_queue_xmit+0x17/0x20 [ 786.820721][ T9295] neigh_connected_output+0x3df/0x410 [ 786.834766][ T9295] ip_finish_output2+0x13be/0x18d0 [ 786.834780][ T9295] ? ip_fraglist_prepare+0x300/0x590 [ 786.884938][ T9295] ip_do_fragment+0x1528/0x1d10 [ 786.889988][ T9295] ? ip_fragment+0x210/0x210 [ 786.894608][ T9295] ? rcu_lock_release+0xd/0x30 [ 786.899383][ T9295] ? ipv4_mtu+0x2bc/0x3c0 [ 786.903841][ T9295] ip_fragment+0x11f/0x210 [ 786.908292][ T9295] __ip_finish_output+0x3fc/0x4b0 [ 786.913337][ T9295] ip_finish_output+0x52/0x1e0 [ 786.918117][ T9295] ? ip_mc_output+0x4c6/0x620 [ 786.922810][ T9295] ip_mc_output+0x4db/0x620 [ 786.929329][ T9295] ip_send_skb+0x126/0x1e0 [ 786.933946][ T9295] ip_push_pending_frames+0x66/0x80 [ 786.939163][ T9295] raw_sendmsg+0x1e06/0x3790 [ 786.943791][ T9295] ? __kasan_check_read+0x11/0x20 [ 786.948866][ T9295] inet_sendmsg+0x147/0x310 [ 786.953394][ T9295] ? security_socket_sendmsg+0xa0/0xd0 [ 786.958881][ T9295] ? inet_send_prepare+0x250/0x250 [ 786.964102][ T9295] kernel_sendmsg+0x109/0x140 02:42:51 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x42040000, 0x0) [ 786.968811][ T9295] sock_no_sendpage+0x100/0x140 [ 786.968835][ T9295] inet_sendpage+0x18c/0x340 [ 786.968845][ T9295] ? inet_sendmsg+0x310/0x310 [ 786.968854][ T9295] sock_sendpage+0xd3/0x120 [ 786.968869][ T9295] pipe_to_sendpage+0x1f9/0x2a0 [ 786.968877][ T9295] ? sock_fasync+0x100/0x100 [ 786.968889][ T9295] __splice_from_pipe+0x2f7/0x8a0 [ 786.968900][ T9295] ? generic_splice_sendpage+0x180/0x180 [ 786.968922][ T9295] generic_splice_sendpage+0x114/0x180 [ 786.968935][ T9295] ? iter_file_splice_write+0xe20/0xe20 02:42:52 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d177044dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 786.968946][ T9295] __se_sys_splice+0x71a/0x1ac0 [ 786.968964][ T9295] ? check_preemption_disabled+0xb7/0x2a0 [ 786.968976][ T9295] ? debug_smp_processor_id+0x1c/0x20 [ 786.968985][ T9295] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 786.969001][ T9295] __x64_sys_splice+0xe5/0x100 [ 786.969015][ T9295] do_syscall_64+0xf7/0x1c0 [ 786.969029][ T9295] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 786.969038][ T9295] RIP: 0033:0x459f49 02:42:52 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 786.969053][ T9295] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 787.080330][ T9295] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 787.080342][ T9295] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 787.080348][ T9295] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 787.080354][ T9295] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 787.080360][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 787.080366][ T9295] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:52 executing program 5 (fault-call:7 fault-nth:22): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:52 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x43040000, 0x0) 02:42:52 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d177344dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xfa4}], 0x2) 02:42:52 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:52 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x1900}], 0x2) 02:42:52 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d177544dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:52 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x44040000, 0x0) [ 787.687459][ T9331] FAULT_INJECTION: forcing a failure. [ 787.687459][ T9331] name failslab, interval 1, probability 0, space 0, times 0 [ 787.700144][ T9331] CPU: 0 PID: 9331 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 787.708217][ T9331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 787.718275][ T9331] Call Trace: [ 787.721590][ T9331] dump_stack+0x1d8/0x2f8 [ 787.725933][ T9331] should_fail+0x555/0x770 [ 787.730368][ T9331] __should_failslab+0x11a/0x160 02:42:52 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x45040000, 0x0) [ 787.735435][ T9331] should_failslab+0x9/0x20 [ 787.739969][ T9331] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 787.745695][ T9331] ? __kmalloc_node_track_caller+0x3c/0x60 [ 787.751524][ T9331] __kmalloc_node_track_caller+0x3c/0x60 [ 787.757171][ T9331] ? __pskb_copy_fclone+0xac/0x12b0 [ 787.762416][ T9331] __alloc_skb+0xe8/0x500 [ 787.766850][ T9331] __pskb_copy_fclone+0xac/0x12b0 [ 787.771975][ T9331] ? hsr_addr_subst_dest+0x211/0x4b0 [ 787.777276][ T9331] hsr_forward_skb+0xca9/0x2040 [ 787.782165][ T9331] hsr_dev_xmit+0x77/0x90 [ 787.786506][ T9331] dev_hard_start_xmit+0x1c1/0x3f0 [ 787.791636][ T9331] __dev_queue_xmit+0x1e53/0x3010 [ 787.796694][ T9331] dev_queue_xmit+0x17/0x20 [ 787.801213][ T9331] neigh_connected_output+0x3df/0x410 [ 787.806714][ T9331] ip_finish_output2+0x13be/0x18d0 [ 787.811843][ T9331] ? ip_fraglist_prepare+0x300/0x590 [ 787.817148][ T9331] ip_do_fragment+0x1528/0x1d10 [ 787.822019][ T9331] ? ip_fragment+0x210/0x210 [ 787.826645][ T9331] ? rcu_lock_release+0xd/0x30 [ 787.831415][ T9331] ? ipv4_mtu+0x2bc/0x3c0 [ 787.835761][ T9331] ip_fragment+0x11f/0x210 [ 787.840191][ T9331] __ip_finish_output+0x3fc/0x4b0 [ 787.845230][ T9331] ip_finish_output+0x52/0x1e0 [ 787.850082][ T9331] ? ip_mc_output+0x4c6/0x620 [ 787.854773][ T9331] ip_mc_output+0x4db/0x620 [ 787.859288][ T9331] ip_send_skb+0x126/0x1e0 [ 787.863706][ T9331] ip_push_pending_frames+0x66/0x80 [ 787.868917][ T9331] raw_sendmsg+0x1e06/0x3790 [ 787.868950][ T9331] ? __kasan_check_read+0x11/0x20 [ 787.868977][ T9331] inet_sendmsg+0x147/0x310 [ 787.868989][ T9331] ? security_socket_sendmsg+0xa0/0xd0 02:42:52 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x46040000, 0x0) 02:42:52 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x5000}], 0x2) [ 787.868997][ T9331] ? inet_send_prepare+0x250/0x250 [ 787.869010][ T9331] kernel_sendmsg+0x109/0x140 [ 787.869023][ T9331] sock_no_sendpage+0x100/0x140 [ 787.869041][ T9331] inet_sendpage+0x18c/0x340 [ 787.869056][ T9331] ? inet_sendmsg+0x310/0x310 [ 787.898553][ T9331] sock_sendpage+0xd3/0x120 [ 787.898573][ T9331] pipe_to_sendpage+0x1f9/0x2a0 [ 787.898582][ T9331] ? sock_fasync+0x100/0x100 [ 787.898597][ T9331] __splice_from_pipe+0x2f7/0x8a0 [ 787.898608][ T9331] ? generic_splice_sendpage+0x180/0x180 [ 787.898628][ T9331] generic_splice_sendpage+0x114/0x180 [ 787.942776][ T9331] ? iter_file_splice_write+0xe20/0xe20 [ 787.948338][ T9331] __se_sys_splice+0x71a/0x1ac0 [ 787.953213][ T9331] ? check_preemption_disabled+0xb7/0x2a0 [ 787.958954][ T9331] ? debug_smp_processor_id+0x1c/0x20 [ 787.964343][ T9331] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 787.970706][ T9331] __x64_sys_splice+0xe5/0x100 [ 787.975495][ T9331] do_syscall_64+0xf7/0x1c0 [ 787.980019][ T9331] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 787.985921][ T9331] RIP: 0033:0x459f49 [ 787.989826][ T9331] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.009441][ T9331] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 788.017859][ T9331] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 788.025865][ T9331] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 788.025873][ T9331] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 788.025880][ T9331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 788.025886][ T9331] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:53 executing program 5 (fault-call:7 fault-nth:23): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:53 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:53 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x47040000, 0x0) 02:42:53 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d177844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:53 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xa40f}], 0x2) 02:42:53 executing program 3: mkdir(&(0x7f0000000040)='./bus\x00', 0x11a) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:53 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xff00}], 0x2) 02:42:53 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175842dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 788.606217][ T9371] FAULT_INJECTION: forcing a failure. [ 788.606217][ T9371] name failslab, interval 1, probability 0, space 0, times 0 [ 788.619074][ T9371] CPU: 1 PID: 9371 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 788.626889][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.636964][ T9371] Call Trace: [ 788.640262][ T9371] dump_stack+0x1d8/0x2f8 [ 788.640281][ T9371] should_fail+0x555/0x770 [ 788.640299][ T9371] __should_failslab+0x11a/0x160 [ 788.640318][ T9371] should_failslab+0x9/0x20 [ 788.658512][ T9371] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 788.664260][ T9371] ? __kmalloc_node_track_caller+0x3c/0x60 [ 788.670097][ T9371] __kmalloc_node_track_caller+0x3c/0x60 [ 788.675741][ T9371] ? __pskb_copy_fclone+0xac/0x12b0 [ 788.680973][ T9371] __alloc_skb+0xe8/0x500 [ 788.685319][ T9371] __pskb_copy_fclone+0xac/0x12b0 [ 788.690364][ T9371] ? hsr_addr_subst_dest+0x211/0x4b0 [ 788.695668][ T9371] hsr_forward_skb+0xca9/0x2040 [ 788.700548][ T9371] hsr_dev_xmit+0x77/0x90 [ 788.704892][ T9371] dev_hard_start_xmit+0x1c1/0x3f0 [ 788.710021][ T9371] __dev_queue_xmit+0x1e53/0x3010 [ 788.715072][ T9371] dev_queue_xmit+0x17/0x20 [ 788.719586][ T9371] neigh_connected_output+0x3df/0x410 [ 788.724978][ T9371] ip_finish_output2+0x13be/0x18d0 [ 788.730731][ T9371] ? ip_fraglist_prepare+0x300/0x590 [ 788.736300][ T9371] ip_do_fragment+0x1528/0x1d10 [ 788.741168][ T9371] ? ip_fragment+0x210/0x210 [ 788.745780][ T9371] ? rcu_lock_release+0xd/0x30 [ 788.750575][ T9371] ? ipv4_mtu+0x2bc/0x3c0 [ 788.754911][ T9371] ip_fragment+0x11f/0x210 [ 788.759338][ T9371] __ip_finish_output+0x3fc/0x4b0 [ 788.764380][ T9371] ip_finish_output+0x52/0x1e0 [ 788.769134][ T9371] ? ip_mc_output+0x4c6/0x620 [ 788.769146][ T9371] ip_mc_output+0x4db/0x620 [ 788.769159][ T9371] ip_send_skb+0x126/0x1e0 [ 788.769171][ T9371] ip_push_pending_frames+0x66/0x80 [ 788.769186][ T9371] raw_sendmsg+0x1e06/0x3790 [ 788.792734][ T9371] ? __kasan_check_read+0x11/0x20 [ 788.797794][ T9371] inet_sendmsg+0x147/0x310 02:42:53 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x541442, 0x2c2) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7472616e963d66642c72660c0dbcfb", @ANYRESHEX=r0, @ANYBLOB="a27766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:42:53 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d17585edfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:53 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) connect$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x10) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe267824a31adf87ff0f728b1f09b62478d1063be53383bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882ac3a9806f991c4725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f000000000000"], 0xa4) setns(r5, 0x40000000) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f0000000300)={0x1, "20a9f7f152a1b7a159d10a781ae19c52570c5ec61f719f0d8dacfb5c10d1b8701abbfee2c039252bc2d2799d03dbc252ff023a863af8bdcb1b7f9eaacf2a805941c441103222b4a2d11af070ef8a4665b11bd0e53a38a8d5a35dd3985d8cb7dd1e3126bd5f52c0ce49aa30b5e9a6f00f537d47f1164009d1ae77e2a6e334c9be3edfc2a27504bf95d6373604d61d470e07f2db195177831c3bbd923737519c842b26083fb7eb902bb1fe74aec1fd4ad6ad64567c3df7aa004fcd337ac0d2c5dbd4ac26b542a3660d9fe21ac8a4b678bcf543d50b337e8bcd5b9af4df3c24d5bb7557958ecf5f48a298250d0f4fafc42aee187fbf46cb6ef7578a3b29f1ede49d"}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbd7673aec3045ba2258080823a5ff7d9d518ed3b5b38989db2b809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f000000"], 0xa4) ioctl$BLKDISCARD(r6, 0x1277, &(0x7f0000000180)=0x8) r7 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00'/11, @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYPTR64, @ANYBLOB, @ANYRESHEX=r3, @ANYPTR], @ANYRES64=0x0, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYRESHEX=r6, @ANYRESOCT, @ANYRESHEX], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES64, @ANYPTR, @ANYRES16=r1, @ANYRES64=0x0], @ANYRES16=0x0, @ANYPTR, @ANYRES64, @ANYRESHEX=r7, @ANYRESDEC=r8]]) 02:42:53 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x48000000, 0x0) [ 788.802313][ T9371] ? security_socket_sendmsg+0xa0/0xd0 [ 788.807794][ T9371] ? inet_send_prepare+0x250/0x250 [ 788.812919][ T9371] kernel_sendmsg+0x109/0x140 [ 788.817613][ T9371] sock_no_sendpage+0x100/0x140 [ 788.822488][ T9371] inet_sendpage+0x18c/0x340 [ 788.827124][ T9371] ? inet_sendmsg+0x310/0x310 [ 788.831825][ T9371] sock_sendpage+0xd3/0x120 [ 788.836343][ T9371] pipe_to_sendpage+0x1f9/0x2a0 [ 788.841201][ T9371] ? sock_fasync+0x100/0x100 [ 788.845803][ T9371] __splice_from_pipe+0x2f7/0x8a0 [ 788.850868][ T9371] ? generic_splice_sendpage+0x180/0x180 [ 788.850886][ T9371] generic_splice_sendpage+0x114/0x180 [ 788.850901][ T9371] ? iter_file_splice_write+0xe20/0xe20 [ 788.850912][ T9371] __se_sys_splice+0x71a/0x1ac0 [ 788.850929][ T9371] ? check_preemption_disabled+0xb7/0x2a0 [ 788.850942][ T9371] ? debug_smp_processor_id+0x1c/0x20 [ 788.850953][ T9371] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 788.850973][ T9371] __x64_sys_splice+0xe5/0x100 [ 788.850990][ T9371] do_syscall_64+0xf7/0x1c0 [ 788.851003][ T9371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.851011][ T9371] RIP: 0033:0x459f49 [ 788.851021][ T9371] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 788.851026][ T9371] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 788.851034][ T9371] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 788.851038][ T9371] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 788.851043][ T9371] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 788.851047][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 788.851053][ T9371] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 788.963054][ T9385] [EXFAT] trying to mount... [ 789.003851][ T9385] [EXFAT] ffsMountVol failed [ 789.087434][ T9382] vhci_hcd: invalid port number 115 [ 789.096646][ T9382] vhci_hcd: default hub control req: 2e2f v7562 i0073 l0 [ 789.122902][ T9385] [EXFAT] trying to mount... [ 789.135729][ T9385] [EXFAT] ffsMountVol failed 02:42:54 executing program 5 (fault-call:7 fault-nth:24): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:54 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x874f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:54 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1955cba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:54 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x1000000}], 0x2) 02:42:54 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x48040000, 0x0) 02:42:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000580)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x100, 0xb, 0x4}) pread64(r0, &(0x7f0000000080)=""/191, 0xbf, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="993d949592acab0e2f7feb50e320d26b76f2a576af3c375b842bc9f9e22f12f8e3fc92d1ef08a260a535c087c7350ed5ff45162ef3d4d133831553f76adebd7e4c33e1c12c30d3a97d1f3d754a28388aec38488ae4d3630d1dddfeca86f2429625bdfcd6a6d35595bd20bbfd4c1d22c344df8c6bbcf5d161e000a46d4494fbcb97e259f942ca2f8373c193774db3903169f14ed4a2613622919030741bd5515fc05b68a1d9c47c4e5746865d01b5092e8f096f5665731c361b46e44f10f14d", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x7fff, 0x3}, &(0x7f0000000380)=0x8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) accept4$rose(r4, &(0x7f00000002c0)=@short={0xb, @dev, @netrom, 0x1, @default}, &(0x7f0000000300)=0x1c, 0x80000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xa4) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000001c0)={0x3, 0x6, 0x4, 0x100, {0x0, 0x2710}, {0x2, 0x1, 0x1, 0x1, 0x1, 0xa, "ed053ff3"}, 0x9, 0x1, @fd=r0, 0x4}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f0000000240)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000400)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1300404, &(0x7f0000000040)=ANY=[@ANYBLOB="749cac9d992a7b70867266646e6f3d", @ANYRESHEX=r7, @ANYBLOB="2488333a796f3d", @ANYRESHEX=r8, @ANYBLOB=',dont_measure,\x00']) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @dev}, &(0x7f0000000180)=0xc) 02:42:54 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1955eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:54 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x49040000, 0x0) 02:42:54 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x2000000}], 0x2) [ 789.516294][ T9411] FAULT_INJECTION: forcing a failure. [ 789.516294][ T9411] name failslab, interval 1, probability 0, space 0, times 0 02:42:54 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8750, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 789.562742][ T9411] CPU: 1 PID: 9411 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 789.570604][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 789.581457][ T9411] Call Trace: [ 789.585295][ T9411] dump_stack+0x1d8/0x2f8 [ 789.589672][ T9411] should_fail+0x555/0x770 [ 789.589699][ T9411] __should_failslab+0x11a/0x160 [ 789.599077][ T9411] should_failslab+0x9/0x20 [ 789.603608][ T9411] kmem_cache_alloc_node+0x65/0x280 02:42:54 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4a040000, 0x0) [ 789.603623][ T9411] ? __alloc_skb+0x9f/0x500 [ 789.603638][ T9411] __alloc_skb+0x9f/0x500 [ 789.603657][ T9411] __ip_append_data+0x2077/0x31a0 [ 789.603677][ T9411] ? do_raw_getsockopt+0x1c0/0x1c0 [ 789.628099][ T9411] ip_append_data+0x11c/0x190 [ 789.632803][ T9411] ? do_raw_getsockopt+0x1c0/0x1c0 [ 789.638726][ T9411] raw_sendmsg+0x1d9e/0x3790 [ 789.643351][ T9411] ? __kasan_check_read+0x11/0x20 [ 789.648500][ T9411] inet_sendmsg+0x147/0x310 [ 789.653479][ T9411] ? security_socket_sendmsg+0xa0/0xd0 02:42:54 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4c000000, 0x0) [ 789.658971][ T9411] ? inet_send_prepare+0x250/0x250 [ 789.664379][ T9411] kernel_sendmsg+0x109/0x140 [ 789.669070][ T9411] sock_no_sendpage+0x100/0x140 [ 789.673943][ T9411] inet_sendpage+0x18c/0x340 [ 789.678533][ T9411] ? inet_sendmsg+0x310/0x310 [ 789.683218][ T9411] sock_sendpage+0xd3/0x120 [ 789.687743][ T9411] pipe_to_sendpage+0x1f9/0x2a0 [ 789.693863][ T9411] ? sock_fasync+0x100/0x100 [ 789.698476][ T9411] __splice_from_pipe+0x2f7/0x8a0 [ 789.703516][ T9411] ? generic_splice_sendpage+0x180/0x180 [ 789.705406][ T9426] [EXFAT] trying to mount... [ 789.709168][ T9411] generic_splice_sendpage+0x114/0x180 [ 789.709185][ T9411] ? iter_file_splice_write+0xe20/0xe20 [ 789.709198][ T9411] __se_sys_splice+0x71a/0x1ac0 [ 789.709214][ T9411] ? check_preemption_disabled+0xb7/0x2a0 [ 789.709227][ T9411] ? debug_smp_processor_id+0x1c/0x20 [ 789.709237][ T9411] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 789.709265][ T9411] __x64_sys_splice+0xe5/0x100 [ 789.714878][ T9426] [EXFAT] ffsMountVol failed [ 789.719638][ T9411] do_syscall_64+0xf7/0x1c0 [ 789.719654][ T9411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.719664][ T9411] RIP: 0033:0x459f49 [ 789.719675][ T9411] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.719680][ T9411] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 789.719689][ T9411] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 789.719694][ T9411] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 789.719700][ T9411] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 789.719706][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 789.719711][ T9411] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:55 executing program 5 (fault-call:7 fault-nth:25): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:55 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f011c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:55 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x4000000}], 0x2) 02:42:55 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x55aaffff, 0x0) 02:42:55 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8751, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:55 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x2) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video2\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:55 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x5c000000, 0x0) 02:42:55 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f05cc1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 790.361363][ T9452] FAULT_INJECTION: forcing a failure. [ 790.361363][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 790.378754][ T9452] CPU: 0 PID: 9452 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 790.386774][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.396832][ T9452] Call Trace: [ 790.400134][ T9452] dump_stack+0x1d8/0x2f8 [ 790.404475][ T9452] should_fail+0x555/0x770 [ 790.408906][ T9452] __should_failslab+0x11a/0x160 [ 790.413942][ T9452] should_failslab+0x9/0x20 [ 790.418452][ T9452] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 790.424175][ T9452] ? __kmalloc_node_track_caller+0x3c/0x60 [ 790.430517][ T9452] __kmalloc_node_track_caller+0x3c/0x60 [ 790.436173][ T9452] ? __ip_append_data+0x2077/0x31a0 [ 790.436192][ T9452] __alloc_skb+0xe8/0x500 [ 790.445753][ T9452] __ip_append_data+0x2077/0x31a0 [ 790.450795][ T9452] ? do_raw_getsockopt+0x1c0/0x1c0 [ 790.450826][ T9452] ip_append_data+0x11c/0x190 02:42:55 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x19000000}], 0x2) 02:42:55 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb55e2f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 790.460586][ T9452] ? do_raw_getsockopt+0x1c0/0x1c0 [ 790.462557][ T9453] [EXFAT] trying to mount... [ 790.465701][ T9452] raw_sendmsg+0x1d9e/0x3790 [ 790.470875][ T9453] [EXFAT] ffsMountVol failed [ 790.474864][ T9452] ? __kasan_check_read+0x11/0x20 [ 790.474891][ T9452] inet_sendmsg+0x147/0x310 [ 790.474906][ T9452] ? security_socket_sendmsg+0xa0/0xd0 [ 790.494443][ T9452] ? inet_send_prepare+0x250/0x250 02:42:55 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x60000000, 0x0) 02:42:55 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8752, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 790.494456][ T9452] kernel_sendmsg+0x109/0x140 [ 790.494467][ T9452] sock_no_sendpage+0x100/0x140 [ 790.494481][ T9452] inet_sendpage+0x18c/0x340 [ 790.494490][ T9452] ? inet_sendmsg+0x310/0x310 [ 790.494497][ T9452] sock_sendpage+0xd3/0x120 [ 790.494510][ T9452] pipe_to_sendpage+0x1f9/0x2a0 [ 790.494516][ T9452] ? sock_fasync+0x100/0x100 [ 790.494525][ T9452] __splice_from_pipe+0x2f7/0x8a0 [ 790.494534][ T9452] ? generic_splice_sendpage+0x180/0x180 [ 790.494550][ T9452] generic_splice_sendpage+0x114/0x180 [ 790.494559][ T9452] ? iter_file_splice_write+0xe20/0xe20 [ 790.494567][ T9452] __se_sys_splice+0x71a/0x1ac0 [ 790.494581][ T9452] ? check_preemption_disabled+0xb7/0x2a0 [ 790.494590][ T9452] ? debug_smp_processor_id+0x1c/0x20 [ 790.494600][ T9452] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 790.494614][ T9452] __x64_sys_splice+0xe5/0x100 [ 790.494625][ T9452] do_syscall_64+0xf7/0x1c0 [ 790.494635][ T9452] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 790.494643][ T9452] RIP: 0033:0x459f49 [ 790.494651][ T9452] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 790.494655][ T9452] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 790.494662][ T9452] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 790.494666][ T9452] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 790.494670][ T9452] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 790.494674][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 790.494678][ T9452] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 790.615134][ T9465] [EXFAT] trying to mount... [ 790.615578][ T9465] [EXFAT] ffsMountVol failed 02:42:56 executing program 5 (fault-call:7 fault-nth:26): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:56 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5275c0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:56 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x68000000, 0x0) 02:42:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x20000340}], 0x2) 02:42:56 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8753, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:56 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000040)) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 791.166072][ T9483] [EXFAT] trying to mount... 02:42:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x40030020}], 0x2) [ 791.187286][ T9483] [EXFAT] ffsMountVol failed 02:42:56 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6c000000, 0x0) 02:42:56 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0812091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 791.234736][ T9489] FAULT_INJECTION: forcing a failure. [ 791.234736][ T9489] name failslab, interval 1, probability 0, space 0, times 0 [ 791.279251][ T9489] CPU: 1 PID: 9489 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 791.287108][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 791.297179][ T9489] Call Trace: [ 791.300492][ T9489] dump_stack+0x1d8/0x2f8 [ 791.304842][ T9489] should_fail+0x555/0x770 [ 791.309374][ T9489] __should_failslab+0x11a/0x160 [ 791.314333][ T9489] should_failslab+0x9/0x20 [ 791.318854][ T9489] kmem_cache_alloc_node+0x65/0x280 [ 791.324069][ T9489] ? __alloc_skb+0x9f/0x500 [ 791.328592][ T9489] __alloc_skb+0x9f/0x500 [ 791.332942][ T9489] __ip_append_data+0x2077/0x31a0 [ 791.337971][ T9489] ? do_raw_getsockopt+0x1c0/0x1c0 [ 791.343114][ T9489] ip_append_data+0x11c/0x190 [ 791.347796][ T9489] ? do_raw_getsockopt+0x1c0/0x1c0 [ 791.352960][ T9489] raw_sendmsg+0x1d9e/0x3790 [ 791.357596][ T9489] ? __kasan_check_read+0x11/0x20 [ 791.363370][ T9489] inet_sendmsg+0x147/0x310 [ 791.367887][ T9489] ? security_socket_sendmsg+0xa0/0xd0 [ 791.373468][ T9489] ? inet_send_prepare+0x250/0x250 02:42:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x50000000}], 0x2) 02:42:56 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f065e091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 791.378612][ T9489] kernel_sendmsg+0x109/0x140 [ 791.383319][ T9489] sock_no_sendpage+0x100/0x140 [ 791.388208][ T9489] inet_sendpage+0x18c/0x340 [ 791.392938][ T9489] ? inet_sendmsg+0x310/0x310 [ 791.398561][ T9489] sock_sendpage+0xd3/0x120 [ 791.398581][ T9489] pipe_to_sendpage+0x1f9/0x2a0 [ 791.398592][ T9489] ? sock_fasync+0x100/0x100 [ 791.398608][ T9489] __splice_from_pipe+0x2f7/0x8a0 [ 791.398622][ T9489] ? generic_splice_sendpage+0x180/0x180 [ 791.398655][ T9489] generic_splice_sendpage+0x114/0x180 [ 791.398671][ T9489] ? iter_file_splice_write+0xe20/0xe20 [ 791.398683][ T9489] __se_sys_splice+0x71a/0x1ac0 [ 791.398703][ T9489] ? check_preemption_disabled+0xb7/0x2a0 [ 791.398718][ T9489] ? debug_smp_processor_id+0x1c/0x20 [ 791.398733][ T9489] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 791.398753][ T9489] __x64_sys_splice+0xe5/0x100 [ 791.398771][ T9489] do_syscall_64+0xf7/0x1c0 [ 791.398785][ T9489] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 791.398798][ T9489] RIP: 0033:0x459f49 [ 791.398809][ T9489] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 791.398814][ T9489] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 791.398824][ T9489] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 791.398829][ T9489] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:42:56 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8754, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 791.398835][ T9489] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 791.398840][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 791.398844][ T9489] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:56 executing program 5 (fault-call:7 fault-nth:27): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:56 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612021ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:56 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x7fffeffb}], 0x2) 02:42:56 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x74000000, 0x0) 02:42:56 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8755, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 792.000854][ T9615] [EXFAT] trying to mount... [ 792.018358][ T9615] [EXFAT] ffsMountVol failed [ 792.076132][ T9627] FAULT_INJECTION: forcing a failure. [ 792.076132][ T9627] name failslab, interval 1, probability 0, space 0, times 0 [ 792.105301][ T9627] CPU: 1 PID: 9627 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 792.113146][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 792.123204][ T9627] Call Trace: [ 792.126499][ T9627] dump_stack+0x1d8/0x2f8 [ 792.130840][ T9627] should_fail+0x555/0x770 [ 792.135272][ T9627] __should_failslab+0x11a/0x160 [ 792.140228][ T9627] should_failslab+0x9/0x20 [ 792.144736][ T9627] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 792.150456][ T9627] ? __kmalloc_node_track_caller+0x3c/0x60 [ 792.150471][ T9627] __kmalloc_node_track_caller+0x3c/0x60 [ 792.150487][ T9627] ? __ip_append_data+0x2077/0x31a0 [ 792.167151][ T9627] __alloc_skb+0xe8/0x500 [ 792.167171][ T9627] __ip_append_data+0x2077/0x31a0 [ 792.167194][ T9627] ? do_raw_getsockopt+0x1c0/0x1c0 [ 792.167224][ T9627] ip_append_data+0x11c/0x190 [ 792.186404][ T9627] ? do_raw_getsockopt+0x1c0/0x1c0 [ 792.186419][ T9627] raw_sendmsg+0x1d9e/0x3790 [ 792.186450][ T9627] ? __kasan_check_read+0x11/0x20 [ 792.186472][ T9627] inet_sendmsg+0x147/0x310 [ 792.205739][ T9627] ? security_socket_sendmsg+0xa0/0xd0 [ 792.205753][ T9627] ? inet_send_prepare+0x250/0x250 [ 792.216315][ T9627] kernel_sendmsg+0x109/0x140 [ 792.216329][ T9627] sock_no_sendpage+0x100/0x140 02:42:57 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x670) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r4, 0x0, 0x111) move_pages(r4, 0x5, &(0x7f0000000600)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000640)=[0x7, 0xfffffffe, 0x401, 0xdef, 0x6, 0x2, 0xff3], &(0x7f0000000680)=[0x0, 0x0, 0x0], 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/158, 0x9e}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f0000000380)=""/113, 0x71}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000400)=""/144, 0x90}], 0x6, &(0x7f0000000540)=""/114, 0x72}, 0x101) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:42:57 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612031ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:57 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7a000000, 0x0) 02:42:57 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xa40f0000}], 0x2) [ 792.216350][ T9627] inet_sendpage+0x18c/0x340 [ 792.216362][ T9627] ? inet_sendmsg+0x310/0x310 [ 792.216372][ T9627] sock_sendpage+0xd3/0x120 [ 792.216388][ T9627] pipe_to_sendpage+0x1f9/0x2a0 [ 792.216396][ T9627] ? sock_fasync+0x100/0x100 [ 792.216410][ T9627] __splice_from_pipe+0x2f7/0x8a0 [ 792.216421][ T9627] ? generic_splice_sendpage+0x180/0x180 [ 792.216444][ T9627] generic_splice_sendpage+0x114/0x180 [ 792.216457][ T9627] ? iter_file_splice_write+0xe20/0xe20 [ 792.216468][ T9627] __se_sys_splice+0x71a/0x1ac0 02:42:57 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612041ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:57 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8756, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 792.216482][ T9627] ? check_preemption_disabled+0xb7/0x2a0 [ 792.216495][ T9627] ? debug_smp_processor_id+0x1c/0x20 [ 792.216506][ T9627] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 792.216525][ T9627] __x64_sys_splice+0xe5/0x100 [ 792.216540][ T9627] do_syscall_64+0xf7/0x1c0 [ 792.302054][ T9627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 792.302068][ T9627] RIP: 0033:0x459f49 [ 792.311842][ T9627] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 792.311848][ T9627] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 792.311857][ T9627] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 792.311863][ T9627] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:42:57 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xfbefff7f}], 0x2) [ 792.311870][ T9627] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 792.311876][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 792.311881][ T9627] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:57 executing program 5 (fault-call:7 fault-nth:28): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:57 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x8cffffff, 0x0) 02:42:57 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612051ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:57 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8757, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:57 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xff000000}], 0x2) [ 792.968497][ T9767] FAULT_INJECTION: forcing a failure. [ 792.968497][ T9767] name failslab, interval 1, probability 0, space 0, times 0 [ 792.983302][ T9767] CPU: 1 PID: 9767 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 792.991153][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.001228][ T9767] Call Trace: [ 793.004535][ T9767] dump_stack+0x1d8/0x2f8 [ 793.008912][ T9767] should_fail+0x555/0x770 [ 793.013375][ T9767] __should_failslab+0x11a/0x160 [ 793.018334][ T9767] ? skb_clone+0x1cc/0x380 [ 793.022794][ T9767] should_failslab+0x9/0x20 [ 793.027301][ T9767] kmem_cache_alloc+0x56/0x2e0 [ 793.032102][ T9767] ? nf_hook+0x2ba/0x310 [ 793.036358][ T9767] skb_clone+0x1cc/0x380 [ 793.040611][ T9767] ip_mc_output+0x24e/0x620 [ 793.045120][ T9767] ip_send_skb+0x126/0x1e0 [ 793.049656][ T9767] ip_push_pending_frames+0x66/0x80 [ 793.054849][ T9767] raw_sendmsg+0x1e06/0x3790 [ 793.059444][ T9767] ? __kasan_check_read+0x11/0x20 [ 793.064460][ T9767] inet_sendmsg+0x147/0x310 [ 793.068951][ T9767] ? security_socket_sendmsg+0xa0/0xd0 [ 793.074391][ T9767] ? inet_send_prepare+0x250/0x250 [ 793.079493][ T9767] kernel_sendmsg+0x109/0x140 [ 793.084163][ T9767] sock_no_sendpage+0x100/0x140 [ 793.089013][ T9767] inet_sendpage+0x18c/0x340 [ 793.094473][ T9767] ? inet_sendmsg+0x310/0x310 [ 793.099136][ T9767] sock_sendpage+0xd3/0x120 [ 793.103725][ T9767] pipe_to_sendpage+0x1f9/0x2a0 [ 793.108595][ T9767] ? sock_fasync+0x100/0x100 [ 793.113169][ T9767] __splice_from_pipe+0x2f7/0x8a0 [ 793.118177][ T9767] ? generic_splice_sendpage+0x180/0x180 [ 793.123801][ T9767] generic_splice_sendpage+0x114/0x180 [ 793.129251][ T9767] ? iter_file_splice_write+0xe20/0xe20 [ 793.134916][ T9767] __se_sys_splice+0x71a/0x1ac0 [ 793.139872][ T9767] ? check_preemption_disabled+0xb7/0x2a0 [ 793.145636][ T9767] ? debug_smp_processor_id+0x1c/0x20 [ 793.151060][ T9767] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 793.157140][ T9767] __x64_sys_splice+0xe5/0x100 [ 793.161938][ T9767] do_syscall_64+0xf7/0x1c0 [ 793.166452][ T9767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 793.172341][ T9767] RIP: 0033:0x459f49 [ 793.176235][ T9767] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 793.195871][ T9767] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 793.204270][ T9767] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 02:42:58 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x99260000, 0x0) 02:42:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x100000000000000}], 0x2) 02:42:58 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612061ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 793.212240][ T9767] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 793.220227][ T9767] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 793.228345][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 793.236517][ T9767] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:58 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8758, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:58 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fdatasync(r1) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 02:42:58 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612071ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:58 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xc0ed0000, 0x0) [ 793.454788][ T9790] [EXFAT] trying to mount... [ 793.466803][ T9790] [EXFAT] ffsMountVol failed 02:42:58 executing program 5 (fault-call:7 fault-nth:29): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x200000000000000}], 0x2) 02:42:58 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612081ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:58 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8759, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:58 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xebffffff, 0x0) 02:42:58 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f06120a1ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:58 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xec000000, 0x0) 02:42:58 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x400000000000000}], 0x2) 02:42:58 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f06120b1ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 793.874942][ T9811] FAULT_INJECTION: forcing a failure. [ 793.874942][ T9811] name failslab, interval 1, probability 0, space 0, times 0 [ 793.938693][ T9811] CPU: 0 PID: 9811 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 793.946556][ T9811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 793.956625][ T9811] Call Trace: [ 793.959936][ T9811] dump_stack+0x1d8/0x2f8 [ 793.964291][ T9811] should_fail+0x555/0x770 [ 793.968757][ T9811] __should_failslab+0x11a/0x160 [ 793.973738][ T9811] ? dst_alloc+0x173/0x580 [ 793.978170][ T9811] should_failslab+0x9/0x20 [ 793.982682][ T9811] kmem_cache_alloc+0x56/0x2e0 [ 793.987458][ T9811] dst_alloc+0x173/0x580 [ 793.991816][ T9811] rt_dst_clone+0x57/0x6d0 [ 793.996220][ T9811] ? ip_mc_finish_output+0xc3/0x410 [ 794.001412][ T9811] ip_mc_finish_output+0x127/0x410 [ 794.006527][ T9811] ip_mc_output+0x2c1/0x620 [ 794.011033][ T9811] ip_send_skb+0x126/0x1e0 [ 794.015635][ T9811] ip_push_pending_frames+0x66/0x80 [ 794.020900][ T9811] raw_sendmsg+0x1e06/0x3790 [ 794.025494][ T9811] ? __kasan_check_read+0x11/0x20 [ 794.030521][ T9811] inet_sendmsg+0x147/0x310 [ 794.035024][ T9811] ? security_socket_sendmsg+0xa0/0xd0 [ 794.040471][ T9811] ? inet_send_prepare+0x250/0x250 [ 794.045590][ T9811] kernel_sendmsg+0x109/0x140 [ 794.050262][ T9811] sock_no_sendpage+0x100/0x140 [ 794.055109][ T9811] inet_sendpage+0x18c/0x340 [ 794.059691][ T9811] ? inet_sendmsg+0x310/0x310 [ 794.064358][ T9811] sock_sendpage+0xd3/0x120 [ 794.068865][ T9811] pipe_to_sendpage+0x1f9/0x2a0 [ 794.073718][ T9811] ? sock_fasync+0x100/0x100 [ 794.078343][ T9811] __splice_from_pipe+0x2f7/0x8a0 [ 794.083365][ T9811] ? generic_splice_sendpage+0x180/0x180 [ 794.089023][ T9811] generic_splice_sendpage+0x114/0x180 [ 794.094474][ T9811] ? iter_file_splice_write+0xe20/0xe20 [ 794.100009][ T9811] __se_sys_splice+0x71a/0x1ac0 [ 794.104850][ T9811] ? check_preemption_disabled+0xb7/0x2a0 [ 794.110582][ T9811] ? debug_smp_processor_id+0x1c/0x20 [ 794.115945][ T9811] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 794.122635][ T9811] __x64_sys_splice+0xe5/0x100 [ 794.127416][ T9811] do_syscall_64+0xf7/0x1c0 [ 794.131940][ T9811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 794.137843][ T9811] RIP: 0033:0x459f49 [ 794.141728][ T9811] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 794.161323][ T9811] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 794.169726][ T9811] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 794.177686][ T9811] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 794.185652][ T9811] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 794.193631][ T9811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 794.201594][ T9811] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:42:59 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xf6ffffff, 0x0) 02:42:59 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x1900000000000000}], 0x2) 02:42:59 executing program 5 (fault-call:7 fault-nth:30): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:42:59 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f06120c1ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:59 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f00000006c0)='./file0\x00', 0x4, 0x3) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000012c0)=""/4096) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1c1042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@int=0x7, 0x4) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f0000000000)={0x5, 0xfffffffffffffffb, 0x4, 0xffffffffffffffff, 0x1}) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x9}, 0x7bb0, 0x40, &(0x7f0000000140)="07c422d13ee75eff3a01c989209d62d44a98212cabe8da76b2003b0293d88836398bbdd795126e6d294138b3bd222b9d570820344530574c5b3ed7d7d678169dd96aa4cb8f2dcbb9fd6853c612b0f1f119e04645899301c79366f1f7ed3fc660790d5c3362ad43c2777b860617b5b95bfca662a967c4cf", 0x77, 0x68b, 0x4, 0x39, 0x0, 0x0, &(0x7f00000001c0)="75ffca6562948ef3206721c1644ae8891aa07d416ebb77dc3930e33a4c4840ef983ab0dee28b581b3c970e36386f69917a41b0e28d952f3ea8e99c32976b55caa279", [{0x20, 0x1, 0x3}, {0x3, 0xffffffff, 0xde}, {0x4, 0x7, 0x7}, {0x6, 0x5, 0x9}, {0x4, 0x7ff, 0x5}, {0x1, 0x200, 0x10001}, {0xff, 0x10000, 0x80000001}, {0xd083, 0x5, 0x2b}, {0x1, 0x400, 0x67c6}, {0x4, 0x7ff, 0x6001}, {0x800, 0x10001, 0xfffffff8}, {0x1, 0x401, 0xa23}, {0x2, 0x80000000}, {0x9, 0x7, 0xf4}, {0x5, 0x7, 0x7fffffff}, {0x2000000, 0x200, 0x8}, {0x20, 0x1, 0x7}, {0x5, 0x0, 0x9ca}, {0x9e07, 0xffffffff, 0x6}, {0x80000001, 0x1ff, 0x2}, {0x8001, 0x3ff, 0xa1b9}, {0x20, 0x0, 0x44}, {0x7, 0x9, 0x5}, {0x8001, 0x8, 0x5}, {0x8, 0x8a, 0xc3}, {0x7, 0x2, 0xfffffff9}, {0x20, 0x9, 0x3}, {0x3, 0x1, 0x99ed}, {0x7a0b, 0x80000000, 0x9}, {0xfffffffe, 0x5, 0x1}, {0x97, 0x7ff, 0x2}, {0x6c23, 0x7, 0x6}, {0x3, 0xffffffff}, {0xff800000, 0x9, 0x20}, {0x0, 0x0, 0x7ff}, {0x7f, 0xfffffbff, 0x1}, {0x1, 0x5, 0x3}, {0x7, 0x9, 0xde54}, {0xbea, 0x0, 0xfffffffa}, {0x5, 0x1, 0x8}, {0xfffffff7, 0x20, 0x1ff}, {0x4, 0x0, 0xfffe0000}, {0x3, 0x2, 0x40}, {0xa9, 0x1e9, 0x5}, {0x0, 0x6, 0x4}, {0x81, 0x7, 0x99}, {0xffffffe0, 0x8, 0x400}, {0x10000, 0x1ff, 0x10000}, {0x81, 0x6, 0x6a}, {0x7f, 0x0, 0x100}, {0x4816, 0xc7, 0x80000001}, {0x6, 0x3, 0x1}, {0x0, 0x4, 0x1f}, {0x1, 0x5, 0x1000}, {0x8, 0xa1, 0x401}, {0x101, 0x1, 0x3}, {0x1, 0x6, 0x5}]}) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) read$usbfs(r5, &(0x7f0000000600)=""/186, 0xba) 02:42:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x4003002000000000}], 0x2) 02:42:59 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xf9fdffff, 0x0) 02:42:59 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:42:59 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f06120d1ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:42:59 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfbffffff, 0x0) [ 794.717642][ T9844] 9pnet: Insufficient options for proto=fd [ 794.766720][ T9854] FAULT_INJECTION: forcing a failure. [ 794.766720][ T9854] name failslab, interval 1, probability 0, space 0, times 0 [ 794.772811][ T9844] 9pnet: Insufficient options for proto=fd [ 794.779432][ T9854] CPU: 1 PID: 9854 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 794.779440][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 794.779444][ T9854] Call Trace: [ 794.779465][ T9854] dump_stack+0x1d8/0x2f8 [ 794.779484][ T9854] should_fail+0x555/0x770 [ 794.779505][ T9854] __should_failslab+0x11a/0x160 [ 794.820185][ T9854] should_failslab+0x9/0x20 [ 794.824706][ T9854] kmem_cache_alloc_node+0x65/0x280 [ 794.829917][ T9854] ? __alloc_skb+0x9f/0x500 [ 794.834433][ T9854] ? mark_lock+0x107/0x1650 [ 794.838976][ T9854] __alloc_skb+0x9f/0x500 [ 794.843332][ T9854] __pskb_copy_fclone+0xac/0x12b0 [ 794.848367][ T9854] ? lockdep_hardirqs_on+0x295/0x7d0 [ 794.853681][ T9854] hsr_forward_skb+0xca9/0x2040 [ 794.858560][ T9854] ? hsr_port_get_hsr+0xc6/0xf0 02:42:59 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0x5000000000000000}], 0x2) 02:42:59 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff000000, 0x0) 02:42:59 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 794.863430][ T9854] hsr_dev_xmit+0x77/0x90 [ 794.867751][ T9854] dev_hard_start_xmit+0x1c1/0x3f0 [ 794.872872][ T9854] __dev_queue_xmit+0x1e53/0x3010 [ 794.877936][ T9854] dev_queue_xmit+0x17/0x20 [ 794.882476][ T9854] neigh_connected_output+0x3df/0x410 [ 794.882501][ T9854] ip_finish_output2+0x13be/0x18d0 [ 794.882511][ T9854] ? ip_fraglist_prepare+0x2e5/0x590 [ 794.882531][ T9854] ip_do_fragment+0x1528/0x1d10 [ 794.882548][ T9854] ? ip_fragment+0x210/0x210 [ 794.907731][ T9854] ? rcu_lock_release+0xd/0x30 [ 794.912878][ T9854] ? ipv4_mtu+0x2bc/0x3c0 02:42:59 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f06120e1ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 794.912892][ T9854] ip_fragment+0x11f/0x210 [ 794.912905][ T9854] __ip_finish_output+0x3fc/0x4b0 [ 794.912918][ T9854] ip_finish_output+0x52/0x1e0 [ 794.912925][ T9854] ? ip_mc_output+0x4c6/0x620 [ 794.912935][ T9854] ip_mc_output+0x4db/0x620 [ 794.912948][ T9854] ip_send_skb+0x126/0x1e0 [ 794.912962][ T9854] ip_push_pending_frames+0x66/0x80 [ 794.950177][ T9854] raw_sendmsg+0x1e06/0x3790 [ 794.950214][ T9854] ? __kasan_check_read+0x11/0x20 [ 794.950246][ T9854] inet_sendmsg+0x147/0x310 [ 794.950257][ T9854] ? security_socket_sendmsg+0xa0/0xd0 [ 794.950265][ T9854] ? inet_send_prepare+0x250/0x250 [ 794.950279][ T9854] kernel_sendmsg+0x109/0x140 [ 794.950292][ T9854] sock_no_sendpage+0x100/0x140 [ 794.950315][ T9854] inet_sendpage+0x18c/0x340 [ 794.950329][ T9854] ? inet_sendmsg+0x310/0x310 [ 794.984481][ T9854] sock_sendpage+0xd3/0x120 [ 794.984500][ T9854] pipe_to_sendpage+0x1f9/0x2a0 [ 794.984510][ T9854] ? sock_fasync+0x100/0x100 [ 794.984523][ T9854] __splice_from_pipe+0x2f7/0x8a0 [ 794.984537][ T9854] ? generic_splice_sendpage+0x180/0x180 [ 795.018320][ T9854] generic_splice_sendpage+0x114/0x180 [ 795.023831][ T9854] ? iter_file_splice_write+0xe20/0xe20 [ 795.029395][ T9854] __se_sys_splice+0x71a/0x1ac0 [ 795.034273][ T9854] ? check_preemption_disabled+0xb7/0x2a0 [ 795.040015][ T9854] ? debug_smp_processor_id+0x1c/0x20 [ 795.045413][ T9854] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 795.051512][ T9854] __x64_sys_splice+0xe5/0x100 [ 795.056303][ T9854] do_syscall_64+0xf7/0x1c0 [ 795.060914][ T9854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.066851][ T9854] RIP: 0033:0x459f49 [ 795.070761][ T9854] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.090480][ T9854] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 795.099025][ T9854] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 795.107026][ T9854] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.107033][ T9854] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 795.107043][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 795.107049][ T9854] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:00 executing program 5 (fault-call:7 fault-nth:31): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:00 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff0f0000, 0x0) 02:43:00 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612101ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:00 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x100, 0x100, 0x100, 0x100, 0x100, 0x270, 0x270, 0x270, 0x270, 0x270, 0x3, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x4, "7d61a2c90105e35055f72b3609a78ac185d32f34ba2a437a88380ba2658b"}}}, {{@uncond, 0x0, 0x110, 0x170, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x7, 0x1, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x1, 0x4, [0x1b, 0x12, 0x15, 0x0, 0x27, 0x3, 0x5, 0xf, 0x16, 0x1, 0x23, 0x18, 0x22, 0x35, 0x38, 0x2e], 0x2, 0x9, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 02:43:00 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xa40f000000000000}], 0x2) 02:43:00 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:00 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612111ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:00 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xfbefff7f00000000}], 0x2) 02:43:00 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffdffff, 0x0) [ 795.632015][ T9893] FAULT_INJECTION: forcing a failure. [ 795.632015][ T9893] name failslab, interval 1, probability 0, space 0, times 0 [ 795.644751][ T9893] CPU: 0 PID: 9893 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 795.652573][ T9893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 795.662679][ T9893] Call Trace: [ 795.666013][ T9893] dump_stack+0x1d8/0x2f8 [ 795.670374][ T9893] should_fail+0x555/0x770 [ 795.674817][ T9893] __should_failslab+0x11a/0x160 [ 795.679779][ T9893] should_failslab+0x9/0x20 [ 795.684306][ T9893] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 795.690043][ T9893] ? __kmalloc_node_track_caller+0x3c/0x60 [ 795.690063][ T9893] __kmalloc_node_track_caller+0x3c/0x60 [ 795.690073][ T9893] ? __pskb_copy_fclone+0xac/0x12b0 [ 795.690086][ T9893] __alloc_skb+0xe8/0x500 [ 795.690100][ T9893] __pskb_copy_fclone+0xac/0x12b0 [ 795.690113][ T9893] ? lockdep_hardirqs_on+0x295/0x7d0 [ 795.690133][ T9893] hsr_forward_skb+0xca9/0x2040 [ 795.690158][ T9893] ? hsr_port_get_hsr+0xc6/0xf0 [ 795.690168][ T9893] hsr_dev_xmit+0x77/0x90 [ 795.690180][ T9893] dev_hard_start_xmit+0x1c1/0x3f0 [ 795.690195][ T9893] __dev_queue_xmit+0x1e53/0x3010 [ 795.690223][ T9893] dev_queue_xmit+0x17/0x20 [ 795.690233][ T9893] neigh_connected_output+0x3df/0x410 [ 795.690255][ T9893] ip_finish_output2+0x13be/0x18d0 [ 795.701669][ T9893] ? ip_fraglist_prepare+0x2e5/0x590 [ 795.701691][ T9893] ip_do_fragment+0x1528/0x1d10 [ 795.771308][ T9893] ? ip_fragment+0x210/0x210 [ 795.775923][ T9893] ? rcu_lock_release+0xd/0x30 [ 795.780689][ T9893] ? ipv4_mtu+0x2bc/0x3c0 [ 795.785026][ T9893] ip_fragment+0x11f/0x210 [ 795.789472][ T9893] __ip_finish_output+0x3fc/0x4b0 [ 795.789487][ T9893] ip_finish_output+0x52/0x1e0 [ 795.789496][ T9893] ? ip_mc_output+0x4c6/0x620 [ 795.789506][ T9893] ip_mc_output+0x4db/0x620 [ 795.789521][ T9893] ip_send_skb+0x126/0x1e0 [ 795.789534][ T9893] ip_push_pending_frames+0x66/0x80 [ 795.789552][ T9893] raw_sendmsg+0x1e06/0x3790 [ 795.789582][ T9893] ? __kasan_check_read+0x11/0x20 [ 795.799337][ T9893] inet_sendmsg+0x147/0x310 02:43:00 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:00 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xff00000000000000}], 0x2) 02:43:00 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffff3f1f, 0x0) [ 795.799351][ T9893] ? security_socket_sendmsg+0xa0/0xd0 [ 795.799361][ T9893] ? inet_send_prepare+0x250/0x250 [ 795.799375][ T9893] kernel_sendmsg+0x109/0x140 [ 795.799390][ T9893] sock_no_sendpage+0x100/0x140 [ 795.799410][ T9893] inet_sendpage+0x18c/0x340 [ 795.799422][ T9893] ? inet_sendmsg+0x310/0x310 [ 795.799433][ T9893] sock_sendpage+0xd3/0x120 [ 795.799450][ T9893] pipe_to_sendpage+0x1f9/0x2a0 [ 795.871089][ T9893] ? sock_fasync+0x100/0x100 [ 795.871105][ T9893] __splice_from_pipe+0x2f7/0x8a0 [ 795.880702][ T9893] ? generic_splice_sendpage+0x180/0x180 [ 795.886351][ T9893] generic_splice_sendpage+0x114/0x180 [ 795.891812][ T9893] ? iter_file_splice_write+0xe20/0xe20 [ 795.897360][ T9893] __se_sys_splice+0x71a/0x1ac0 [ 795.902219][ T9893] ? check_preemption_disabled+0xb7/0x2a0 [ 795.907947][ T9893] ? debug_smp_processor_id+0x1c/0x20 [ 795.913323][ T9893] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 795.919400][ T9893] __x64_sys_splice+0xe5/0x100 [ 795.924166][ T9893] do_syscall_64+0xf7/0x1c0 [ 795.928671][ T9893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 795.934563][ T9893] RIP: 0033:0x459f49 [ 795.938457][ T9893] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 795.958149][ T9893] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 795.966566][ T9893] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 795.974684][ T9893] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 795.982688][ T9893] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 795.990660][ T9893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 795.998635][ T9893] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:01 executing program 5 (fault-call:7 fault-nth:32): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xffffffff00000000}], 0x2) 02:43:01 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612121ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:01 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200000007, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7472616e833d66642c726664916f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6673757569643d39326334313051342d326531382d393134362d6e0764652d623538653431de002c00"]) 02:43:01 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffaa55, 0x0) 02:43:01 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x875f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:01 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4250cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x3) 02:43:01 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffffdf9, 0x0) [ 796.551465][ T9937] FAULT_INJECTION: forcing a failure. [ 796.551465][ T9937] name failslab, interval 1, probability 0, space 0, times 0 [ 796.591315][ T9937] CPU: 0 PID: 9937 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 02:43:01 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x404802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_create1(0x80000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @broadcast}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000004c0)=[@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x20}, 0x6}, @in6={0xa, 0x4e20, 0x800, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, @in6={0xa, 0x4e23, 0x3, @empty, 0x40}, @in6={0xa, 0x4e21, 0x3, @ipv4={[], [], @empty}, 0x8}, @in={0x2, 0xd8f8, @empty}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}], 0x90) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xfffffffffffffe85) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0xa47d4463c101cedd}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3c}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0011}, 0x0) [ 796.599178][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 796.599183][ T9937] Call Trace: [ 796.599202][ T9937] dump_stack+0x1d8/0x2f8 [ 796.599221][ T9937] should_fail+0x555/0x770 [ 796.599243][ T9937] __should_failslab+0x11a/0x160 [ 796.599260][ T9937] should_failslab+0x9/0x20 [ 796.599274][ T9937] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 796.599285][ T9937] ? __kmalloc_node_track_caller+0x3c/0x60 [ 796.599298][ T9937] __kmalloc_node_track_caller+0x3c/0x60 02:43:01 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8760, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:01 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d47808d595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 796.599313][ T9937] ? __ip_append_data+0x2077/0x31a0 [ 796.653300][ T9937] __alloc_skb+0xe8/0x500 [ 796.657636][ T9937] __ip_append_data+0x2077/0x31a0 [ 796.662844][ T9937] ? do_raw_getsockopt+0x1c0/0x1c0 [ 796.666610][ T9943] 9pnet: Insufficient options for proto=fd [ 796.667972][ T9937] ? lock_sock_nested+0xa8/0x120 [ 796.668003][ T9937] ip_append_data+0x11c/0x190 [ 796.683399][ T9937] ? do_raw_getsockopt+0x1c0/0x1c0 [ 796.683415][ T9937] raw_sendmsg+0x1d9e/0x3790 [ 796.683451][ T9937] ? __kasan_check_read+0x11/0x20 [ 796.683476][ T9937] inet_sendmsg+0x147/0x310 [ 796.683488][ T9937] ? security_socket_sendmsg+0xa0/0xd0 [ 796.683498][ T9937] ? inet_send_prepare+0x250/0x250 [ 796.683510][ T9937] kernel_sendmsg+0x109/0x140 [ 796.683524][ T9937] sock_no_sendpage+0x100/0x140 [ 796.683547][ T9937] inet_sendpage+0x18c/0x340 [ 796.683559][ T9937] ? inet_sendmsg+0x310/0x310 [ 796.683570][ T9937] sock_sendpage+0xd3/0x120 [ 796.683586][ T9937] pipe_to_sendpage+0x1f9/0x2a0 [ 796.683594][ T9937] ? sock_fasync+0x100/0x100 [ 796.683609][ T9937] __splice_from_pipe+0x2f7/0x8a0 [ 796.683621][ T9937] ? generic_splice_sendpage+0x180/0x180 [ 796.683644][ T9937] generic_splice_sendpage+0x114/0x180 [ 796.683659][ T9937] ? iter_file_splice_write+0xe20/0xe20 [ 796.683670][ T9937] __se_sys_splice+0x71a/0x1ac0 [ 796.683685][ T9937] ? check_preemption_disabled+0xb7/0x2a0 [ 796.683699][ T9937] ? debug_smp_processor_id+0x1c/0x20 [ 796.683710][ T9937] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 796.683730][ T9937] __x64_sys_splice+0xe5/0x100 [ 796.683745][ T9937] do_syscall_64+0xf7/0x1c0 [ 796.683759][ T9937] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 796.683768][ T9937] RIP: 0033:0x459f49 [ 796.683777][ T9937] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 796.683783][ T9937] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 796.683793][ T9937] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 796.683799][ T9937] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 796.683805][ T9937] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 796.683811][ T9937] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 796.683817][ T9937] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 796.751221][ T9950] 9pnet: Insufficient options for proto=fd 02:43:02 executing program 5 (fault-call:7 fault-nth:33): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:02 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffffdff, 0x0) 02:43:02 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x0, 0x2, 0x6}) 02:43:02 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4785ed595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:02 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8761, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x4) 02:43:02 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffffe00, 0x0) 02:43:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x5) 02:43:02 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c5e913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 797.430692][ T9980] FAULT_INJECTION: forcing a failure. [ 797.430692][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 797.443486][ T9980] CPU: 0 PID: 9980 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 797.451319][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 797.461382][ T9980] Call Trace: [ 797.464704][ T9980] dump_stack+0x1d8/0x2f8 [ 797.469061][ T9980] should_fail+0x555/0x770 [ 797.473540][ T9980] __should_failslab+0x11a/0x160 [ 797.478521][ T9980] should_failslab+0x9/0x20 [ 797.483034][ T9980] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 797.488754][ T9980] ? __kmalloc_node_track_caller+0x3c/0x60 [ 797.494553][ T9980] __kmalloc_node_track_caller+0x3c/0x60 [ 797.494562][ T9980] ? __pskb_copy_fclone+0xac/0x12b0 [ 797.494574][ T9980] __alloc_skb+0xe8/0x500 [ 797.494586][ T9980] __pskb_copy_fclone+0xac/0x12b0 [ 797.494600][ T9980] ? hsr_addr_subst_dest+0x211/0x4b0 [ 797.494612][ T9980] hsr_forward_skb+0xca9/0x2040 [ 797.494636][ T9980] hsr_dev_xmit+0x77/0x90 [ 797.494648][ T9980] dev_hard_start_xmit+0x1c1/0x3f0 [ 797.494663][ T9980] __dev_queue_xmit+0x1e53/0x3010 [ 797.494686][ T9980] dev_queue_xmit+0x17/0x20 [ 797.494703][ T9980] neigh_connected_output+0x3df/0x410 [ 797.494726][ T9980] ip_finish_output2+0x13be/0x18d0 [ 797.494734][ T9980] ? ip_fraglist_prepare+0x2e5/0x590 [ 797.494752][ T9980] ip_do_fragment+0x1528/0x1d10 [ 797.494764][ T9980] ? ip_fragment+0x210/0x210 [ 797.569076][ T9980] ? rcu_lock_release+0xd/0x30 [ 797.573853][ T9980] ? ipv4_mtu+0x2bc/0x3c0 02:43:02 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffff7f, 0x0) 02:43:02 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8762, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 797.578186][ T9980] ip_fragment+0x11f/0x210 [ 797.582604][ T9980] __ip_finish_output+0x3fc/0x4b0 [ 797.587639][ T9980] ip_finish_output+0x52/0x1e0 [ 797.592407][ T9980] ? ip_mc_output+0x4c6/0x620 [ 797.597087][ T9980] ip_mc_output+0x4db/0x620 [ 797.601631][ T9980] ip_send_skb+0x126/0x1e0 [ 797.606053][ T9980] ip_push_pending_frames+0x66/0x80 [ 797.611259][ T9980] raw_sendmsg+0x1e06/0x3790 [ 797.615872][ T9980] ? __kasan_check_read+0x11/0x20 [ 797.620922][ T9980] inet_sendmsg+0x147/0x310 [ 797.625443][ T9980] ? security_socket_sendmsg+0xa0/0xd0 02:43:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x8) [ 797.630906][ T9980] ? inet_send_prepare+0x250/0x250 [ 797.636118][ T9980] kernel_sendmsg+0x109/0x140 [ 797.640810][ T9980] sock_no_sendpage+0x100/0x140 [ 797.645678][ T9980] inet_sendpage+0x18c/0x340 [ 797.650287][ T9980] ? inet_sendmsg+0x310/0x310 [ 797.654975][ T9980] sock_sendpage+0xd3/0x120 [ 797.659488][ T9980] pipe_to_sendpage+0x1f9/0x2a0 [ 797.664340][ T9980] ? sock_fasync+0x100/0x100 [ 797.668936][ T9980] __splice_from_pipe+0x2f7/0x8a0 [ 797.673971][ T9980] ? generic_splice_sendpage+0x180/0x180 [ 797.679734][ T9980] generic_splice_sendpage+0x114/0x180 [ 797.685324][ T9980] ? iter_file_splice_write+0xe20/0xe20 [ 797.690903][ T9980] __se_sys_splice+0x71a/0x1ac0 [ 797.690923][ T9980] ? check_preemption_disabled+0xb7/0x2a0 [ 797.690938][ T9980] ? debug_smp_processor_id+0x1c/0x20 [ 797.690949][ T9980] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 797.690970][ T9980] __x64_sys_splice+0xe5/0x100 [ 797.690986][ T9980] do_syscall_64+0xf7/0x1c0 [ 797.691000][ T9980] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 797.691010][ T9980] RIP: 0033:0x459f49 [ 797.691022][ T9980] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 797.691027][ T9980] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 797.691037][ T9980] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 797.691042][ T9980] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 797.691048][ T9980] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 797.691054][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 797.691059][ T9980] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:03 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8763, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:03 executing program 5 (fault-call:7 fault-nth:34): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:03 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffff8c, 0x0) 02:43:03 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59915c89b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:03 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) 02:43:03 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fdatasync(0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="ead1f50e7549fdafd44b37cb7e6fcd1f58918a978ad53ff8d261e0ff0f2f51bf3ab98a488de8f41dd902b15b48d244c14cdad068935e65996bc76b2736083df29318c4b479cf803322ea0d4aab5cabc747887b3927895fad24e6fd133c68d610774576b4e009af47b9161c2fe54c7d1e85c135399877518b5b13986ea671137eb5b3f9621eb3fcc0888c53452185d663329ae28d5df4c0da63d21bac42", 0x9d}, {&(0x7f0000000340), 0xffffffe3}], 0x2) 02:43:03 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffffeb, 0x0) 02:43:03 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b85edda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000000c0)={0x3, 0x3, [{0x9}, {0xfffffffc, 0x0, 0xffffffff80000001}, {0x5, 0x0, 0x4}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000180)={0x54, "b5186ccaa508fea9c7c0209b7505dc06547d41e4b5e44c6e1808958d4e9b369c4cca1e41c3bf9278d0218022bf121898aefd7af1d8bbbb4c8179ba9d115dfac8be67ee5c06569a21a02b6a2b70f00df0c97f0af7"}) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xffffffffffff8000, 0xd40) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x15c, r6, 0xe11, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x140, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth14\xcd\t\x00bridge\x00m)\xef\xcb\xb7\x0f\xf6\r\x9f\xfa8n\xb0\x8f:\xe9\'\"_\xd3~\xdd\xca\xa9\xbe\x98\x8b{`\x88\xc5%\x8br=\xa4\x84cS\x19\aB\x83\x18\x8d\xde\x82\xc4\n\x0eF\xb3e\x921\x9e\xf3\xc4\x88\x1b\x9b\xf4:\xed \xb8\xd0\x0e\xd7\x01\xd4\xc7\xf9dr\nLB\xe3\xfd\xd3\xed\xe0\x8d\x14\xcb\xc5m\x11\x1f\xe4\xcd\xe1w\x0e\x1f1\xf4\xfbZ\x9f\x06y\x9d\x16\x98>\x97d83\xcd\xb34\x06\x97\x89\xfb\xca\xe6M \xf4]i0\xfc9\x1e\xa7[J\xca\xc4\xa3\xa5\xfc[\x90e\xb2\xd2\x8b#NeoB\"\x142\xf8\x88\xeb\x9cE\xbe&0\xe5\xd3Q7nMD\xd5\x17\x16UC\x82\x89\vz\xbf\xfa,\xa2\xf7RSm\nR\t\xc9\x8b\x1b\xff)\xce\xfb\xa6o\xe6\xe3\x83\xfc\xb9\xee\x92g\x7fZ\x7f|\xf5?\xc2\xdc\x8a\xe1Y\xd3\xe2\xcc\xad\xe1*\x82\xa6C\x8cJ\r\xcb\x91\x14m\x83\xf6\xc5\xcbab\xebmt\xf7\xa9E\x02Jl\xe2\x88\xc8g\x8a\xc2\x8b\x9a[\x8f\xb2\x8dS\xb5UG\v[;!\x93gqz\xa8\x89e\xb4!f\xe4D\xcc\xed\f\x8d\xab|\xf4\xda5\x19'}}}}}, 0x15c}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x88442802}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x1) 02:43:03 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8764, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 798.358021][T10021] FAULT_INJECTION: forcing a failure. [ 798.358021][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 798.370754][T10021] CPU: 1 PID: 10021 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 798.378655][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.389338][T10021] Call Trace: [ 798.392654][T10021] dump_stack+0x1d8/0x2f8 [ 798.397000][T10021] should_fail+0x555/0x770 [ 798.401545][T10021] __should_failslab+0x11a/0x160 [ 798.406528][T10021] should_failslab+0x9/0x20 [ 798.406542][T10021] kmem_cache_alloc_node+0x65/0x280 [ 798.406557][T10021] ? __alloc_skb+0x9f/0x500 [ 798.406571][T10021] ? mark_lock+0x107/0x1650 [ 798.406585][T10021] __alloc_skb+0x9f/0x500 [ 798.406603][T10021] __pskb_copy_fclone+0xac/0x12b0 [ 798.406615][T10021] ? lockdep_hardirqs_on+0x295/0x7d0 [ 798.406632][T10021] hsr_forward_skb+0xca9/0x2040 [ 798.406656][T10021] ? hsr_port_get_hsr+0xc6/0xf0 [ 798.406668][T10021] hsr_dev_xmit+0x77/0x90 [ 798.406680][T10021] dev_hard_start_xmit+0x1c1/0x3f0 [ 798.406699][T10021] __dev_queue_xmit+0x1e53/0x3010 [ 798.406728][T10021] dev_queue_xmit+0x17/0x20 [ 798.406740][T10021] neigh_connected_output+0x3df/0x410 [ 798.406764][T10021] ip_finish_output2+0x13be/0x18d0 [ 798.406773][T10021] ? ip_fraglist_prepare+0x300/0x590 [ 798.406790][T10021] ip_do_fragment+0x1528/0x1d10 [ 798.406799][T10021] ? ip_fragment+0x210/0x210 [ 798.406820][T10021] ? rcu_lock_release+0xd/0x30 [ 798.406826][T10021] ? ipv4_mtu+0x2bc/0x3c0 [ 798.406837][T10021] ip_fragment+0x11f/0x210 [ 798.406851][T10021] __ip_finish_output+0x3fc/0x4b0 [ 798.406865][T10021] ip_finish_output+0x52/0x1e0 [ 798.406872][T10021] ? ip_mc_output+0x4c6/0x620 [ 798.406884][T10021] ip_mc_output+0x4db/0x620 [ 798.406918][T10021] ip_send_skb+0x126/0x1e0 [ 798.406933][T10021] ip_push_pending_frames+0x66/0x80 [ 798.406947][T10021] raw_sendmsg+0x1e06/0x3790 [ 798.406985][T10021] ? __kasan_check_read+0x11/0x20 [ 798.407010][T10021] inet_sendmsg+0x147/0x310 [ 798.407025][T10021] ? security_socket_sendmsg+0xa0/0xd0 [ 798.407044][T10021] ? inet_send_prepare+0x250/0x250 [ 798.407058][T10021] kernel_sendmsg+0x109/0x140 [ 798.407071][T10021] sock_no_sendpage+0x100/0x140 [ 798.407089][T10021] inet_sendpage+0x18c/0x340 [ 798.407100][T10021] ? inet_sendmsg+0x310/0x310 [ 798.407110][T10021] sock_sendpage+0xd3/0x120 [ 798.407124][T10021] pipe_to_sendpage+0x1f9/0x2a0 [ 798.407131][T10021] ? sock_fasync+0x100/0x100 [ 798.407145][T10021] __splice_from_pipe+0x2f7/0x8a0 [ 798.407156][T10021] ? generic_splice_sendpage+0x180/0x180 02:43:03 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffffff6, 0x0) [ 798.407177][T10021] generic_splice_sendpage+0x114/0x180 [ 798.407189][T10021] ? iter_file_splice_write+0xe20/0xe20 [ 798.407199][T10021] __se_sys_splice+0x71a/0x1ac0 [ 798.407212][T10021] ? check_preemption_disabled+0xb7/0x2a0 [ 798.407225][T10021] ? debug_smp_processor_id+0x1c/0x20 [ 798.407235][T10021] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 798.407254][T10021] __x64_sys_splice+0xe5/0x100 [ 798.407268][T10021] do_syscall_64+0xf7/0x1c0 [ 798.407281][T10021] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 798.407291][T10021] RIP: 0033:0x459f49 [ 798.407304][T10021] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 798.407310][T10021] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 798.407319][T10021] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 798.407327][T10021] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:43:03 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffffffb, 0x0) [ 798.407332][T10021] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 798.407338][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 798.407342][T10021] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:04 executing program 5 (fault-call:7 fault-nth:35): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:04 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89800817d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000001300)='/de\x01\x00', 0x1, 0x60001) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000100)={r1, r2/1000+30000}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) io_setup(0x1, &(0x7f0000000140)=0x0) r6 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) io_submit(r5, 0x2, &(0x7f00000012c0)=[&(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x800, r4, &(0x7f0000000180)="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", 0x1000, 0x8, 0x0, 0x3, r0}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0xa, 0xf2ee, r6, &(0x7f00000011c0)="02c621f3d0916e4ecc8261b837807224ad03153fdb7547b751ecd9c85ec19847644f26f8f42b405b0f513c1bc3269e324717a3539fd08a1759ab33a3e168c55bef435318c10c35564a94ee5adca003aa7e41f76a3c510d697f094612faf0907b3a9379cf2124a4e93fa07123638f3bf8b3d0e53bfec57f8a103503e42f1f2387c0687f2d78abb4b81f9a7036689b830bb5fe7f6aeed47d6a", 0x98, 0x10001, 0x0, 0x1, r4}]) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x401f00000000, 0x0) 02:43:04 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8765, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:04 executing program 3: mkdir(&(0x7f0000000140)='./bus\x00', 0x5) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xedc000000000, 0x0) 02:43:04 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) recvmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/209, 0xd1}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/136, 0x88}], 0x3, &(0x7f0000000500)=""/34, 0x22}, 0xadf2d730ee0bbfbd) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x803) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@smackfshat={'smackfshat', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@pcr={'pcr'}}, {@pcr={'pcr', 0x3d, 0x36}}, {@fowner_lt={'fowner<', r4}}]}}) [ 799.205405][T10059] FAULT_INJECTION: forcing a failure. [ 799.205405][T10059] name failslab, interval 1, probability 0, space 0, times 0 [ 799.218178][T10059] CPU: 0 PID: 10059 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 799.226129][T10059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 799.237980][T10059] Call Trace: [ 799.241307][T10059] dump_stack+0x1d8/0x2f8 [ 799.245671][T10059] should_fail+0x555/0x770 [ 799.250128][T10059] __should_failslab+0x11a/0x160 02:43:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES16=r0], @ANYRES16=r0, @ANYRESOCT=r6, @ANYRESHEX=r7, @ANYRESDEC=r1], @ANYBLOB="742bdf6c5b7517b7c1675442d71a2a4552d5d967f28dee0c236c3c55ab6d960a1b97d6670ca7fb4988aa8da237d3880ec3a69dc805c1233399b2737afb4d2d77cc4ca680c668cefc78ba71dfb5e6f80a6001e9a67e46daae2ee0a4fcc666fb748ddd4100000034ade394ba075869a4b9446deb01e98d917cd36de905a3f2e6d92c4e0ac049e61300eb1eb1e246017c6b078295cc0b2a67f9dd10c8c34a9ef0b9fb574c1ff87c4cda0d6f512c72f8eb8502e8eb72b10ab44f6e32e5162fc407b546"], 0xf4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet6_tcp_TLS_RX(r8, 0x6, 0x2, &(0x7f00000001c0)=@ccm_128={{0x303}, "4efe706a66e42004", "6aa88270890b4b8f42d4eea87a2afa95", "eb74c13a", "8a565556cc962fa0"}, 0x28) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f00000000c0)=0x866c) 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1000000000000, 0x0) [ 799.255092][T10059] should_failslab+0x9/0x20 [ 799.259607][T10059] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 799.265332][T10059] ? __kmalloc_node_track_caller+0x3c/0x60 [ 799.271146][T10059] __kmalloc_node_track_caller+0x3c/0x60 [ 799.276777][T10059] ? __pskb_copy_fclone+0xac/0x12b0 [ 799.282013][T10059] __alloc_skb+0xe8/0x500 [ 799.282029][T10059] __pskb_copy_fclone+0xac/0x12b0 [ 799.282047][T10059] ? lockdep_hardirqs_on+0x295/0x7d0 [ 799.282064][T10059] hsr_forward_skb+0xca9/0x2040 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2000000000000, 0x0) [ 799.282087][T10059] ? hsr_port_get_hsr+0xc6/0xf0 [ 799.282101][T10059] hsr_dev_xmit+0x77/0x90 [ 799.282115][T10059] dev_hard_start_xmit+0x1c1/0x3f0 [ 799.282133][T10059] __dev_queue_xmit+0x1e53/0x3010 [ 799.282160][T10059] dev_queue_xmit+0x17/0x20 [ 799.282172][T10059] neigh_connected_output+0x3df/0x410 [ 799.282197][T10059] ip_finish_output2+0x13be/0x18d0 [ 799.282208][T10059] ? ip_fraglist_prepare+0x300/0x590 [ 799.282225][T10059] ip_do_fragment+0x1528/0x1d10 [ 799.282233][T10059] ? ip_fragment+0x210/0x210 [ 799.282257][T10059] ? rcu_lock_release+0xd/0x30 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4000000000000, 0x0) [ 799.282267][T10059] ? ipv4_mtu+0x2bc/0x3c0 [ 799.282277][T10059] ip_fragment+0x11f/0x210 [ 799.282290][T10059] __ip_finish_output+0x3fc/0x4b0 [ 799.369338][T10059] ip_finish_output+0x52/0x1e0 [ 799.369351][T10059] ? ip_mc_output+0x4c6/0x620 [ 799.378889][T10059] ip_mc_output+0x4db/0x620 [ 799.378906][T10059] ip_send_skb+0x126/0x1e0 [ 799.378920][T10059] ip_push_pending_frames+0x66/0x80 [ 799.378935][T10059] raw_sendmsg+0x1e06/0x3790 [ 799.378966][T10059] ? __kasan_check_read+0x11/0x20 [ 799.378987][T10059] inet_sendmsg+0x147/0x310 [ 799.378999][T10059] ? security_socket_sendmsg+0xa0/0xd0 [ 799.379008][T10059] ? inet_send_prepare+0x250/0x250 [ 799.379021][T10059] kernel_sendmsg+0x109/0x140 [ 799.379034][T10059] sock_no_sendpage+0x100/0x140 [ 799.379054][T10059] inet_sendpage+0x18c/0x340 [ 799.379066][T10059] ? inet_sendmsg+0x310/0x310 [ 799.379076][T10059] sock_sendpage+0xd3/0x120 [ 799.379091][T10059] pipe_to_sendpage+0x1f9/0x2a0 [ 799.379099][T10059] ? sock_fasync+0x100/0x100 [ 799.379112][T10059] __splice_from_pipe+0x2f7/0x8a0 [ 799.379124][T10059] ? generic_splice_sendpage+0x180/0x180 [ 799.379146][T10059] generic_splice_sendpage+0x114/0x180 [ 799.379159][T10059] ? iter_file_splice_write+0xe20/0xe20 [ 799.379170][T10059] __se_sys_splice+0x71a/0x1ac0 [ 799.379186][T10059] ? check_preemption_disabled+0xb7/0x2a0 [ 799.379204][T10059] ? debug_smp_processor_id+0x1c/0x20 [ 799.488235][T10059] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 799.495627][T10059] __x64_sys_splice+0xe5/0x100 [ 799.500410][T10059] do_syscall_64+0xf7/0x1c0 [ 799.504921][T10059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 799.510818][T10059] RIP: 0033:0x459f49 [ 799.514723][T10059] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 799.534325][T10059] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 799.542731][T10059] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 799.550700][T10059] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 799.550706][T10059] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 799.550711][T10059] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 799.550716][T10059] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:04 executing program 5 (fault-call:7 fault-nth:36): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x14b043, 0x8c) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000012c0)=ANY=[@ANYRES16, @ANYBLOB="b5e181f6ca00402574d993833d7fdfff7342c4e7bce8cf20c8be1bd655e55bc36fecffd6bb4a871dd317456887b0bed397864280704d2465a7fbc6a784b40d54c08d785b5c64a891f4236a3db34d72bf5489c969e1f91d782092766cdcdedf39be6d7883233578186cc8abc81937e77e8ed27d4e61f07b78e834330f15c385c7cd9011e73d5a879146786596e02ac5e850ed990441e306552550e6615d922a9ea9aa34e6ef3505c472859dbdf193743ee0c61d1ff3032823bbb4698fa8d2e378453e00e298b2b1328adf54a099adf8550b9289dfafbdddaf491fbc22b7364340dabdfc77c4535024ad14481480b09627f5ac9a1dc7a04ede39cb897dbd0635f4a71f619e64866f6ddebb39d62249b03c4032d46d66beeb9436e620f0e2223535924fb480790bdf950cadc7edb4d4b437d484a1c5189662bc3781836ab5d03cc7d14044218c1ddcd49bc318c7b245e4e2e213e5be916ef76cc3c91197628c3cb43155131c2bdaa3ab414975c94145d3b1d3ed07c5fb2559fd474e966ddc0aabb418762eb9e7fcbf62b4ec732ec8750a1a623ab41f79db154b8e866017e8cc06e232fbdeb6b88883f8880d28beec7983f0bbf0c7f26b5fac447210647fed964cb448590f1a16ad3169d3db8f84fe386ca2efcd88a5837353fcaf980c5ed4287dc13dea29a3708ba8c4ba96ea63bd5dab3a948b44a91c56943dae4f39c96148d66f2cf3605ed38e49607c09d94038141ee324fac7430f289e16d61ffd100d5e8c657b8fb06a8cfc90931ba3176c127d1bcabab31fbfe00b1e61540e5f1cbbe85ab20c5461e69180e55fc70401acc16a124c968552fa487103f4161bc2ea72829d99c3640ab0bed2936c45574d4f17428cb0f6f53cd005fbfb6c695c1fcbaf9d09439dd2c3c20f83432d158db61d1e9add423b5af79f070c61665d7a94f8e3d6cacba8da951084216c0a6ef8c313645b8c5b6bfc64bfafd500a48afe7a049cccb2415d3374ea28e377190d1ed97eb7d414db86c5a8700a9226199e07eba44784ff393200b4c5ff0a049974142fec899a10cdaed6ef6a8777e0ce15a1f747f6e7fb55e5c97134de221b07c24b0d2b5dd686b63549125362fcb10415e59882121c8d642224dd5ff5c05b28f52abf96bd05b398f7046e5f286aabdab2d7c5cfa355bdf688b72ae413312fcb759d23dfcc5110505ea6722986e05f1e2b5081beb3f75eb96cf723b680b8dfe2b050f1e43322bfddcc97d1716eaa66ca5266472f724c771fffab76b6dce490081a3049d49f63d4ddc73f97dc58723f7baf99f76ced5a61af827f7c83bde3e0fc2a7642463dc7b8adde8e99277f7b8e2fd48090269fa10fbeb07f198f9a538141ed00c8bb4a707d862f65f9701082e1be67a38cb58862892d51b57e906dc9f5da061135b31a529e6274e7202ea015569320d42c17b98f7d43c88d8da8f30a6f69db3d5fe4c079d7b746acbcdd938b668e1827cbfac1aa8ace1044632900946684e0a56a97ba7ebe7c31aac960d349bc0ac1018994be3ac7f08321a7dfead12e65709c3b832c4e905281cd60473ba76ede1baf678427a2c03c43be0546b7d041db270490bad3d1da82b3333b32de1eceb501ad60fe42c0873a6c7c025e6eff3d816d6ad25aad8d1732d21f6b56c1fb45e517794d05bdfa16e1312825295d3ed1067fb045b9d6ffa7f734d57ac5f4c0d8f718ec60b4c9db617c11e93e58f912e7d38721cfa7682c5206b3ec501e8b96bfea9e0dcb775953b31b58f22809f353aff64b1ec0aa5066a4c5874854859cce3052549a0a1989e41d473d09f8a54f0d20c58be4e7917245eae93f2d4d3c7ef3affa685542fbb073bb35eabb96e5c00ba473acf1a582cfd6851194b8b56dbc27ad048ccb49b11cbab8f17de66fc96bd7e3311ff0ee132fcf0776c7728c2f56cb9f440668e4316a28a4751bf3013f6956af302a28dac45bae59f6855612684269d556c1c086a3d66036fca7909330f33a47c4e0c1431d04f6587f3edbdb2ac81ad9f059333a75b06b849fe9fd037e87f1c6bb823a591957cd4b7588a352ac09bc5cfc57016ff8b035b814ef578bfa7ed4a2884709d094d788b82d14e35bad025fdc3a39ce5141f4e04b52b22aa22c021b9fda1be8e16bdb2d317a5af0cf817b32ce5e90438aae04b115274504cc11697dcb5ac996e147e14292fcd5d6307720dd3df4451c0a873381049a6858bde890ff359cfa30118d6b2ef9ea9be42ba667a2c90c1738a72ee55903d7c612482337b101b416c17e6304bb1c2cd89e1410dec16a03054b08a7a2ac13d004541a7f3ac5357b82664ca5aa42dfea22d7d095cbcfe4c858f5239c6fe67d693be88013fca8eeb5fc2b58412295dd68a770f16679b04409c56a550258cce6dba0e6bac6fbf77f4a8d94b666c440be056c4a443f26f6cfe26ae9bf80bc18098e338de90a7c4a988401e8bc42ca8bb86c472a8a6a194c89a435a80813545ec225a91641c9ac3fe04aa50c29fecf0c121d711d8064274800b65368ed9e66f20f62a380192cbf4c394e0fd5fc61adaca94afcbfc9c1d24174e346294bab2242bfa4e6132e2a8a08b1c41615c473b38588b787b977487f50ead3a9c5a86ae11f4a51ddc3ed1efa1799152ad7e2f7948a1e8b201a98e4f16704564f20db084821025936d043641dfe87f6e8ecdd7aed8d9553fe51919872e9c09dd1c562fd186677caa6b8bc90a06f4391bafe78f372f4f71121f1563c3aaaad7a8045dd74fbdb875a4e16395c3e5de164fab47d85d26042ae4d2c1611929b3b86b271c5208f68b6d9f86e8aad95d526f90b45ae1a2f150e8ee546f52c7351a15945878c93a200885ffddb5b7ea461116a6579c60d09acde010085410ae38630397ddf81d96a53abfc1a759b0855ee0383f1ac82446cb1679706f62d22e91c4990507eceac9766c099a188b9479575cabced17bd2233db70d38741c130896743eb936757b853fed73ae12ae579641f2a05bb8b308498129aa542ac446851c9762958b486e7a8a9b1638fec2c0161bdc2cded3068bc4bdb1ed730674864415af2cc12f27410fcf128feacbb3a2197a885bacde352ce2c115012aed15f24326a7b5ac9612c5d4c75cbbd2469148eee3b5ec33cffa9e130180860f96326181ea860e7af025b2031e530460268ac50d7c716bdecff1670626f53d8b1c804557d7a9e7fef2fe21d00ac7f4a776559f2d562069d859dc9ae297f682fd0ee42d52ee96bd7d5bb7b1ed9f0887fe8bb4c3d0163d1bdce3346451a285918465fb4c1fe25d06e6cb12d3e5d753f9b24f000a96d81a14a790dc098384fd308c42cf2d3941f19ff64f52a1181f6011aeac90a6e7069b1e8f7bc6626c4661c4957628f0cc165d57d6ea92a9676a7753e265bd804b58a1885fe5516339352f3ae2258adff43d6a008f738db8aff0a7f04eb5e91d26df31e08e2d766279584a9afb72303b972827b2f7f764e33ed76632dd69cf0593bcb7fa632ac58c0e86a00ebd8bc4d06f5f292ade31807f20232723e313dc74416a59f49d48d7d49adc7382e9894011e399764e8834ffd2fd6da3af9916e59a4c5c00b587d68225411f8bda13bcea2939c82dc87e36212c58ab0dab7450a4a8032104d658b52404e7e1c9ed6acfeccdfd83dea842f9453d5aed0025187d00c4a97251edcb41acc5c546c0425e11a1c74fb0edbe6d205a06399c0afd0e31faa9734a58a7f792b0334be5ff8019f2cd3eef4a0a32ec87895d17a706237bef36be5fbc5e8c72af1ee9647de3e7c34537dc121fe1b6804cc02ad9a54eb9536dc9f43740d928d20b55a0f6670de0645ac8e1a3ab0deb270398fb9266dbf8bda9d9c68d89c8737bab0fae646871ba5d91b044122b2f4d85bb893016a99ce8fd804beafc3b8c07fde4bd553cd210aa2a679a2099e0972b13b489d7a3bd5c6e4ead2b698c6be5132cbd51d2a4127ece8cbf0938c0e411bd5b9aac66fcaddb5e20a505c91cffa4519868c4342dd9210d41a6c22692993f7fd68e7727233af63a13e584fa4a6effad6834504b64501a8b41a8b2689c436a50e0b9638cd08d4b67c8a3a0cf2d602ac61839cb4c9e202ef7fbf26f4d8809f7c5f3af549dc2447dfe0bdec69d551c55d71610ebeb0f9d389a89673b4690acc33557857304b0b8779636c34fdeb43c2499576c4653afc6d5cafc129af33628d0df7834ac6db05678ac9d0501aff84eb98d66ed660541f43b616ee6aaa5ecdae1af6e0e447718ebbc54101b21fb9cc3a37f32d71ec27535e48f0e88603028564c1b7b7bad6d45d4c25f501374c0ffcbd125489a27033ffe4857d07ee8c281a42eed1a81a090aa0a454c385bb4acf578ee74e81126baed9cbc98d9e5856528361a829318e7f467450d14111e2b1380ec8dccb8ae6311f396cdefb363f77883b0bd87e268175db907ffb39227330eb4ad08e23762eeb49c5c675f24a2dcda975b3898fc395613e7abdb935890aa627e9cd0508b27a43c8f8c31d8bdf8acb42123b498c05b5e46d80fc251179a3bd4c8f29a8e86f44b385b710ac5a7e89a9f8f91fa81c9a1628fefaac3e40cf6bc0e4d9ec0c8622867e853bfd692af5a33e0f9f281a614f04a8dac5817a740a594fa523b57644e8ce7a8f4fcd37fa957e7440b8e8a33bc02f1e877c3ff47fcd88c9780f17f2e16c12c93d443c536aa28f5286bfdb6f828e195b96a0be705f1aa45665c5a279a882a3005092bc4a2ede89fd6d814c6642061513d547a85ba2925d07190a44e0877406e14c677ff377bbb4eb4f42807a181428616cf50050c8ceecd83e478d3da45343abb6037d68c72ab5ff3f2c66a648cd3c9db5277aa88042a6be9ca4bacc0f1c07d83fd18a91d4a2ac73cfbae0ca6eef24ec77785b655ce32e2e72320d12cdd20a6c296f29b03f9da02d82823437b37ea711bc596e8c37948b7b7ffba6802cb84fe00a00e92bfd66c4444084564c477c6c63a3cc1ade27165f7890d4fc9a7b6f0db4a1ad4f2a11e7bfc35971570aee9c18198617c831a42e926ab703027d190025691bf5d8efb5a87cbb2b061d0f752c33eecfa4cf0523babc8ed77258b1dd59ef6d7bda56d55ec9c5022314df99598dca148f0c58fe4be0fe43caa8b94094b3f33d673490984328965f8c7ecbfb98414bdb3e998d74f4af08c3e80c54d503ba845b60517a7d58b75b15f380355fe6be5d4e4c5b5740ed82748457cd14b4285a38ea7780f10747d899f842fe4ce4fe9d9b4d4c90a2cca3b653e5819897ac5554214426e356579b9c5bb76a7d0a8b384f47e6fca86a63d2b3cd8b77521157aee269f1d683ce60d6646234f033843543c21a8d5ac8ba1fb5070deb2d0e8a5efec1bf355c66eaa5beb1e2a18bcb1e89a031537b359ed360a4b4a50b53831a3f7a334f9dd197c323af2dd78b64d7ab1e1830292364c83319bf216961951812a432fcaab829cd0ef9fac7f9cb2e008cb900e201c933fd55cbdfb8186a26d98a2481280859645d445293ca543ffcb24bf400c3d27ab9a7280f65cbf10e6fa470ad67aa0b88207aecf71784028f82c47bd7641c161bfb1fc1da98fd0dc0da96fadee289bfade009a5851e7780e205a43456ba3d6e0e321fdb939aa5e0b30386ded459047ee7b5cc831a8857a2a2270212afc07db58d3a26341f26887499fef8bbafde7cfbfee97a10318d88b30db8ddf95925ea7f1f19512c4fa37d23ffd8ab0094514b9a595ee5598ec1617bdda60ed9f84e23ae36aeb8cc4689ede054d498deec5cab9d7dea5e4e12fd44e2278e87bacebe22440cf63f23fbb7", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRES64=r3, @ANYRES64=r0, @ANYRESHEX=r0]], 0x100a) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6000000000000, 0x0) 02:43:04 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b8980245ed63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:04 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='\x00\x00\x02', 0x0, &(0x7f00000001c0)=ANY=[]) 02:43:04 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8766, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:04 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7ffffffffffff, 0x0) 02:43:05 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa077ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 800.095001][T10096] FAULT_INJECTION: forcing a failure. [ 800.095001][T10096] name failslab, interval 1, probability 0, space 0, times 0 [ 800.107753][T10096] CPU: 1 PID: 10096 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 800.115653][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 800.125731][T10096] Call Trace: [ 800.129048][T10096] dump_stack+0x1d8/0x2f8 [ 800.133392][T10096] should_fail+0x555/0x770 [ 800.137800][T10096] __should_failslab+0x11a/0x160 [ 800.142750][T10096] should_failslab+0x9/0x20 [ 800.147245][T10096] kmem_cache_alloc_node+0x65/0x280 [ 800.152444][T10096] ? __alloc_skb+0x9f/0x500 [ 800.156958][T10096] __alloc_skb+0x9f/0x500 [ 800.161305][T10096] __pskb_copy_fclone+0xac/0x12b0 [ 800.166343][T10096] ? hsr_addr_subst_dest+0x211/0x4b0 [ 800.171645][T10096] hsr_forward_skb+0xca9/0x2040 [ 800.176528][T10096] hsr_dev_xmit+0x77/0x90 [ 800.180876][T10096] dev_hard_start_xmit+0x1c1/0x3f0 [ 800.186011][T10096] __dev_queue_xmit+0x1e53/0x3010 [ 800.191081][T10096] dev_queue_xmit+0x17/0x20 [ 800.195616][T10096] neigh_connected_output+0x3df/0x410 [ 800.201010][T10096] ip_finish_output2+0x13be/0x18d0 [ 800.206137][T10096] ? ip_fraglist_prepare+0x300/0x590 [ 800.211444][T10096] ip_do_fragment+0x1528/0x1d10 [ 800.216312][T10096] ? ip_fragment+0x210/0x210 [ 800.220925][T10096] ? rcu_lock_release+0xd/0x30 [ 800.225695][T10096] ? ipv4_mtu+0x2bc/0x3c0 [ 800.230557][T10096] ip_fragment+0x11f/0x210 [ 800.234986][T10096] __ip_finish_output+0x3fc/0x4b0 [ 800.240020][T10096] ip_finish_output+0x52/0x1e0 [ 800.244792][T10096] ? ip_mc_output+0x4c6/0x620 [ 800.249460][T10096] ip_mc_output+0x4db/0x620 [ 800.249476][T10096] ip_send_skb+0x126/0x1e0 [ 800.249488][T10096] ip_push_pending_frames+0x66/0x80 [ 800.249500][T10096] raw_sendmsg+0x1e06/0x3790 [ 800.249528][T10096] ? __kasan_check_read+0x11/0x20 [ 800.258443][T10096] inet_sendmsg+0x147/0x310 [ 800.258463][T10096] ? security_socket_sendmsg+0xa0/0xd0 [ 800.283204][T10096] ? inet_send_prepare+0x250/0x250 [ 800.288336][T10096] kernel_sendmsg+0x109/0x140 [ 800.293039][T10096] sock_no_sendpage+0x100/0x140 [ 800.297961][T10096] inet_sendpage+0x18c/0x340 [ 800.302578][T10096] ? inet_sendmsg+0x310/0x310 [ 800.307263][T10096] sock_sendpage+0xd3/0x120 [ 800.311812][T10096] pipe_to_sendpage+0x1f9/0x2a0 [ 800.316674][T10096] ? sock_fasync+0x100/0x100 [ 800.321282][T10096] __splice_from_pipe+0x2f7/0x8a0 [ 800.326326][T10096] ? generic_splice_sendpage+0x180/0x180 [ 800.331983][T10096] generic_splice_sendpage+0x114/0x180 [ 800.337455][T10096] ? iter_file_splice_write+0xe20/0xe20 02:43:05 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup/syz1\x00', 0x1ff) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d008ed3b5b389891a88809d020006be1bad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)=ANY=[@ANYBLOB='g]d=', @ANYRESHEX=r3, @ANYBLOB=',subj_type=md5\x00,smackfsroot=devpts\x00,mask=MAY_READ,\x00']) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r4}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r5 = getuid() mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1010, r0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000780)=0xc) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffff470b, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000180)="7be803b80e081128ed0d14541104eefe0bbebec04f1dcadcbb819233b7f24f50ec33f556381a1e5992bf8cf2e90ad41b5835330404561fc41661425652517bcb7d9289a5b2fc54a1d5f1a1803dfee2f99052e4bc0dedbf8b53cd04fe0ef60a6edfdf65e561e3e48c991e8cf30d0c748a0c47ff646383b62933b5ff8a95c8ab", 0x7f, 0x7f}, {&(0x7f0000000300)="fb4833ba68285623607380987d77494ea3bc4810488495a381b3c479270d0c76b21b2c4c4fdda506d12d15315a08b25408c86a26ebab1e0c95e559ddc36a5f53bf3e1ec9306632bba8e61b72e8f45cc5597471", 0x53, 0x4}, {&(0x7f0000000380)="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", 0xfd, 0x8}, {&(0x7f0000000480)="608c734750b16a921b977bfef37a0cae066fde56a726dff7e254f51e4d26d109100b0ea2ca4ae41e8e6b5ddd22f7505e797235a8a32bda81df155254d07d7f5c783dca3f657c500a4fbf6de5a8596f479376c7af2d95af0b0cf877d75a74fad336d8e89dd830bfaf2c6ffac900cad7b1e5501d7e27ed115010ea0a290adbce23f3d0fb193ee27e715e0a58bcc8680f052fd784a326bcfd353aa6a886113e1424f17f8dfeaebf2713806e4eafd59790133d7edaac5a4118d4f65d4c278a22b829", 0xc0}, {&(0x7f0000000540)="df0d9a04c126139b65fef61b6bd4a2bf140e54e07b8304eb7dd5a57195258a977df42f4a00e6b3e0d3b29db109dcd6c1a2950f141746b8a37c73a0586e89890260b6e151198ce381250f0349bc57993600369d4b40771b871925b88b0ba2f70385feb4820a50a72f835e19d479c9b5f6032a2351b6bae561afb2", 0x7a, 0x4d1}, {&(0x7f00000005c0)="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", 0xfc, 0x3}], 0x4002, &(0x7f00000007c0)={[{@type={'type', 0x3d, "7c6177a2"}}, {@gid={'gid', 0x3d, r3}}, {@gid={'gid', 0x3d, r4}}, {@dir_umask={'dir_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0x7ff}}, {@part={'part', 0x3d, 0x8001}}, {@quiet='quiet'}, {@part={'part', 0x3d, 0x10000}}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uid={'uid', 0x3d, r5}}], [{@dont_appraise='dont_appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', r7}}, {@fowner_lt={'fowner<', r8}}, {@measure='measure'}]}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000040)=0x402, 0x4) 02:43:05 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x8000000000000, 0x0) 02:43:05 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xa000000000000, 0x0) 02:43:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040), 0x0) [ 800.343052][T10096] __se_sys_splice+0x71a/0x1ac0 [ 800.347922][T10096] ? check_preemption_disabled+0xb7/0x2a0 [ 800.353666][T10096] ? debug_smp_processor_id+0x1c/0x20 [ 800.359057][T10096] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 800.365154][T10096] __x64_sys_splice+0xe5/0x100 [ 800.369954][T10096] do_syscall_64+0xf7/0x1c0 [ 800.369970][T10096] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 800.369979][T10096] RIP: 0033:0x459f49 [ 800.369988][T10096] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 800.369993][T10096] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 800.370003][T10096] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 800.370011][T10096] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 800.370019][T10096] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 800.370027][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 800.370035][T10096] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:05 executing program 5 (fault-call:7 fault-nth:37): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:05 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8767, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fsetxattr(r3, &(0x7f00000000c0)=@random={'btrfs.', '\x00'}, &(0x7f0000000100)='/dev/vcsa#\x00', 0xb, 0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:05 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa257ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:05 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xc000000000000, 0x0) 02:43:05 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xe000000000000, 0x0) 02:43:05 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa5e7ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x2a6, 0x400) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000140)) accept4$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800) [ 800.994955][T10138] FAULT_INJECTION: forcing a failure. [ 800.994955][T10138] name failslab, interval 1, probability 0, space 0, times 0 [ 801.007679][T10138] CPU: 0 PID: 10138 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 801.015586][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.025685][T10138] Call Trace: [ 801.029050][T10138] dump_stack+0x1d8/0x2f8 [ 801.029071][T10138] should_fail+0x555/0x770 [ 801.029094][T10138] __should_failslab+0x11a/0x160 [ 801.029112][T10138] should_failslab+0x9/0x20 [ 801.029125][T10138] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 801.029139][T10138] ? __kmalloc_node_track_caller+0x3c/0x60 [ 801.029153][T10138] __kmalloc_node_track_caller+0x3c/0x60 [ 801.029162][T10138] ? __pskb_copy_fclone+0xac/0x12b0 [ 801.029174][T10138] __alloc_skb+0xe8/0x500 [ 801.029190][T10138] __pskb_copy_fclone+0xac/0x12b0 [ 801.029205][T10138] ? hsr_addr_subst_dest+0x211/0x4b0 [ 801.029220][T10138] hsr_forward_skb+0xca9/0x2040 [ 801.029250][T10138] hsr_dev_xmit+0x77/0x90 [ 801.029261][T10138] dev_hard_start_xmit+0x1c1/0x3f0 [ 801.029280][T10138] __dev_queue_xmit+0x1e53/0x3010 [ 801.029307][T10138] dev_queue_xmit+0x17/0x20 [ 801.029318][T10138] neigh_connected_output+0x3df/0x410 [ 801.029341][T10138] ip_finish_output2+0x13be/0x18d0 [ 801.029351][T10138] ? ip_fraglist_prepare+0x300/0x590 [ 801.029371][T10138] ip_do_fragment+0x1528/0x1d10 [ 801.029381][T10138] ? ip_fragment+0x210/0x210 [ 801.029405][T10138] ? rcu_lock_release+0xd/0x30 [ 801.029414][T10138] ? ipv4_mtu+0x2bc/0x3c0 [ 801.029426][T10138] ip_fragment+0x11f/0x210 [ 801.029441][T10138] __ip_finish_output+0x3fc/0x4b0 [ 801.029455][T10138] ip_finish_output+0x52/0x1e0 [ 801.029463][T10138] ? ip_mc_output+0x4c6/0x620 [ 801.029476][T10138] ip_mc_output+0x4db/0x620 [ 801.029491][T10138] ip_send_skb+0x126/0x1e0 [ 801.029504][T10138] ip_push_pending_frames+0x66/0x80 [ 801.029516][T10138] raw_sendmsg+0x1e06/0x3790 [ 801.029546][T10138] ? __kasan_check_read+0x11/0x20 [ 801.029571][T10138] inet_sendmsg+0x147/0x310 [ 801.029582][T10138] ? security_socket_sendmsg+0xa0/0xd0 [ 801.029593][T10138] ? inet_send_prepare+0x250/0x250 [ 801.029605][T10138] kernel_sendmsg+0x109/0x140 [ 801.029618][T10138] sock_no_sendpage+0x100/0x140 [ 801.029640][T10138] inet_sendpage+0x18c/0x340 [ 801.029651][T10138] ? inet_sendmsg+0x310/0x310 [ 801.029662][T10138] sock_sendpage+0xd3/0x120 [ 801.029678][T10138] pipe_to_sendpage+0x1f9/0x2a0 [ 801.029687][T10138] ? sock_fasync+0x100/0x100 [ 801.029701][T10138] __splice_from_pipe+0x2f7/0x8a0 [ 801.029720][T10138] ? generic_splice_sendpage+0x180/0x180 [ 801.029746][T10138] generic_splice_sendpage+0x114/0x180 [ 801.029761][T10138] ? iter_file_splice_write+0xe20/0xe20 [ 801.029773][T10138] __se_sys_splice+0x71a/0x1ac0 [ 801.029791][T10138] ? check_preemption_disabled+0xb7/0x2a0 [ 801.029807][T10138] ? debug_smp_processor_id+0x1c/0x20 [ 801.029820][T10138] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 801.029843][T10138] __x64_sys_splice+0xe5/0x100 [ 801.029858][T10138] do_syscall_64+0xf7/0x1c0 [ 801.029872][T10138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 801.029882][T10138] RIP: 0033:0x459f49 [ 801.029893][T10138] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 801.029899][T10138] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 801.029909][T10138] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 801.029915][T10138] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 801.029921][T10138] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 801.029928][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 801.029934][T10138] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:06 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8768, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:06 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfeffff00000000, 0x0) 02:43:06 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da5eadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$smack_current(0xffffffffffffffff, &(0x7f00000000c0)='&\x00', 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:06 executing program 5 (fault-call:7 fault-nth:38): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:06 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) fstat(0xffffffffffffffff, &(0x7f0000000040)) open(&(0x7f0000000200)='./file0\x00', 0x200081, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) fstat(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r5}}, {@access_any='access=any'}, {@posixacl='posixacl'}, {@cache_loose='cache=loose'}, {@debug={'\x00\x00\x00\x1d\x00', 0x3d, 0x5cd}}, {@privport='privport'}, {@aname={'aname', 0x3d, 'rfdno'}}]}}) 02:43:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x7, 0x7f, 0x7fffffff, 0x8, 0x4}) dup(r1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:06 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x100000000000000, 0x0) 02:43:06 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aaceec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:06 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8769, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:06 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aaeeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:06 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x200000000000000, 0x0) [ 801.906344][T10187] FAULT_INJECTION: forcing a failure. [ 801.906344][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 801.919613][T10187] CPU: 0 PID: 10187 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 801.927531][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 801.937602][T10187] Call Trace: [ 801.940999][T10187] dump_stack+0x1d8/0x2f8 [ 801.945355][T10187] should_fail+0x555/0x770 [ 801.949803][T10187] __should_failslab+0x11a/0x160 [ 801.954764][T10187] should_failslab+0x9/0x20 [ 801.959285][T10187] kmem_cache_alloc_node+0x65/0x280 [ 801.959299][T10187] ? __alloc_skb+0x9f/0x500 [ 801.959312][T10187] ? __lock_acquire+0xc75/0x1be0 [ 801.959323][T10187] __alloc_skb+0x9f/0x500 [ 801.959339][T10187] __pskb_copy_fclone+0xac/0x12b0 [ 801.969044][T10187] ? lockdep_hardirqs_on+0x295/0x7d0 [ 801.969062][T10187] hsr_forward_skb+0xca9/0x2040 [ 801.969084][T10187] ? hsr_port_get_hsr+0xc6/0xf0 [ 801.969094][T10187] hsr_dev_xmit+0x77/0x90 02:43:06 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4ac0eec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:06 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 801.969107][T10187] dev_hard_start_xmit+0x1c1/0x3f0 [ 801.969123][T10187] __dev_queue_xmit+0x1e53/0x3010 [ 801.969146][T10187] dev_queue_xmit+0x17/0x20 [ 801.969159][T10187] neigh_connected_output+0x3df/0x410 [ 802.022718][T10187] ip_finish_output2+0x13be/0x18d0 [ 802.027882][T10187] ? ip_fraglist_prepare+0x300/0x590 [ 802.033276][T10187] ip_do_fragment+0x1528/0x1d10 [ 802.033288][T10187] ? ip_fragment+0x210/0x210 [ 802.033314][T10187] ? rcu_lock_release+0xd/0x30 02:43:07 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x204000000000000, 0x0) [ 802.033321][T10187] ? ipv4_mtu+0x2bc/0x3c0 [ 802.033335][T10187] ip_fragment+0x11f/0x210 [ 802.033350][T10187] __ip_finish_output+0x3fc/0x4b0 [ 802.033366][T10187] ip_finish_output+0x52/0x1e0 [ 802.033375][T10187] ? ip_mc_output+0x4c6/0x620 [ 802.033387][T10187] ip_mc_output+0x4db/0x620 [ 802.033403][T10187] ip_send_skb+0x126/0x1e0 [ 802.033417][T10187] ip_push_pending_frames+0x66/0x80 [ 802.033432][T10187] raw_sendmsg+0x1e06/0x3790 [ 802.033467][T10187] ? __kasan_check_read+0x11/0x20 [ 802.033494][T10187] inet_sendmsg+0x147/0x310 [ 802.033507][T10187] ? security_socket_sendmsg+0xa0/0xd0 [ 802.033517][T10187] ? inet_send_prepare+0x250/0x250 [ 802.033531][T10187] kernel_sendmsg+0x109/0x140 [ 802.033546][T10187] sock_no_sendpage+0x100/0x140 [ 802.033568][T10187] inet_sendpage+0x18c/0x340 [ 802.033580][T10187] ? inet_sendmsg+0x310/0x310 [ 802.033591][T10187] sock_sendpage+0xd3/0x120 [ 802.033608][T10187] pipe_to_sendpage+0x1f9/0x2a0 [ 802.033617][T10187] ? sock_fasync+0x100/0x100 [ 802.033631][T10187] __splice_from_pipe+0x2f7/0x8a0 [ 802.033644][T10187] ? generic_splice_sendpage+0x180/0x180 [ 802.033668][T10187] generic_splice_sendpage+0x114/0x180 [ 802.033683][T10187] ? iter_file_splice_write+0xe20/0xe20 [ 802.033695][T10187] __se_sys_splice+0x71a/0x1ac0 [ 802.033710][T10187] ? check_preemption_disabled+0xb7/0x2a0 [ 802.033724][T10187] ? debug_smp_processor_id+0x1c/0x20 [ 802.033735][T10187] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 802.033757][T10187] __x64_sys_splice+0xe5/0x100 [ 802.033772][T10187] do_syscall_64+0xf7/0x1c0 [ 802.033786][T10187] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 802.033797][T10187] RIP: 0033:0x459f49 [ 802.033808][T10187] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 802.033813][T10187] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 802.033824][T10187] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 802.033829][T10187] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 802.033835][T10187] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 802.033841][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 802.033847][T10187] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:07 executing program 5 (fault-call:7 fault-nth:39): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:07 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:07 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11ab5feeaaee59c25fdf0262c4e7ec8253cb5e24a8d0d175844dfd0c098954eba07f064c1a4a8d398a57e8cb5672f0612091ab398f8b3d4780cd595afd2c68c599131893327dda90b89802417d63aaa157ee5da4aadeec35e6863998f2ad90643e586cc75638037da3933cca2c4a68c8e3b50934bb79bf20bf2fc5b88dcd51ccdd069ba335e8ecbd7f374d64f3fb5f042a7d5f05b60416e04f1d6f37991d96221bed8942ec003aac25f0d65c2ec6d6d12d55bf720776cc92cbdc68773247b5abf5537304096448493af08b403a85068ba1a44174b7421da86ba932b4284409837edcfe0ee1ce8e25f82497ff064f554ff0fcb3f4fdb0dfc9cff3c2e5dfe166d282dcb50e2d8bea404101b2fcc2860bb33cff3d628775ea2022d8a38a0e700344dac8734a0de4ea2bc51ca118fbe2ac6323ea0f1a157126561ec6a39917f6c742bcd56c3c54b7901e93511ed7fc8e9"]) 02:43:07 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x300000000000000, 0x0) 02:43:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0xe8101) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:07 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3bcc, 0x109000) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000140)={{0x2, 0x4, 0x3, 0x81, 0x3, 0x3}, 0x8}) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 02:43:07 executing program 2: fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000080)={0x5, 0x6, {0x53, 0x2, 0x0, {0x8, 0x8}, {0x2, 0x6}, @ramp={0x24, 0x9, {0x3, 0x0, 0x9, 0x80}}}, {0x52, 0x8, 0x4, {0x55, 0xff}, {0x3, 0xfd27}, @const={0x3, {0x1, 0x0, 0x3, 0x4}}}}) 02:43:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockname$netlink(r0, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:07 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x400000000000000, 0x0) [ 802.842141][T10235] FAULT_INJECTION: forcing a failure. [ 802.842141][T10235] name failslab, interval 1, probability 0, space 0, times 0 [ 802.854847][T10235] CPU: 1 PID: 10235 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 802.862746][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 802.872830][T10235] Call Trace: [ 802.876137][T10235] dump_stack+0x1d8/0x2f8 [ 802.880474][T10235] should_fail+0x555/0x770 [ 802.880496][T10235] __should_failslab+0x11a/0x160 [ 802.880513][T10235] should_failslab+0x9/0x20 [ 802.880529][T10235] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 802.889864][T10235] ? __kmalloc_node_track_caller+0x3c/0x60 [ 802.889879][T10235] __kmalloc_node_track_caller+0x3c/0x60 [ 802.889890][T10235] ? __pskb_copy_fclone+0xac/0x12b0 [ 802.889903][T10235] __alloc_skb+0xe8/0x500 [ 802.889917][T10235] __pskb_copy_fclone+0xac/0x12b0 [ 802.889928][T10235] ? lockdep_hardirqs_on+0x295/0x7d0 [ 802.889947][T10235] hsr_forward_skb+0xca9/0x2040 [ 802.889970][T10235] ? hsr_port_get_hsr+0xc6/0xf0 [ 802.941260][T10235] hsr_dev_xmit+0x77/0x90 [ 802.945597][T10235] dev_hard_start_xmit+0x1c1/0x3f0 [ 802.950724][T10235] __dev_queue_xmit+0x1e53/0x3010 [ 802.955783][T10235] dev_queue_xmit+0x17/0x20 [ 802.960320][T10235] neigh_connected_output+0x3df/0x410 [ 802.965708][T10235] ip_finish_output2+0x13be/0x18d0 [ 802.970822][T10235] ? ip_fraglist_prepare+0x300/0x590 [ 802.976117][T10235] ip_do_fragment+0x1528/0x1d10 [ 802.980973][T10235] ? ip_fragment+0x210/0x210 [ 802.985581][T10235] ? rcu_lock_release+0xd/0x30 [ 802.990345][T10235] ? ipv4_mtu+0x2bc/0x3c0 [ 802.994678][T10235] ip_fragment+0x11f/0x210 [ 802.999123][T10235] __ip_finish_output+0x3fc/0x4b0 [ 803.004156][T10235] ip_finish_output+0x52/0x1e0 [ 803.004166][T10235] ? ip_mc_output+0x4c6/0x620 [ 803.004177][T10235] ip_mc_output+0x4db/0x620 [ 803.004191][T10235] ip_send_skb+0x126/0x1e0 [ 803.018105][T10235] ip_push_pending_frames+0x66/0x80 [ 803.018122][T10235] raw_sendmsg+0x1e06/0x3790 [ 803.018156][T10235] ? __kasan_check_read+0x11/0x20 [ 803.018178][T10235] inet_sendmsg+0x147/0x310 02:43:07 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:07 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x500000000000000, 0x0) 02:43:08 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595af27dda90b89802413d63aaa157ee5da4aadeec35e6863b8e38207846ab54a64bd34"]) [ 803.041920][T10235] ? security_socket_sendmsg+0xa0/0xd0 [ 803.041937][T10235] ? inet_send_prepare+0x250/0x250 [ 803.054660][T10235] kernel_sendmsg+0x109/0x140 [ 803.059345][T10235] sock_no_sendpage+0x100/0x140 [ 803.064213][T10235] inet_sendpage+0x18c/0x340 [ 803.068803][T10235] ? inet_sendmsg+0x310/0x310 [ 803.073486][T10235] sock_sendpage+0xd3/0x120 [ 803.077999][T10235] pipe_to_sendpage+0x1f9/0x2a0 [ 803.082855][T10235] ? sock_fasync+0x100/0x100 [ 803.087480][T10235] __splice_from_pipe+0x2f7/0x8a0 [ 803.087495][T10235] ? generic_splice_sendpage+0x180/0x180 [ 803.087518][T10235] generic_splice_sendpage+0x114/0x180 [ 803.087533][T10235] ? iter_file_splice_write+0xe20/0xe20 [ 803.087544][T10235] __se_sys_splice+0x71a/0x1ac0 [ 803.087561][T10235] ? check_preemption_disabled+0xb7/0x2a0 [ 803.087574][T10235] ? debug_smp_processor_id+0x1c/0x20 [ 803.087586][T10235] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 803.087606][T10235] __x64_sys_splice+0xe5/0x100 [ 803.087622][T10235] do_syscall_64+0xf7/0x1c0 [ 803.087637][T10235] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.087648][T10235] RIP: 0033:0x459f49 [ 803.087659][T10235] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.087664][T10235] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 803.087675][T10235] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 803.087680][T10235] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 803.087686][T10235] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 803.087691][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 803.087697][T10235] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:08 executing program 5 (fault-call:7 fault-nth:40): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:08 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00\xfd?\x90', 0x806008, &(0x7f0000000540)=ANY=[]) 02:43:08 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x600000000000000, 0x0) 02:43:08 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$RTC_PIE_OFF(r0, 0x7006) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x240242, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d26518ed3b5b389891a88809d020000007706be75ad00f93ca69daec3141165103f81728efa67e65db9523c782f01a2fbef1bd6352695c9c9786461605744c2a389269354882abea9806f99384725886bcfdf1c716faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000000c0)={0x1, 0xe7e}) r3 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) ioctl$EVIOCGLED(r3, 0x80404519, &(0x7f0000000400)=""/175) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0xec1, 0x1}, 0x2f6) 02:43:08 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xd37f, 0x18000) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0xd05, "5895a20619907a51c6e15ae97701e11f34cfe14b375b86c0490ea10d45256bcc", 0x0, 0x8974b3ea8f73de2c}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:43:08 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x604000000000000, 0x0) 02:43:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x280, 0xb8, 0x0, 0xb8, 0x0, 0x0, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x1e8, 0x3, &(0x7f0000000280), {[{{@ip={@rand_addr=0x80, @empty, 0xff000000, 0x80800000, 'gre0\x00', 'veth1_to_bridge\x00', {}, {0x1fe}, 0x4, 0x5, 0x42}, 0x0, 0x98, 0xb8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x7, 0x401, 'snmp_trap\x00', 0x80000000}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)="cfe4", 0x2}, {&(0x7f0000000040)="5093025b3f574354e82699718aa4587438a37e05546f99d428467d0ef4dacb97f75206402def429cdc989bcecc49dcdcc4f5d40b8b06c2ac452d286f636d90c19df9906e6b7d9b102b6ee16b405e90a050a177d8b5c48deef860206d7853c6c898f9fe6e9594a0d48a86d09ad8423c743528c012", 0x74}, {&(0x7f00000000c0)="72b8714c4f277e00e3ab6067dd5914734b95ac8b61211c6e7e68e31831978e4bb63edd0904c6de2208864254c998574fc581cdbfbb35806740a8b2cabf32", 0x3e}, {&(0x7f0000000100)="2d3703757ab90884d9eb821e56", 0xd}, {&(0x7f0000000140)="5ee6c6a70c14e7a4fbbab9cf36e3a52cce28a07aef70157577ec053bda594219d45098498cb5c8d9907bf8d3b593e5756aeef938971573a0d0b8eee2ab6c982c7888d1cc9eeef75b4d53bb27c99ef6a2a15bb736adf23e7a306c71e335aa60ce46f32986f6fe78601e30b324731e38", 0x6f}, {&(0x7f00000001c0)="77c6c234314a5aa118eac64da62a0d42106c29d1f802b9aba19690158e4324f186c6bdd85b3ce2c418c68070841ef6a422d7300321b2fd82531ee11ce64b1b330527264ac63dc33a4beccf07c205ccd81768abd2f1e5b6d6dcf93eabf4faf62cd84b66a30ccd17caf4b69942ac4097c9f9cff69e5823f6e5ed1f26b90690a87d117c11d2f764e4a71e", 0x89}], 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) 02:43:08 executing program 2: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ax25={{0x3, @null}, [@default, @bcast, @null, @default, @null, @remote, @rose, @netrom]}, &(0x7f0000000100)=0xf) bind$vsock_stream(r0, &(0x7f0000000140), 0x10) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) personality(0x4000009) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x101041, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000400)=0x66) mkdir(&(0x7f00000001c0)='./file0\x00', 0x83) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9cd3a43b9f9c58f24eeb951fb2019b1ec523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68d"], 0xa4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000180)=0x59, 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595e6add1ff8a5e4ba5d8afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846a"]) 02:43:08 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 803.751895][T10274] FAULT_INJECTION: forcing a failure. [ 803.751895][T10274] name failslab, interval 1, probability 0, space 0, times 0 [ 803.764653][T10274] CPU: 0 PID: 10274 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 803.772564][T10274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 803.782732][T10274] Call Trace: [ 803.786047][T10274] dump_stack+0x1d8/0x2f8 [ 803.790396][T10274] should_fail+0x555/0x770 [ 803.794833][T10274] __should_failslab+0x11a/0x160 02:43:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x5, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x29d}, {&(0x7f0000000340)}], 0x2) [ 803.799786][T10274] should_failslab+0x9/0x20 [ 803.804313][T10274] kmem_cache_alloc_node+0x65/0x280 [ 803.809525][T10274] ? __alloc_skb+0x9f/0x500 [ 803.814044][T10274] __alloc_skb+0x9f/0x500 [ 803.818380][T10274] __pskb_copy_fclone+0xac/0x12b0 [ 803.823401][T10274] ? hsr_addr_subst_dest+0x211/0x4b0 [ 803.823414][T10274] hsr_forward_skb+0xca9/0x2040 [ 803.823438][T10274] hsr_dev_xmit+0x77/0x90 [ 803.823450][T10274] dev_hard_start_xmit+0x1c1/0x3f0 [ 803.823466][T10274] __dev_queue_xmit+0x1e53/0x3010 02:43:08 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x700000000000000, 0x0) [ 803.823488][T10274] dev_queue_xmit+0x17/0x20 [ 803.823499][T10274] neigh_connected_output+0x3df/0x410 [ 803.823520][T10274] ip_finish_output2+0x13be/0x18d0 [ 803.823529][T10274] ? ip_fraglist_prepare+0x300/0x590 [ 803.823545][T10274] ip_do_fragment+0x1528/0x1d10 [ 803.823553][T10274] ? ip_fragment+0x210/0x210 [ 803.823573][T10274] ? rcu_lock_release+0xd/0x30 [ 803.823580][T10274] ? ipv4_mtu+0x2bc/0x3c0 [ 803.823592][T10274] ip_fragment+0x11f/0x210 [ 803.823605][T10274] __ip_finish_output+0x3fc/0x4b0 [ 803.823618][T10274] ip_finish_output+0x52/0x1e0 [ 803.901568][T10274] ? ip_mc_output+0x4c6/0x620 [ 803.906260][T10274] ip_mc_output+0x4db/0x620 [ 803.910781][T10274] ip_send_skb+0x126/0x1e0 [ 803.915213][T10274] ip_push_pending_frames+0x66/0x80 [ 803.920424][T10274] raw_sendmsg+0x1e06/0x3790 [ 803.925032][T10274] ? __kasan_check_read+0x11/0x20 [ 803.930167][T10274] inet_sendmsg+0x147/0x310 [ 803.934677][T10274] ? security_socket_sendmsg+0xa0/0xd0 [ 803.940153][T10274] ? inet_send_prepare+0x250/0x250 [ 803.940168][T10274] kernel_sendmsg+0x109/0x140 [ 803.940183][T10274] sock_no_sendpage+0x100/0x140 [ 803.940204][T10274] inet_sendpage+0x18c/0x340 [ 803.940216][T10274] ? inet_sendmsg+0x310/0x310 [ 803.940226][T10274] sock_sendpage+0xd3/0x120 [ 803.940243][T10274] pipe_to_sendpage+0x1f9/0x2a0 [ 803.940251][T10274] ? sock_fasync+0x100/0x100 [ 803.940265][T10274] __splice_from_pipe+0x2f7/0x8a0 [ 803.940276][T10274] ? generic_splice_sendpage+0x180/0x180 [ 803.940299][T10274] generic_splice_sendpage+0x114/0x180 [ 803.940313][T10274] ? iter_file_splice_write+0xe20/0xe20 [ 803.940324][T10274] __se_sys_splice+0x71a/0x1ac0 [ 803.940342][T10274] ? check_preemption_disabled+0xb7/0x2a0 [ 803.940356][T10274] ? debug_smp_processor_id+0x1c/0x20 [ 803.940367][T10274] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 803.940387][T10274] __x64_sys_splice+0xe5/0x100 [ 803.940401][T10274] do_syscall_64+0xf7/0x1c0 [ 803.940415][T10274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 803.940425][T10274] RIP: 0033:0x459f49 [ 803.940435][T10274] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 803.940441][T10274] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 803.940450][T10274] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 803.940456][T10274] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 803.940461][T10274] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 803.940467][T10274] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 803.940472][T10274] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:09 executing program 5 (fault-call:7 fault-nth:41): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:09 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x800000000000000, 0x0) 02:43:09 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x876f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:09 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x1084000, &(0x7f0000000080)=ANY=[@ANYBLOB="736d61636b66ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c6f6415a2d21567edf70a112eb3702c811a6b86bde35cbeb71118ef3b59df8e8e5083eaa38d193c69170e0ec5b69c00"/160]) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003ec0)='/dev/sequencer2\x00', 0x880, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000003f00)) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@remote={[], 0x3}, 0x7, 'teql0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140), 0x4) 02:43:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x180, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000340)={0x1, 0xd5, 0xdf, &(0x7f0000000240)="9c75387daa4b440933bd51127401eebdef41b97de8721bc039ad88bd96ca66f96248807787e5ccf8310fd8df7233c8e4a2f3c579ac2c64f633e09884f180804c506c9bfcab98c752da1fbd6a1a8dbe6dfeb49f0777c52d242c5a58f4874cc692e98c9563f078d47e73f758804e8dc91538ce6a32ef765fd59cc8520eb2505975ac187b81c2ea42ca29697463f54351921cacbf2e511c3cc849fa7b6c31166baf3040b8121b7237d2c51bac7d4ccf8895a215b4f66afed5ee012e9b7fa5cf9b4e7798e7fcac4335e266abd40f1622c97a032d896333cc57b6775d3f9cd99ae3"}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0x2, 0x8004, 0x2d4, 0x8, 0x0, 0x3}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x401, 0x2) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000200)={0x1000, 0x2}) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r7 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2) ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000100)={0x4, 0x1, 0x81}) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000380)='dirsync\x00', 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x1, 0x0, 0x400, 0x7, 0x0, 0x1, 0x0}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x1e4}, {&(0x7f0000000340)}], 0x2) 02:43:09 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x18041, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x40002, &(0x7f0000000280)={'trans=fd,', {'\x01\x01\x00', 0x3d, r0}, 0x2c, {'%\\\xdcPy', 0x3d, r1}}) 02:43:09 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x900000000000000, 0x0) [ 804.551729][T10307] usb usb7: usbfs: process 10307 (syz-executor.0) did not claim interface 7 before use 02:43:09 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) accept4$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10, 0x81000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0]) 02:43:09 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1800, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '@\x00'}, 0x7) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wffno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) [ 804.630921][T10315] usb usb7: usbfs: process 10315 (syz-executor.0) did not claim interface 7 before use [ 804.681794][T10318] FAULT_INJECTION: forcing a failure. [ 804.681794][T10318] name failslab, interval 1, probability 0, space 0, times 0 [ 804.694500][T10318] CPU: 1 PID: 10318 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 804.702412][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 804.712481][T10318] Call Trace: [ 804.715880][T10318] dump_stack+0x1d8/0x2f8 [ 804.720237][T10318] should_fail+0x555/0x770 [ 804.724681][T10318] __should_failslab+0x11a/0x160 [ 804.729645][T10318] should_failslab+0x9/0x20 [ 804.734157][T10318] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 804.739869][T10318] ? __kmalloc_node_track_caller+0x3c/0x60 [ 804.739882][T10318] __kmalloc_node_track_caller+0x3c/0x60 [ 804.739890][T10318] ? __pskb_copy_fclone+0xac/0x12b0 [ 804.739907][T10318] __alloc_skb+0xe8/0x500 [ 804.739919][T10318] __pskb_copy_fclone+0xac/0x12b0 [ 804.739933][T10318] ? hsr_addr_subst_dest+0x211/0x4b0 [ 804.739945][T10318] hsr_forward_skb+0xca9/0x2040 [ 804.739971][T10318] hsr_dev_xmit+0x77/0x90 [ 804.780409][T10318] dev_hard_start_xmit+0x1c1/0x3f0 [ 804.785560][T10318] __dev_queue_xmit+0x1e53/0x3010 [ 804.790613][T10318] dev_queue_xmit+0x17/0x20 [ 804.795128][T10318] neigh_connected_output+0x3df/0x410 [ 804.800526][T10318] ip_finish_output2+0x13be/0x18d0 [ 804.805650][T10318] ? ip_fraglist_prepare+0x300/0x590 [ 804.810964][T10318] ip_do_fragment+0x1528/0x1d10 [ 804.815834][T10318] ? ip_fragment+0x210/0x210 [ 804.820442][T10318] ? rcu_lock_release+0xd/0x30 [ 804.825208][T10318] ? ipv4_mtu+0x2bc/0x3c0 [ 804.829547][T10318] ip_fragment+0x11f/0x210 [ 804.833967][T10318] __ip_finish_output+0x3fc/0x4b0 [ 804.838984][T10318] ip_finish_output+0x52/0x1e0 [ 804.843738][T10318] ? ip_mc_output+0x4c6/0x620 [ 804.848404][T10318] ip_mc_output+0x4db/0x620 [ 804.852906][T10318] ip_send_skb+0x126/0x1e0 [ 804.857313][T10318] ip_push_pending_frames+0x66/0x80 [ 804.862499][T10318] raw_sendmsg+0x1e06/0x3790 [ 804.867104][T10318] ? __kasan_check_read+0x11/0x20 [ 804.872146][T10318] inet_sendmsg+0x147/0x310 [ 804.876644][T10318] ? security_socket_sendmsg+0xa0/0xd0 [ 804.882095][T10318] ? inet_send_prepare+0x250/0x250 [ 804.887196][T10318] kernel_sendmsg+0x109/0x140 [ 804.891900][T10318] sock_no_sendpage+0x100/0x140 [ 804.896750][T10318] inet_sendpage+0x18c/0x340 [ 804.901327][T10318] ? inet_sendmsg+0x310/0x310 [ 804.906009][T10318] sock_sendpage+0xd3/0x120 [ 804.910504][T10318] pipe_to_sendpage+0x1f9/0x2a0 [ 804.915344][T10318] ? sock_fasync+0x100/0x100 [ 804.919926][T10318] __splice_from_pipe+0x2f7/0x8a0 [ 804.924960][T10318] ? generic_splice_sendpage+0x180/0x180 [ 804.930590][T10318] generic_splice_sendpage+0x114/0x180 [ 804.936039][T10318] ? iter_file_splice_write+0xe20/0xe20 [ 804.941571][T10318] __se_sys_splice+0x71a/0x1ac0 [ 804.946414][T10318] ? check_preemption_disabled+0xb7/0x2a0 [ 804.952133][T10318] ? debug_smp_processor_id+0x1c/0x20 [ 804.957496][T10318] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 804.963561][T10318] __x64_sys_splice+0xe5/0x100 [ 804.968320][T10318] do_syscall_64+0xf7/0x1c0 [ 804.972814][T10318] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 804.978694][T10318] RIP: 0033:0x459f49 [ 804.982577][T10318] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.002170][T10318] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 805.010572][T10318] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 805.018543][T10318] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:43:09 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x401, 0x290000) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:09 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8770, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:09 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xa00000000000000, 0x0) [ 805.026594][T10318] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 805.034553][T10318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 805.042511][T10318] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 805.136697][T10330] 9pnet: Insufficient options for proto=fd 02:43:10 executing program 5 (fault-call:7 fault-nth:42): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x9c, 0x6, 0x4, 0xe0}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x3ad9b9c4bb14f391) 02:43:10 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8771, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:10 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xb00000000000000, 0x0) 02:43:10 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:10 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r3, 0xc4, "2ba67dd782556a16deee7106c1c6836b85f3d766d3f73d544f6f99b46f36a4bda8a00771f543d0181c28ff95f4c3e709d394579d064883a2666b13f8c1379e90ca91444418fd5d706f031fb0a0e9a24d54ffcd0ea23d82919f59665710399f0dd77274dd09e5a8e69b31749cb8bd8affba5d856d8ceca58dd63500cf991a8e30b629c9ea3d2b157ffa5e5aa270c1ae5b8860a5a6e3889b3419c55673249feda4d3b1e2c9ab7c2a906c4f87463aa3547abaf2dc32078c8e9e5ea68a39fdd84c18e534e09c"}, &(0x7f0000000180)=0xcc) 02:43:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x1, 0x1, 0x0, 0x5, 0x0, 0x7fff, 0x3902a, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x8028, 0x92, 0x2, 0x1, 0x6, 0x6, 0x4}, r3, 0x6, r2, 0x2) 02:43:10 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xc00000000000000, 0x0) 02:43:10 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8772, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 805.580930][T10360] FAULT_INJECTION: forcing a failure. [ 805.580930][T10360] name failslab, interval 1, probability 0, space 0, times 0 [ 805.593765][T10360] CPU: 0 PID: 10360 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 805.601671][T10360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 805.611736][T10360] Call Trace: [ 805.615045][T10360] dump_stack+0x1d8/0x2f8 [ 805.619383][T10360] should_fail+0x555/0x770 [ 805.619405][T10360] __should_failslab+0x11a/0x160 02:43:10 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xd00000000000000, 0x0) [ 805.619423][T10360] should_failslab+0x9/0x20 [ 805.635162][T10360] kmem_cache_alloc_node+0x65/0x280 [ 805.640357][T10360] ? __alloc_skb+0x9f/0x500 [ 805.640371][T10360] ? mark_lock+0x107/0x1650 [ 805.640389][T10360] __alloc_skb+0x9f/0x500 [ 805.640402][T10360] __pskb_copy_fclone+0xac/0x12b0 [ 805.640412][T10360] ? lockdep_hardirqs_on+0x295/0x7d0 [ 805.640430][T10360] hsr_forward_skb+0xca9/0x2040 [ 805.640453][T10360] ? hsr_port_get_hsr+0xc6/0xf0 [ 805.673712][T10360] hsr_dev_xmit+0x77/0x90 02:43:10 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xe00000000000000, 0x0) [ 805.678051][T10360] dev_hard_start_xmit+0x1c1/0x3f0 [ 805.683199][T10360] __dev_queue_xmit+0x1e53/0x3010 [ 805.688272][T10360] dev_queue_xmit+0x17/0x20 [ 805.692785][T10360] neigh_connected_output+0x3df/0x410 [ 805.698181][T10360] ip_finish_output2+0x13be/0x18d0 [ 805.703304][T10360] ? ip_fraglist_prepare+0x2e5/0x590 [ 805.708605][T10360] ip_do_fragment+0x1528/0x1d10 [ 805.713467][T10360] ? ip_fragment+0x210/0x210 [ 805.718088][T10360] ? rcu_lock_release+0xd/0x30 [ 805.722850][T10360] ? ipv4_mtu+0x2bc/0x3c0 [ 805.727187][T10360] ip_fragment+0x11f/0x210 02:43:10 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1000000000000000, 0x0) [ 805.731641][T10360] __ip_finish_output+0x3fc/0x4b0 [ 805.736685][T10360] ip_finish_output+0x52/0x1e0 [ 805.741464][T10360] ? ip_mc_output+0x4c6/0x620 [ 805.746171][T10360] ip_mc_output+0x4db/0x620 [ 805.750687][T10360] ip_send_skb+0x126/0x1e0 [ 805.755118][T10360] ip_push_pending_frames+0x66/0x80 [ 805.760331][T10360] raw_sendmsg+0x1e06/0x3790 [ 805.764960][T10360] ? __kasan_check_read+0x11/0x20 [ 805.770013][T10360] inet_sendmsg+0x147/0x310 [ 805.774537][T10360] ? security_socket_sendmsg+0xa0/0xd0 [ 805.780021][T10360] ? inet_send_prepare+0x250/0x250 [ 805.785173][T10360] kernel_sendmsg+0x109/0x140 [ 805.789869][T10360] sock_no_sendpage+0x100/0x140 [ 805.794746][T10360] inet_sendpage+0x18c/0x340 [ 805.799433][T10360] ? inet_sendmsg+0x310/0x310 [ 805.804127][T10360] sock_sendpage+0xd3/0x120 [ 805.808640][T10360] pipe_to_sendpage+0x1f9/0x2a0 [ 805.813549][T10360] ? sock_fasync+0x100/0x100 [ 805.818162][T10360] __splice_from_pipe+0x2f7/0x8a0 [ 805.823193][T10360] ? generic_splice_sendpage+0x180/0x180 [ 805.828851][T10360] generic_splice_sendpage+0x114/0x180 [ 805.834322][T10360] ? iter_file_splice_write+0xe20/0xe20 [ 805.839876][T10360] __se_sys_splice+0x71a/0x1ac0 [ 805.844743][T10360] ? check_preemption_disabled+0xb7/0x2a0 [ 805.850483][T10360] ? debug_smp_processor_id+0x1c/0x20 [ 805.855874][T10360] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 805.861976][T10360] __x64_sys_splice+0xe5/0x100 [ 805.866793][T10360] do_syscall_64+0xf7/0x1c0 [ 805.871314][T10360] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 805.877203][T10360] RIP: 0033:0x459f49 [ 805.881230][T10360] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 805.900967][T10360] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 805.909427][T10360] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 805.917415][T10360] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 805.925375][T10360] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 805.933329][T10360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 805.941303][T10360] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:11 executing program 5 (fault-call:7 fault-nth:43): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:11 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1100000000000000, 0x0) 02:43:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040), 0x0) 02:43:11 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8773, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:11 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/209, &(0x7f0000000040)=0xd1) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x200000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:11 executing program 2: syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:11 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1200000000000000, 0x0) 02:43:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) gettid() [ 806.505728][T10396] FAULT_INJECTION: forcing a failure. [ 806.505728][T10396] name failslab, interval 1, probability 0, space 0, times 0 [ 806.518429][T10396] CPU: 0 PID: 10396 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 806.526332][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 806.536400][T10396] Call Trace: [ 806.539708][T10396] dump_stack+0x1d8/0x2f8 [ 806.544048][T10396] should_fail+0x555/0x770 [ 806.548478][T10396] __should_failslab+0x11a/0x160 02:43:11 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8774, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:11 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file1\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3eb5024a8daf46cd28886202c3748ec35844dfd067f1954eba07f064c1a4a8d398a57ed59cafd2c68c44913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000100)={0x6, @loopback, 0x4e21, 0x3, 'sh\x00', 0x1, 0x3f, 0x5d}, 0x2c) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {0x0, 0x2710}}) [ 806.553444][T10396] should_failslab+0x9/0x20 [ 806.557961][T10396] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 806.563694][T10396] ? __kmalloc_node_track_caller+0x3c/0x60 [ 806.569521][T10396] __kmalloc_node_track_caller+0x3c/0x60 [ 806.575171][T10396] ? __pskb_copy_fclone+0xac/0x12b0 [ 806.580398][T10396] __alloc_skb+0xe8/0x500 [ 806.580416][T10396] __pskb_copy_fclone+0xac/0x12b0 02:43:11 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1b27000000000000, 0x0) [ 806.580430][T10396] ? lockdep_hardirqs_on+0x295/0x7d0 [ 806.580452][T10396] hsr_forward_skb+0xca9/0x2040 [ 806.580478][T10396] ? hsr_port_get_hsr+0xc6/0xf0 [ 806.580491][T10396] hsr_dev_xmit+0x77/0x90 [ 806.580505][T10396] dev_hard_start_xmit+0x1c1/0x3f0 [ 806.580525][T10396] __dev_queue_xmit+0x1e53/0x3010 [ 806.580553][T10396] dev_queue_xmit+0x17/0x20 [ 806.580565][T10396] neigh_connected_output+0x3df/0x410 [ 806.580592][T10396] ip_finish_output2+0x13be/0x18d0 [ 806.580602][T10396] ? ip_fraglist_prepare+0x2e5/0x590 [ 806.580623][T10396] ip_do_fragment+0x1528/0x1d10 [ 806.580633][T10396] ? ip_fragment+0x210/0x210 [ 806.580658][T10396] ? rcu_lock_release+0xd/0x30 [ 806.580667][T10396] ? ipv4_mtu+0x2bc/0x3c0 [ 806.580680][T10396] ip_fragment+0x11f/0x210 [ 806.580695][T10396] __ip_finish_output+0x3fc/0x4b0 [ 806.580710][T10396] ip_finish_output+0x52/0x1e0 [ 806.580718][T10396] ? ip_mc_output+0x4c6/0x620 [ 806.580731][T10396] ip_mc_output+0x4db/0x620 [ 806.580746][T10396] ip_send_skb+0x126/0x1e0 [ 806.580760][T10396] ip_push_pending_frames+0x66/0x80 [ 806.580774][T10396] raw_sendmsg+0x1e06/0x3790 [ 806.580808][T10396] ? __kasan_check_read+0x11/0x20 [ 806.580833][T10396] inet_sendmsg+0x147/0x310 [ 806.580846][T10396] ? security_socket_sendmsg+0xa0/0xd0 [ 806.580857][T10396] ? inet_send_prepare+0x250/0x250 [ 806.580869][T10396] kernel_sendmsg+0x109/0x140 [ 806.580882][T10396] sock_no_sendpage+0x100/0x140 [ 806.580905][T10396] inet_sendpage+0x18c/0x340 [ 806.580918][T10396] ? inet_sendmsg+0x310/0x310 [ 806.580929][T10396] sock_sendpage+0xd3/0x120 [ 806.580945][T10396] pipe_to_sendpage+0x1f9/0x2a0 [ 806.580959][T10396] ? sock_fasync+0x100/0x100 [ 806.580973][T10396] __splice_from_pipe+0x2f7/0x8a0 [ 806.580986][T10396] ? generic_splice_sendpage+0x180/0x180 [ 806.581011][T10396] generic_splice_sendpage+0x114/0x180 [ 806.581025][T10396] ? iter_file_splice_write+0xe20/0xe20 [ 806.581037][T10396] __se_sys_splice+0x71a/0x1ac0 02:43:11 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2000000000000000, 0x0) [ 806.581054][T10396] ? check_preemption_disabled+0xb7/0x2a0 [ 806.581068][T10396] ? debug_smp_processor_id+0x1c/0x20 [ 806.581079][T10396] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 806.581100][T10396] __x64_sys_splice+0xe5/0x100 [ 806.581115][T10396] do_syscall_64+0xf7/0x1c0 [ 806.581130][T10396] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 806.581140][T10396] RIP: 0033:0x459f49 [ 806.581151][T10396] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 806.581157][T10396] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 806.581167][T10396] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 806.581173][T10396] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 806.581179][T10396] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 806.581185][T10396] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 806.581191][T10396] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:12 executing program 5 (fault-call:7 fault-nth:44): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:12 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2010000000000000, 0x0) 02:43:12 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8775, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:12 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)={0x7}) r1 = socket$pptp(0x18, 0x1, 0x2) getsockname(r1, &(0x7f0000000080)=@xdp, &(0x7f0000000100)=0x80) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='\r\xf4f(', 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) 02:43:12 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\t\x00'/15, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:43:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100a15d0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x30}, &(0x7f00000001c0)=0x18) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)={r7, 0x1000, "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"}, &(0x7f0000000380)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e24, @multicast1}}, 0xfff, 0x9, 0x7fffffff, 0xfffffe00, 0x10}, &(0x7f0000000480)=0x98) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r3, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x84) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e20, 0x100, @local, 0x401}, {0xa, 0x4e23, 0xff, @mcast1, 0x9}, 0xc8, [0x1000, 0x80, 0x7, 0xc6, 0x400, 0x9, 0x6, 0x7a]}, 0x5c) r10 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r13, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r13, 0x28, 0x2, &(0x7f00000000c0)=0x101, 0x8) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:12 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2500000000000000, 0x0) 02:43:12 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8776, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 807.386286][T10439] FAULT_INJECTION: forcing a failure. [ 807.386286][T10439] name failslab, interval 1, probability 0, space 0, times 0 [ 807.431064][T10439] CPU: 0 PID: 10439 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 807.439018][T10439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.449088][T10439] Call Trace: [ 807.452921][T10439] dump_stack+0x1d8/0x2f8 [ 807.457274][T10439] should_fail+0x555/0x770 [ 807.461713][T10439] __should_failslab+0x11a/0x160 [ 807.466667][T10439] should_failslab+0x9/0x20 [ 807.471184][T10439] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 807.477538][T10439] ? __kmalloc_node_track_caller+0x3c/0x60 [ 807.483376][T10439] __kmalloc_node_track_caller+0x3c/0x60 [ 807.489021][T10439] ? __ip_append_data+0x2077/0x31a0 [ 807.494331][T10439] __alloc_skb+0xe8/0x500 [ 807.498696][T10439] __ip_append_data+0x2077/0x31a0 [ 807.503748][T10439] ? do_raw_getsockopt+0x1c0/0x1c0 [ 807.509425][T10439] ? lock_sock_nested+0xa8/0x120 [ 807.515425][T10439] ip_append_data+0x11c/0x190 [ 807.520204][T10439] ? do_raw_getsockopt+0x1c0/0x1c0 [ 807.525515][T10439] raw_sendmsg+0x1d9e/0x3790 [ 807.530166][T10439] inet_sendmsg+0x147/0x310 [ 807.534691][T10439] ? security_socket_sendmsg+0xa0/0xd0 [ 807.540257][T10439] ? inet_send_prepare+0x250/0x250 [ 807.545396][T10439] kernel_sendmsg+0x109/0x140 [ 807.550084][T10439] sock_no_sendpage+0x100/0x140 [ 807.554967][T10439] inet_sendpage+0x18c/0x340 [ 807.559572][T10439] ? inet_sendmsg+0x310/0x310 [ 807.564266][T10439] sock_sendpage+0xd3/0x120 [ 807.568855][T10439] pipe_to_sendpage+0x1f9/0x2a0 [ 807.573747][T10439] ? sock_fasync+0x100/0x100 02:43:12 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x382fc0ecef8c6c81, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x400, 0xa, 0x2a, "c6c17300d59a984f84cd4b1c68e2b5dcd66680f9a83c00bc5cc5ace95510f9a9a39bf04264031243a96d5e232ea63432953bf114b61372d9684250c9", 0x8, "3811d3339b133ab1a083bce195f3e81f0468a0fb0c68ac8e24050dacfc4efb9a07b062923c4935b15ceb2db748d6e2f98f9af8aabfafef13596a3854", 0x48}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:43:12 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x2e04000000000000, 0x0) 02:43:12 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x1f, &(0x7f00000000c0)=0x7, 0x4) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 807.573775][T10439] __splice_from_pipe+0x2f7/0x8a0 [ 807.583396][T10439] ? generic_splice_sendpage+0x180/0x180 [ 807.583417][T10439] generic_splice_sendpage+0x114/0x180 [ 807.594695][T10439] ? iter_file_splice_write+0xe20/0xe20 [ 807.594707][T10439] __se_sys_splice+0x71a/0x1ac0 [ 807.594723][T10439] ? check_preemption_disabled+0xb7/0x2a0 [ 807.594736][T10439] ? debug_smp_processor_id+0x1c/0x20 [ 807.594748][T10439] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 807.594768][T10439] __x64_sys_splice+0xe5/0x100 [ 807.594783][T10439] do_syscall_64+0xf7/0x1c0 [ 807.594797][T10439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 807.594808][T10439] RIP: 0033:0x459f49 [ 807.594819][T10439] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 807.594824][T10439] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 807.594833][T10439] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 807.594839][T10439] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 807.594844][T10439] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:12 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x3f00000000000000, 0x0) [ 807.594850][T10439] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 807.594855][T10439] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:13 executing program 5 (fault-call:7 fault-nth:45): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:13 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8777, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:13 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x18, 0x1) 02:43:13 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x3f04000000000000, 0x0) 02:43:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c32782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$P9_RMKNOD(r1, &(0x7f00000000c0)={0x14, 0x13, 0x1, {0x46, 0x2, 0x8}}, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000100)=0x80000001) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:13 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4000000000000000, 0x0) 02:43:13 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0}, 0x10) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 808.283333][T10586] FAULT_INJECTION: forcing a failure. [ 808.283333][T10586] name failslab, interval 1, probability 0, space 0, times 0 [ 808.303900][T10586] CPU: 0 PID: 10586 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 808.311861][T10586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.321933][T10586] Call Trace: [ 808.325313][T10586] dump_stack+0x1d8/0x2f8 [ 808.329677][T10586] should_fail+0x555/0x770 [ 808.334119][T10586] __should_failslab+0x11a/0x160 [ 808.339587][T10586] should_failslab+0x9/0x20 [ 808.344288][T10586] kmem_cache_alloc_node+0x65/0x280 [ 808.349491][T10586] ? __alloc_skb+0x9f/0x500 [ 808.354031][T10586] __alloc_skb+0x9f/0x500 [ 808.358476][T10586] __ip_append_data+0x2077/0x31a0 [ 808.363526][T10586] ? do_raw_getsockopt+0x1c0/0x1c0 [ 808.368675][T10586] ip_append_data+0x11c/0x190 [ 808.373383][T10586] ? do_raw_getsockopt+0x1c0/0x1c0 [ 808.378514][T10586] raw_sendmsg+0x1d9e/0x3790 02:43:13 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8778, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 808.383162][T10586] inet_sendmsg+0x147/0x310 [ 808.387678][T10586] ? security_socket_sendmsg+0xa0/0xd0 [ 808.393169][T10586] ? inet_send_prepare+0x250/0x250 [ 808.398304][T10586] kernel_sendmsg+0x109/0x140 [ 808.398324][T10586] sock_no_sendpage+0x100/0x140 [ 808.407868][T10586] inet_sendpage+0x18c/0x340 [ 808.412462][T10586] ? inet_sendmsg+0x310/0x310 [ 808.412478][T10586] sock_sendpage+0xd3/0x120 [ 808.412496][T10586] pipe_to_sendpage+0x1f9/0x2a0 [ 808.412503][T10586] ? sock_fasync+0x100/0x100 [ 808.412517][T10586] __splice_from_pipe+0x2f7/0x8a0 [ 808.436926][T10586] ? generic_splice_sendpage+0x180/0x180 [ 808.442594][T10586] generic_splice_sendpage+0x114/0x180 [ 808.448085][T10586] ? iter_file_splice_write+0xe20/0xe20 [ 808.453673][T10586] __se_sys_splice+0x71a/0x1ac0 [ 808.458545][T10586] ? check_preemption_disabled+0xb7/0x2a0 [ 808.464282][T10586] ? debug_smp_processor_id+0x1c/0x20 [ 808.469666][T10586] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 808.475756][T10586] __x64_sys_splice+0xe5/0x100 [ 808.480643][T10586] do_syscall_64+0xf7/0x1c0 [ 808.480660][T10586] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 808.491066][T10586] RIP: 0033:0x459f49 02:43:13 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c72662dda646e85f3ac0fe2cf9c47ad95cae8793a6c384c2cbb6f51e74a3d91d352784b648bcb3060e9a9c2e016395dd7b5caabaffbf22edc92280ea5dde19c1f671808c240870a7c5ccf96d040b4eb8cb48708758402faa8351db8b56825e38ab8b2436884339dab9944b77a6ab1197e1a0e7f9f0be2736d77813c18c705ab1260226f1aa489f0aa786e1c39b7b2b2998938e7218da2caad903a693e0338b3bfd1b3697918643c325bac1ea9c40ea6d82173187de7cf5e5504a53a103f69dd", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x9b}, 0x1) inotify_init1(0x81000) [ 808.494977][T10586] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:43:13 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4004000000000000, 0x0) 02:43:13 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8779, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 808.494982][T10586] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 808.494991][T10586] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 808.494996][T10586] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 808.495000][T10586] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 808.495004][T10586] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 808.495010][T10586] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:13 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4befb41200fc66bdadb7e9ce8f7780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000180)="2dd2a35cf51f5d5a88184c45f93820e2fff3da1d48ea385129242a53e28cda2a91453ddebd0de0e006eb64a31bc7a29d34d5ab457f1d2686e01cf845e57dfe185f8e0bde32102fa928a63018e60718784bddc55f1e1772cad919bc5f574f0c73041fe5bcc0724f356d81d0632c97a319cbc6f5c9f286233453dafe68d65fc3836e2bb5d0c1c49569041e9d6e6b7574d7d57a9993dcd7de3c680626c5c4a20d2d71e95b8b7515b7b257bdcd0f64460fd2becbe46411f09a9aa498bf493f1eb3ca9d1276227a762c7c0a2eaff0bff212b1efe1b196cb2e3dafd62c18058d53b9e0566a07d90e1a37383f448d", 0xeb, 0x6}, {&(0x7f0000000280)="e740ee41890749579715152233f05093de79f6a86dc4c0d5ca82209b79d0057d1daa86a7b95194039452aa3c3e252faeace8c1bf42c9c7a46e37bc0fad32e443", 0x40, 0xfffffffffffffff7}], 0x2100000, 0x0) [ 808.658191][T10601] 9pnet: Insufficient options for proto=fd [ 808.665585][T10601] 9pnet: Insufficient options for proto=fd 02:43:13 executing program 5 (fault-call:7 fault-nth:46): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:13 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4104000000000000, 0x0) 02:43:13 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='tvans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, 0xfffffffffffffffe) r4 = creat(&(0x7f00000003c0)='./bus\x00', 0x186) r5 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380)='9p\x00', 0x1290000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@privport='privport'}], [{@permit_directio='permit_directio'}, {@appraise='appraise'}, {@euid_gt={'euid>', r6}}, {@uid_lt={'uid<', r8}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '9p\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}]}}) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f00000001c0)=""/110, 0x6e}], 0x3) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 02:43:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0x9, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:13 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:13 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{}, [@netrom, @netrom, @rose, @rose, @remote, @bcast, @null, @netrom]}, &(0x7f0000000100)=0x48) getsockopt(r0, 0xfffffd71, 0x80000001, &(0x7f0000000140)=""/167, &(0x7f0000000200)=0xa7) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:14 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:14 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4204000000000000, 0x0) 02:43:14 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 809.191530][T10646] FAULT_INJECTION: forcing a failure. [ 809.191530][T10646] name failslab, interval 1, probability 0, space 0, times 0 02:43:14 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getpeername$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) connect$packet(r0, &(0x7f0000000540)={0x11, 0x4, r2, 0x1, 0xd5}, 0x14) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472612c7266646e6f3d53d79f5dd84a39c8bd9a61c140ba814a686a6b3313b9eb92dd8d351b798d3a073d0218a1d57043b80267de4ccff878f37e407c2a4cbf6aca0781a1e2cd25f6383a6ebcf4bf72b8086fa3ff507b59d241700e8ec542df045d2abcd49d2fb9087daeeb764165d4dbf4b3fdbb5eda7d375222a54334fd7d4668069e772174891af70fe132de9f5a488e0e61d6e1231037098f2b46207443cacb50468cf390c59d1f9a160e99327b6eeea10048dc9250340482f7", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) [ 809.298631][T10646] CPU: 0 PID: 10646 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 809.306577][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.316649][T10646] Call Trace: [ 809.319975][T10646] dump_stack+0x1d8/0x2f8 [ 809.324333][T10646] should_fail+0x555/0x770 [ 809.328783][T10646] __should_failslab+0x11a/0x160 [ 809.333740][T10646] should_failslab+0x9/0x20 [ 809.338259][T10646] kmem_cache_alloc_node_trace+0x6e/0x2d0 02:43:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000000c0)={0x9, 0x9, 0x1a, "22d7126df228a4446cdbd45bc7b0f5ef447a9d813493ecb5efb248f932e0e63f3981daf0dedfbe2d5ff880c3fc6027eb28d4e61ede79970c4058b337", 0xe, "0a51b48f3cd8304fcbf5d1a39f11201a68389ea72004331c91c4465bc59dba3a6dfa68532db7eadbbf3eedee7d759e674305017d11bba01a36c55158", 0x30}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000480)=""/4096, &(0x7f00000003c0)=0x1000) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x18, r4, 0x81, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x16c, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x568}]}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf630}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c5c82c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24048184}, 0x4015080) 02:43:14 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d7662da78c7860f499dc6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595af801700000000000027dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f0000000100)="8d63f87521bc56a67c893d303d2d7a604cea46a444abe754b2d9c9a30334c3", 0x1f, 0x1}], 0x1, &(0x7f0000000180)={[{@errors_continue='errors=continue'}, {@noquota='noquota'}, {@acl='acl'}, {@noquota='noquota'}], [{@pcr={'pcr', 0x3d, 0x1c}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'bpf\x00'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfstransmute={'smackfstransmute'}}, {@permit_directio='permit_directio'}]}) [ 809.343996][T10646] ? __kmalloc_node_track_caller+0x3c/0x60 [ 809.349847][T10646] __kmalloc_node_track_caller+0x3c/0x60 [ 809.355500][T10646] ? __ip_append_data+0x2077/0x31a0 [ 809.360732][T10646] __alloc_skb+0xe8/0x500 [ 809.360752][T10646] __ip_append_data+0x2077/0x31a0 [ 809.360774][T10646] ? do_raw_getsockopt+0x1c0/0x1c0 [ 809.360807][T10646] ip_append_data+0x11c/0x190 [ 809.360819][T10646] ? do_raw_getsockopt+0x1c0/0x1c0 [ 809.360833][T10646] raw_sendmsg+0x1d9e/0x3790 [ 809.360884][T10646] inet_sendmsg+0x147/0x310 [ 809.360896][T10646] ? security_socket_sendmsg+0xa0/0xd0 [ 809.360905][T10646] ? inet_send_prepare+0x250/0x250 [ 809.360917][T10646] kernel_sendmsg+0x109/0x140 [ 809.360929][T10646] sock_no_sendpage+0x100/0x140 [ 809.360947][T10646] inet_sendpage+0x18c/0x340 [ 809.360957][T10646] ? inet_sendmsg+0x310/0x310 [ 809.360967][T10646] sock_sendpage+0xd3/0x120 [ 809.360982][T10646] pipe_to_sendpage+0x1f9/0x2a0 [ 809.360990][T10646] ? sock_fasync+0x100/0x100 [ 809.361003][T10646] __splice_from_pipe+0x2f7/0x8a0 [ 809.361016][T10646] ? generic_splice_sendpage+0x180/0x180 [ 809.361039][T10646] generic_splice_sendpage+0x114/0x180 [ 809.361052][T10646] ? iter_file_splice_write+0xe20/0xe20 [ 809.361061][T10646] __se_sys_splice+0x71a/0x1ac0 [ 809.361084][T10646] ? check_preemption_disabled+0xb7/0x2a0 [ 809.361096][T10646] ? debug_smp_processor_id+0x1c/0x20 [ 809.361107][T10646] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 809.361123][T10646] __x64_sys_splice+0xe5/0x100 [ 809.361136][T10646] do_syscall_64+0xf7/0x1c0 [ 809.361147][T10646] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 809.361156][T10646] RIP: 0033:0x459f49 [ 809.361164][T10646] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 809.361168][T10646] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 809.361176][T10646] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 809.361180][T10646] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 809.361184][T10646] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 809.361188][T10646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 809.361192][T10646] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 809.506623][T10661] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 809.506623][T10661] [ 809.762874][T10672] REISERFS warning (device loop2): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 809.762874][T10672] 02:43:14 executing program 5 (fault-call:7 fault-nth:47): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:14 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4304000000000000, 0x0) 02:43:14 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:14 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x141046, 0xf) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x820d, 0x0, 0xf, r2}, &(0x7f0000000180)=0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mq_unlink(&(0x7f0000000080)='.\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000300)='loginuid\x00') r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x400000, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f00000003c0)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x10000000000000fd) write$P9_RSTATFS(r0, &(0x7f00000001c0)={0x43, 0x9, 0x2, {0x7, 0x2, 0x7, 0x10000, 0xe5, 0x4, 0x2, 0x13e4, 0xff}}, 0x43) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000a80)={@loopback, 0x0}, &(0x7f0000000ac0)=0x14) bind$packet(r5, &(0x7f0000000b00)={0x11, 0x16, r7, 0x1, 0x2, 0x6, @dev={[], 0x26}}, 0x14) 02:43:14 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0xe78ce66b25b2a7dc, 0x232) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xa967d) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b66736465ffe11a3cb5e24a8d0d175844dfa4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c00"/104]) 02:43:14 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4404000000000000, 0x0) 02:43:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vc\x03\x00', 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) socket$bt_rfcomm(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x2d7) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:15 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:15 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @remote, 0xffffff81}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e22, 0x401, @empty, 0x6}, @in6={0xa, 0x4e22, 0x2, @loopback, 0x3}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xee}, @in6={0xa, 0x4e20, 0x1, @loopback, 0x3ff}, @in={0x2, 0x4e20, @multicast2}], 0xdc) [ 810.075269][T10695] FAULT_INJECTION: forcing a failure. [ 810.075269][T10695] name failslab, interval 1, probability 0, space 0, times 0 [ 810.111740][T10695] CPU: 1 PID: 10695 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 02:43:15 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4504000000000000, 0x0) [ 810.119767][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.129826][T10695] Call Trace: [ 810.133130][T10695] dump_stack+0x1d8/0x2f8 [ 810.137490][T10695] should_fail+0x555/0x770 [ 810.141938][T10695] __should_failslab+0x11a/0x160 [ 810.146915][T10695] should_failslab+0x9/0x20 [ 810.151451][T10695] kmem_cache_alloc_node+0x65/0x280 [ 810.156666][T10695] ? __alloc_skb+0x9f/0x500 [ 810.161202][T10695] __alloc_skb+0x9f/0x500 [ 810.165749][T10695] __ip_append_data+0x2077/0x31a0 [ 810.170774][T10695] ? do_raw_getsockopt+0x1c0/0x1c0 [ 810.170808][T10695] ip_append_data+0x11c/0x190 [ 810.170818][T10695] ? do_raw_getsockopt+0x1c0/0x1c0 [ 810.170831][T10695] raw_sendmsg+0x1d9e/0x3790 [ 810.170873][T10695] inet_sendmsg+0x147/0x310 [ 810.190292][T10695] ? security_socket_sendmsg+0xa0/0xd0 [ 810.190306][T10695] ? inet_send_prepare+0x250/0x250 [ 810.190321][T10695] kernel_sendmsg+0x109/0x140 [ 810.190335][T10695] sock_no_sendpage+0x100/0x140 [ 810.190353][T10695] inet_sendpage+0x18c/0x340 [ 810.190363][T10695] ? inet_sendmsg+0x310/0x310 02:43:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040), 0x10000000000001f8) [ 810.190372][T10695] sock_sendpage+0xd3/0x120 [ 810.190386][T10695] pipe_to_sendpage+0x1f9/0x2a0 [ 810.190398][T10695] ? sock_fasync+0x100/0x100 [ 810.238752][T10695] __splice_from_pipe+0x2f7/0x8a0 [ 810.243818][T10695] ? generic_splice_sendpage+0x180/0x180 [ 810.249560][T10695] generic_splice_sendpage+0x114/0x180 [ 810.255040][T10695] ? iter_file_splice_write+0xe20/0xe20 [ 810.260712][T10695] __se_sys_splice+0x71a/0x1ac0 [ 810.265584][T10695] ? check_preemption_disabled+0xb7/0x2a0 [ 810.271336][T10695] ? debug_smp_processor_id+0x1c/0x20 [ 810.271351][T10695] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 810.271372][T10695] __x64_sys_splice+0xe5/0x100 [ 810.282810][T10695] do_syscall_64+0xf7/0x1c0 [ 810.282825][T10695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 810.282836][T10695] RIP: 0033:0x459f49 [ 810.282848][T10695] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 810.282852][T10695] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 810.282861][T10695] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 810.282865][T10695] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 810.282871][T10695] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 810.282876][T10695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 810.282880][T10695] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:15 executing program 5 (fault-call:7 fault-nth:48): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:15 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4604000000000000, 0x0) 02:43:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xfffffffffffffffe, 0xa41a86b6ddf5948b) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="851c36000495e39dafe8414ed965a3b819a33572b3a774628877c9f91b4d5935ebacd163e5117564c3f6315051ed5316f350b7087a06c6b6f6159e53c56b83e3ac1e9bc0c95365d09c585e0346f16d317b0a8cd7dd1599"}, {&(0x7f0000000300)="9e4ab1f4edee466b6d09a0b91ee36955241f5ee4b57f750ba0d61ff829ccd9da09e88d62f5dc68112de8e4e19bfdcfc975490a6efc0727687e6897b97e11e40fbb7354164a4fe4a486e92fe6a5cd33c932cd0a1764e69dadbdac76ade70930c1bacc910409d67049feb55d5ccca6663053078046027b9e97f6f97b499eff84a0349e7e560afe6d593edd866fba0cdb75320904df53157fce25b6e15b6ccba1815c12733498eec97ae9f62d6fe52b518c093a28243d67f872b4c8bff5eaf2deb0bc859ece0bdbc6497f435ccf98"}], 0x2) 02:43:15 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) pread64(r0, &(0x7f0000000080)=""/176, 0xb0, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:15 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:15 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) acct(&(0x7f0000000040)='./file0\x00') 02:43:15 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4704000000000000, 0x0) 02:43:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x800, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = msgget$private(0x0, 0x1) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000000c0)) msgctl$IPC_RMID(r3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/stat\x00') bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0x1ff, 0xff}, {0x41d, 0xe9}, {0x3, 0x5}]}) 02:43:15 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) accept(0xffffffffffffffff, &(0x7f0000000840)=@hci={0x1f, 0x0}, &(0x7f00000008c0)=0x80) recvfrom$packet(r0, &(0x7f0000000740)=""/224, 0xe0, 0x100, &(0x7f0000000900)={0x11, 0x5, r1, 0x1, 0x1f, 0x6, @broadcast}, 0x14) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) inotify_add_watch(r0, &(0x7f0000000680)='./file0\x00', 0x10) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) sendmsg(r2, &(0x7f0000000640)={&(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x5, 0xf8, "1d2e494c1e0adeee1c273be699ea51fa5f7c05aa9c4025622f88b39915ff1d1597c7e4297d403c3a0d0e468fb25342183ef8938129b60563353738aab9d9ab", 0x7}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)="c4a0eef0e05709b1cccd4c56ccef6880a68bd685c56a874df6ff061ca10b6ee1aff35bda98ec7b4a80f1548c7887a0983ca92cb5969af4289b2d10ffe42a9baaa417", 0x42}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000180)="af636e4f6e0133a1f209cb8683cad190b2478ee6ee484abf5ea481dba58d71d3ffe4d14c1f661aca3788b18eff863754cdbcfcdc8a8301cc5acc8c155b92f4a1631134c8b8c0257b2a23a2b1359437d7ca4f97af65e1ded22468acb424c07a49e656919f149ba9f7f1241a335c1395938e48a3e039cf56d353a2fd19f2af2f500512065a0d823a541cb2dc9bffe3fc34b1ee154cdd750987bbd6e7af26adfa5d49f32cdfe4b328d3df867d5a9fa6bb79310ebbe60ceded011717afc9fd8e89fc0d19be31c4b7e6b92ecd3d5b1a256eadbf5c5bc4e53293d9afe1d6aaadaf4adf", 0xe0}, {&(0x7f0000000280)="db09008edd75425f00031d82e1be8a9b6c22ce5a06c17a021c1481b62fd40da915865770fc55ae5a47f21f23ddb7a4d7368a4333611fa55507c8d8", 0x3b}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f00000002c0)="e9fdeacdcc1dd1948278965eb5908703a9898396aebfe508537df0adc36234f2d80bcfd461a36f43d69f5c21f8c13517f09fc14e4e1a1a5549f09f3db9b03849ba401cc0c1c32465c0b0545f0bd376bfa338c117d8d6f1dd0cd4933d1b541f272fa987c462011f1a8d22ab453daec76849b2a5a11da21ef808dc1e0e2fbfdbf0d958785e1e489e1b550561f899d94a2dcd6ba0135ac735bcb66e2e7d730eb038e4e31cc1862616", 0xa7}, {&(0x7f0000000380)="668e77d5c9e0a9e16c399962a482198d1162a6f8e32710ae26945ac1d9f8a090734417c2682de69d3796a63010a5b74a77b7ecdc1f954a1690820388eaca688fd4606915dae3eb080fafee317b5878d93f6676b273eb6a81bda069b57e7b0d4f6f1ace3341c4f5df3fd06f395764473996bc3aa3f55d4046b4e4dc167230f154da13b1635aa3ca2034bc63a6d300", 0x8e}, {&(0x7f0000000440)="40b7018108844ae5f766cb1c04b620ed4a304b6a916dfa2e6ee1530c15f6b524a1a59c9fe8d6ffdcd058a9f1ac55755d59d415d43684bfd4acc50d84acf581791e1533771e138bc278725baf0405de2e72916d5bbb0373c3a7d9d98a1af0ef956e9a7c804f54dc55516a1effc190fd71ab9dfb2ccd58091e7c0019aed8176685721bba3ae73742739a8c8b03be6687cdd8a814fd0f1a87afbb7461d107e72f80c811e1f0c1ffcdca8f70ea843ff46027cb146bc67f0280e5cb3cc6a935adb4baee725f20acdeaf56dabb3f1c070c131bb5cb9fcc9985dd19e024f4b5b91fe22f729b", 0xe2}], 0x8}, 0x4040002) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/sequencer\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000700)) 02:43:15 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x877f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 810.961740][T10740] FAULT_INJECTION: forcing a failure. [ 810.961740][T10740] name failslab, interval 1, probability 0, space 0, times 0 [ 810.996203][T10740] CPU: 0 PID: 10740 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 02:43:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2f) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x1004) [ 811.004152][T10740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.014325][T10740] Call Trace: [ 811.017627][T10740] dump_stack+0x1d8/0x2f8 [ 811.022154][T10740] should_fail+0x555/0x770 [ 811.026583][T10740] __should_failslab+0x11a/0x160 [ 811.031531][T10740] should_failslab+0x9/0x20 [ 811.036045][T10740] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 811.041768][T10740] ? __kmalloc_node_track_caller+0x3c/0x60 [ 811.047594][T10740] __kmalloc_node_track_caller+0x3c/0x60 [ 811.053233][T10740] ? __ip_append_data+0x2077/0x31a0 [ 811.058445][T10740] __alloc_skb+0xe8/0x500 [ 811.063575][T10740] __ip_append_data+0x2077/0x31a0 [ 811.068612][T10740] ? do_raw_getsockopt+0x1c0/0x1c0 [ 811.073843][T10740] ip_append_data+0x11c/0x190 [ 811.078523][T10740] ? do_raw_getsockopt+0x1c0/0x1c0 [ 811.083647][T10740] raw_sendmsg+0x1d9e/0x3790 [ 811.088281][T10740] inet_sendmsg+0x147/0x310 [ 811.092786][T10740] ? security_socket_sendmsg+0xa0/0xd0 [ 811.098235][T10740] ? inet_send_prepare+0x250/0x250 [ 811.103347][T10740] kernel_sendmsg+0x109/0x140 02:43:16 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4800000000000000, 0x0) [ 811.108040][T10740] sock_no_sendpage+0x100/0x140 [ 811.108064][T10740] inet_sendpage+0x18c/0x340 [ 811.108076][T10740] ? inet_sendmsg+0x310/0x310 [ 811.108087][T10740] sock_sendpage+0xd3/0x120 [ 811.108112][T10740] pipe_to_sendpage+0x1f9/0x2a0 [ 811.108120][T10740] ? sock_fasync+0x100/0x100 [ 811.108134][T10740] __splice_from_pipe+0x2f7/0x8a0 [ 811.108147][T10740] ? generic_splice_sendpage+0x180/0x180 [ 811.108172][T10740] generic_splice_sendpage+0x114/0x180 [ 811.108186][T10740] ? iter_file_splice_write+0xe20/0xe20 [ 811.108199][T10740] __se_sys_splice+0x71a/0x1ac0 [ 811.108217][T10740] ? check_preemption_disabled+0xb7/0x2a0 [ 811.108231][T10740] ? debug_smp_processor_id+0x1c/0x20 [ 811.108244][T10740] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 811.108264][T10740] __x64_sys_splice+0xe5/0x100 [ 811.108280][T10740] do_syscall_64+0xf7/0x1c0 [ 811.108295][T10740] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 811.108303][T10740] RIP: 0033:0x459f49 [ 811.108312][T10740] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 811.108317][T10740] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 811.108326][T10740] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 811.108331][T10740] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 811.108336][T10740] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 811.108341][T10740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 811.108346][T10740] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:16 executing program 5 (fault-call:7 fault-nth:49): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:16 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:16 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4804000000000000, 0x0) 02:43:16 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8780, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='\x00\xff\xff\xff\xff9\xfa\xff\x00\x00\x01', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$sock_proto_private(r2, 0x89e7, &(0x7f00000000c0)="65f3b7e7811fcf84fc645710dcbd60ee19f8da8e743a15ba2b400320279c72eb2fbdaca3e27bb75cfa34f99516ec0ca61c5925ba32f0c8bf5bf5aaf7c9600390ba17d18a29048e2f68c596e6a6df86764ebb93aae195382ed17adcc52666168b05fbb27655c55019308e") r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x6) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:16 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x28, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) sendfile(r5, r2, &(0x7f00000001c0), 0x40834392) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xaa5eed4a5e3f211}, 0x4004d) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:16 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4904000000000000, 0x0) 02:43:16 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7, 0x2488fdd92da3a26d) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0x9, 0xc1b, 0x9, 0x80000001}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 811.839895][T10783] FAULT_INJECTION: forcing a failure. [ 811.839895][T10783] name failslab, interval 1, probability 0, space 0, times 0 [ 811.876589][T10778] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 02:43:16 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000001280)=""/4096) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @multicast1}, &(0x7f0000000180)=0xc) sendto$packet(r1, &(0x7f00000000c0)="8883a384bed6432bcc5eed526bef13eaefbe11ba0ba87843996c23c664e6400aa1cec055310a6118a7a2cad88af1ae12330e0eaeef53305bc32d8fbd6cee004cd1a91d", 0x692, 0x4, &(0x7f00000001c0)={0x11, 0x15, r2}, 0x14) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 811.898633][T10783] CPU: 0 PID: 10783 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 811.906571][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 811.916620][T10783] Call Trace: [ 811.919941][T10783] dump_stack+0x1d8/0x2f8 [ 811.924276][T10783] should_fail+0x555/0x770 [ 811.928701][T10783] __should_failslab+0x11a/0x160 [ 811.933650][T10783] ? skb_clone+0x1cc/0x380 [ 811.938191][T10783] should_failslab+0x9/0x20 [ 811.942703][T10783] kmem_cache_alloc+0x56/0x2e0 02:43:16 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8781, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 811.947457][T10783] ? nf_hook+0x2ba/0x310 [ 811.951702][T10783] skb_clone+0x1cc/0x380 [ 811.955958][T10783] ip_mc_output+0x24e/0x620 [ 811.960464][T10783] ip_send_skb+0x126/0x1e0 [ 811.965061][T10783] ip_push_pending_frames+0x66/0x80 [ 811.970258][T10783] raw_sendmsg+0x1e06/0x3790 [ 811.970303][T10783] inet_sendmsg+0x147/0x310 [ 811.970315][T10783] ? security_socket_sendmsg+0xa0/0xd0 [ 811.970324][T10783] ? inet_send_prepare+0x250/0x250 [ 811.970336][T10783] kernel_sendmsg+0x109/0x140 [ 811.970350][T10783] sock_no_sendpage+0x100/0x140 [ 811.970369][T10783] inet_sendpage+0x18c/0x340 [ 811.979434][T10783] ? inet_sendmsg+0x310/0x310 [ 811.979446][T10783] sock_sendpage+0xd3/0x120 [ 811.979461][T10783] pipe_to_sendpage+0x1f9/0x2a0 [ 811.979470][T10783] ? sock_fasync+0x100/0x100 [ 811.979483][T10783] __splice_from_pipe+0x2f7/0x8a0 [ 811.979494][T10783] ? generic_splice_sendpage+0x180/0x180 [ 811.979516][T10783] generic_splice_sendpage+0x114/0x180 [ 811.979531][T10783] ? iter_file_splice_write+0xe20/0xe20 [ 811.979541][T10783] __se_sys_splice+0x71a/0x1ac0 [ 811.979556][T10783] ? check_preemption_disabled+0xb7/0x2a0 [ 811.979573][T10783] ? debug_smp_processor_id+0x1c/0x20 [ 812.060518][T10783] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 812.066610][T10783] __x64_sys_splice+0xe5/0x100 [ 812.071369][T10783] do_syscall_64+0xf7/0x1c0 [ 812.075866][T10783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.081747][T10783] RIP: 0033:0x459f49 [ 812.085631][T10783] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.105219][T10783] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 812.113628][T10783] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 812.121619][T10783] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 812.129697][T10783] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 812.137661][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 02:43:17 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4a04000000000000, 0x0) [ 812.146053][T10783] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:17 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x4c00000000000000, 0x0) 02:43:17 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8782, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:17 executing program 5 (fault-call:7 fault-nth:50): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:17 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) rmdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_mount_image$bfs(&(0x7f0000000140)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="e10035d2238f87dbca5543158db150c4", 0x10, 0x4}], 0x80, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=""/62, &(0x7f0000000100)=0x3e) syz_open_dev$swradio(&(0x7f0000000300)='/dev/swradio#\x00', 0x1, 0x2) 02:43:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev\x02vcsa#\x00', 0x1, 0x60001) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$evdev(r1, &(0x7f0000000380)=[{{0x0, 0x7530}, 0x6, 0x5, 0x3}, {{}, 0x0, 0xfb00, 0xff}, {{0x0, 0x2710}, 0x4, 0x8, 0x8}, {{0x0, 0x2710}, 0x0, 0x4, 0x10000}, {{0x0, 0x7530}, 0x1e, 0xa03, 0x9}, {{}, 0x12, 0x0, 0xfffffffb}], 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TIOCGPTPEER(r0, 0x5441, 0x7fff) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$getown(r4, 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r6, 0x0, 0x30}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e23, 0x8, @empty, 0x1}}, 0x9, 0x5}, 0x90) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) read$eventfd(r8, &(0x7f0000000340), 0x8) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad18f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000000440)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) rmdir(&(0x7f0000000300)='./bus\x00') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 812.591041][T10811] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 812.633398][T10809] BFS-fs: bfs_fill_super(): No BFS filesystem on loop2 (magic=00000000) 02:43:17 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='\x82\x00\x00\x00/\x00\x00\x02\x00\x00\x00\x00\xed\xff\x00', 0xfffffffffffffd88, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\x13\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'\x02\x00\x00\x04\x04', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@context={'context', 0x3d, 'root'}}]}}) ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x8, 0x1}) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f00000002c0)={[], 0x8, 0x37, 0x73, 0x0, 0x1, 0x114005, 0x1000, [], 0x2072}) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x40103) bind$netlink(r2, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x40040000}, 0xc) 02:43:17 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x55aaffff00000000, 0x0) 02:43:17 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8783, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 812.686895][T10824] FAULT_INJECTION: forcing a failure. [ 812.686895][T10824] name failslab, interval 1, probability 0, space 0, times 0 [ 812.714137][T10824] CPU: 1 PID: 10824 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 812.722077][T10824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 812.722083][T10824] Call Trace: [ 812.722101][T10824] dump_stack+0x1d8/0x2f8 [ 812.722117][T10824] should_fail+0x555/0x770 [ 812.744323][T10824] __should_failslab+0x11a/0x160 [ 812.749358][T10824] ? dst_alloc+0x173/0x580 [ 812.749374][T10824] should_failslab+0x9/0x20 [ 812.749388][T10824] kmem_cache_alloc+0x56/0x2e0 [ 812.749398][T10824] dst_alloc+0x173/0x580 [ 812.749412][T10824] rt_dst_clone+0x57/0x6d0 [ 812.749421][T10824] ? ip_mc_finish_output+0xc3/0x410 [ 812.749433][T10824] ip_mc_finish_output+0x127/0x410 [ 812.749448][T10824] ip_mc_output+0x2c1/0x620 [ 812.749463][T10824] ip_send_skb+0x126/0x1e0 [ 812.790983][T10824] ip_push_pending_frames+0x66/0x80 [ 812.796203][T10824] raw_sendmsg+0x1e06/0x3790 [ 812.800875][T10824] inet_sendmsg+0x147/0x310 [ 812.805394][T10824] ? security_socket_sendmsg+0xa0/0xd0 [ 812.810879][T10824] ? inet_send_prepare+0x250/0x250 [ 812.816014][T10824] kernel_sendmsg+0x109/0x140 [ 812.820717][T10824] sock_no_sendpage+0x100/0x140 [ 812.825597][T10824] inet_sendpage+0x18c/0x340 [ 812.830197][T10824] ? inet_sendmsg+0x310/0x310 [ 812.834891][T10824] sock_sendpage+0xd3/0x120 [ 812.839412][T10824] pipe_to_sendpage+0x1f9/0x2a0 [ 812.844274][T10824] ? sock_fasync+0x100/0x100 [ 812.848960][T10824] __splice_from_pipe+0x2f7/0x8a0 [ 812.848974][T10824] ? generic_splice_sendpage+0x180/0x180 [ 812.848994][T10824] generic_splice_sendpage+0x114/0x180 [ 812.849008][T10824] ? iter_file_splice_write+0xe20/0xe20 [ 812.849021][T10824] __se_sys_splice+0x71a/0x1ac0 [ 812.859647][T10824] ? check_preemption_disabled+0xb7/0x2a0 [ 812.859662][T10824] ? debug_smp_processor_id+0x1c/0x20 02:43:17 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x5c00000000000000, 0x0) 02:43:17 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)=@known='system.advise\x00', &(0x7f00000012c0)=""/4096, 0x1000) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='\a\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 812.859674][T10824] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 812.859695][T10824] __x64_sys_splice+0xe5/0x100 [ 812.859712][T10824] do_syscall_64+0xf7/0x1c0 [ 812.886932][T10824] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 812.886942][T10824] RIP: 0033:0x459f49 [ 812.886956][T10824] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 812.902389][T10824] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 812.902402][T10824] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 812.902408][T10824] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 812.902414][T10824] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 812.902420][T10824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 812.902425][T10824] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:17 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x3) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000380)={0x6, 0xb1, {0x52, 0x800, 0x1000, {0x1, 0x2000}, {0x40, 0x4}, @ramp={0x4376, 0x3, {0xc43, 0x9, 0x1000}}}, {0x55, 0x5d, 0x0, {0x1, 0x40}, {0x1f, 0x401}, @rumble={0xfff8, 0x81}}}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x4, @sliced={0x401, [0x8a04, 0x3ff, 0x1cfd, 0x3, 0x3, 0x0, 0x9, 0x6, 0x3, 0x2, 0x2, 0x0, 0x5, 0x1, 0x6, 0x5, 0x6, 0x7, 0x101, 0x100, 0x0, 0x5, 0x0, 0xffff, 0x9, 0x2b, 0x7, 0x0, 0xfffe, 0x0, 0xff, 0xa1e, 0x447c, 0x7f, 0x29a, 0x7, 0x8, 0x7fff, 0x100, 0x8001, 0xffff, 0x2, 0x0, 0x1000, 0x3, 0x3, 0x0, 0x8], 0x3}}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='bpf\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000400)) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="7b6d61636b6673645c6646dd76626e78c7860f49c6ffe11ad1e8e24a8d0d1758bddfd0c8fe67f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3e2780cd595afd2c68c59913189b827dda90b89802417d647aa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa"]) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20\x00', 0x4000, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r6, 0x9}}, 0x10) r7 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_DECODER_CMD(r7, 0xc0485660, &(0x7f00000004c0)={0x1, 0x2, @raw_data=[0xff, 0x1ff, 0x10001, 0x3, 0x80, 0x0, 0x7fffffff, 0x8, 0x8, 0x6, 0x8, 0x20, 0x80000001, 0x9, 0x2, 0x3f]}) 02:43:18 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6000000000000000, 0x0) 02:43:18 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8784, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:18 executing program 5 (fault-call:7 fault-nth:51): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:18 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x400, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 02:43:18 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6800000000000000, 0x0) 02:43:18 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bind$rose(r0, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@v1={0x2, "42eaafa16f73a9867c433060"}, 0xd, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$iso9660(&(0x7f0000000200)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x4, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="7bd48bbcfdaa44897e897aba10887198231bf162b88a59b972c5736ba4abc06901c86588bcd404975ac59a43deb573cb801f3a3478a581a27b975b1206f7f041d8809a5a8d194da759dd6fbe7dba2c494ac175410a8454ec12b64e79cbff5d7fe1796e2af99762dc0e38c278e294836e70bf37e250ce62a6efafca5503d737770501ec944f50de29694f4b81bed38ed9c8efc126a723378a00fbffe35761ca6a448674714b29e09235a197f8d266337be0c32bf5", 0xb4, 0xe0b}], 0x2000000, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0xffffffffffff6fb1}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@measure='measure'}, {@fowner_gt={'fowner>', r5}}]}) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, {0x9, 0xb3, 0x1, 0x7, 0x2, 0x80}, 0x81}, 0xa) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r3, @ANYBLOB="2c7375626a5f747970653d6d6635002c736d61636b6673726f6f743d646576707473002c6d61736bbbcc8c5b50eff999eaa34b"]) lchown(&(0x7f0000000080)='./file0\x00', r2, r3) 02:43:18 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8785, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) open(&(0x7f0000000100)='./bus\x00', 0xce801, 0x16) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e347268101c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={0xffffffffffffffff, r3}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:18 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x6c00000000000000, 0x0) 02:43:18 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="56a8da00d0", 0xffffffffffffff91}, {&(0x7f0000000340)}], 0xf49701ba4ebee92) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000080)) [ 813.562403][T10882] FAULT_INJECTION: forcing a failure. [ 813.562403][T10882] name failslab, interval 1, probability 0, space 0, times 0 [ 813.575121][T10882] CPU: 0 PID: 10882 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 813.583020][T10882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 813.593090][T10882] Call Trace: [ 813.596401][T10882] dump_stack+0x1d8/0x2f8 [ 813.600738][T10882] should_fail+0x555/0x770 [ 813.600761][T10882] __should_failslab+0x11a/0x160 02:43:18 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8786, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:18 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x100000001, 0x64000) bind$x25(r0, &(0x7f00000000c0)={0x9, @remote={[], 0x2}}, 0x12) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2, 0x0) fcntl$setflags(r1, 0x2, 0x0) [ 813.600776][T10882] should_failslab+0x9/0x20 [ 813.600789][T10882] kmem_cache_alloc_node+0x65/0x280 [ 813.600801][T10882] ? __alloc_skb+0x9f/0x500 [ 813.600809][T10882] ? mark_lock+0x107/0x1650 [ 813.600820][T10882] __alloc_skb+0x9f/0x500 [ 813.600833][T10882] __pskb_copy_fclone+0xac/0x12b0 [ 813.624350][T10882] ? lockdep_hardirqs_on+0x295/0x7d0 [ 813.624375][T10882] hsr_forward_skb+0xca9/0x2040 [ 813.648346][T10882] ? hsr_port_get_hsr+0xc6/0xf0 [ 813.648361][T10882] hsr_dev_xmit+0x77/0x90 [ 813.648375][T10882] dev_hard_start_xmit+0x1c1/0x3f0 [ 813.648394][T10882] __dev_queue_xmit+0x1e53/0x3010 [ 813.648421][T10882] dev_queue_xmit+0x17/0x20 [ 813.648434][T10882] neigh_connected_output+0x3df/0x410 [ 813.648460][T10882] ip_finish_output2+0x13be/0x18d0 [ 813.648470][T10882] ? ip_fraglist_prepare+0x2e5/0x590 [ 813.648490][T10882] ip_do_fragment+0x1528/0x1d10 [ 813.648500][T10882] ? ip_fragment+0x210/0x210 [ 813.648523][T10882] ? rcu_lock_release+0xd/0x30 [ 813.648531][T10882] ? ipv4_mtu+0x2bc/0x3c0 [ 813.648544][T10882] ip_fragment+0x11f/0x210 [ 813.648558][T10882] __ip_finish_output+0x3fc/0x4b0 [ 813.648573][T10882] ip_finish_output+0x52/0x1e0 [ 813.648581][T10882] ? ip_mc_output+0x4c6/0x620 [ 813.648592][T10882] ip_mc_output+0x4db/0x620 [ 813.648606][T10882] ip_send_skb+0x126/0x1e0 [ 813.648619][T10882] ip_push_pending_frames+0x66/0x80 [ 813.648631][T10882] raw_sendmsg+0x1e06/0x3790 [ 813.648684][T10882] inet_sendmsg+0x147/0x310 [ 813.648695][T10882] ? security_socket_sendmsg+0xa0/0xd0 [ 813.648703][T10882] ? inet_send_prepare+0x250/0x250 [ 813.648715][T10882] kernel_sendmsg+0x109/0x140 [ 813.648728][T10882] sock_no_sendpage+0x100/0x140 [ 813.648746][T10882] inet_sendpage+0x18c/0x340 [ 813.648757][T10882] ? inet_sendmsg+0x310/0x310 [ 813.648765][T10882] sock_sendpage+0xd3/0x120 [ 813.648782][T10882] pipe_to_sendpage+0x1f9/0x2a0 [ 813.648788][T10882] ? sock_fasync+0x100/0x100 02:43:18 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7400000000000000, 0x0) 02:43:18 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x622080, 0x190) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4}, 0x10) [ 813.648800][T10882] __splice_from_pipe+0x2f7/0x8a0 [ 813.648812][T10882] ? generic_splice_sendpage+0x180/0x180 [ 813.648831][T10882] generic_splice_sendpage+0x114/0x180 [ 813.648844][T10882] ? iter_file_splice_write+0xe20/0xe20 [ 813.648852][T10882] __se_sys_splice+0x71a/0x1ac0 [ 813.648867][T10882] ? check_preemption_disabled+0xb7/0x2a0 [ 813.648879][T10882] ? debug_smp_processor_id+0x1c/0x20 [ 813.648890][T10882] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 813.648907][T10882] __x64_sys_splice+0xe5/0x100 [ 813.648923][T10882] do_syscall_64+0xf7/0x1c0 [ 813.648936][T10882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 813.648945][T10882] RIP: 0033:0x459f49 [ 813.648955][T10882] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 813.648960][T10882] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 813.648969][T10882] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 813.648973][T10882] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 813.648977][T10882] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 813.648981][T10882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 813.648985][T10882] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:19 executing program 5 (fault-call:7 fault-nth:52): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:19 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7a00000000000000, 0x0) 02:43:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40000001, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:19 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000001c0)) r1 = open(&(0x7f0000000200)='./bus\x00', 0x5c5d00, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x7fffffff, &(0x7f0000000180)=""/21) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in6=@dev={0xfe, 0x80, [], 0xd}, 0x4e24, 0xfffa, 0x4e24, 0x200, 0x2, 0x4b70882ace41b5cd, 0xa0, 0x33, 0x0, r3}, {0x1ff, 0x7, 0x9, 0x8, 0x2, 0x100000001, 0x400, 0x4}, {0x1, 0x8001, 0x3, 0x6}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x2, 0x2}, {{@in6=@empty, 0x4d2, 0xcd}, 0x2, @in=@multicast1, 0x3505, 0x2, 0x1, 0x3, 0x0, 0x5}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x2}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000440)={r4, 0x4, 0x1}, 0x8) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x33fe53d99b0450e8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000240)={{0x9, 0x1}, {0x1, 0x1}, 0x6, 0x4, 0xe6}) sendto$unix(r1, &(0x7f0000000000)="165c884572d2bd3133a9d1214b2cee9dc933067bb64f5fa3289789e5656c56e42cf759f1b66e9b00bb0279a1ec501c92dc5710477f36996b15780d6349", 0x3d, 0x10, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 02:43:19 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8787, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:19 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:19 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x7fffffffffffffff, 0x0) 02:43:19 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8788, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup2(r1, r0) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000000c0)=""/234, &(0x7f00000001c0)=0xea) r4 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r5}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000300)="04d7444409e0dd8cc135782af629ad7339d7f0238bdfe04de8c5", 0x1a}, {&(0x7f0000000340)="7446740e6a3362c41f267ba920114e5b1290c442d8e945f4332af888ffbac2c98c61d0894cd1ce5372cbb2308c564df93e47ec470f09abc1dbf1ea54a09312bca7c536eee412", 0x46}], 0x2, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}], 0x20, 0x10}, 0x80) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) pidfd_send_signal(r2, 0x19, &(0x7f0000000200)={0x1b, 0x2}, 0x0) [ 814.444360][T10926] FAULT_INJECTION: forcing a failure. [ 814.444360][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 814.457703][T10926] CPU: 1 PID: 10926 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 814.465605][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 814.475759][T10926] Call Trace: [ 814.479085][T10926] dump_stack+0x1d8/0x2f8 [ 814.483435][T10926] should_fail+0x555/0x770 [ 814.487893][T10926] __should_failslab+0x11a/0x160 02:43:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) close(r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 814.493316][T10926] should_failslab+0x9/0x20 [ 814.497867][T10926] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 814.503623][T10926] ? __kmalloc_node_track_caller+0x3c/0x60 [ 814.503640][T10926] __kmalloc_node_track_caller+0x3c/0x60 [ 814.503652][T10926] ? __pskb_copy_fclone+0xac/0x12b0 [ 814.503668][T10926] __alloc_skb+0xe8/0x500 [ 814.503683][T10926] __pskb_copy_fclone+0xac/0x12b0 [ 814.503697][T10926] ? lockdep_hardirqs_on+0x295/0x7d0 [ 814.503716][T10926] hsr_forward_skb+0xca9/0x2040 02:43:19 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x103062, 0x100) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x70276d9aa2a58224) write$P9_RREADLINK(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000017010007ec2d2f66746c6530"], 0x10) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x24000, 0x0) [ 814.503743][T10926] ? hsr_port_get_hsr+0xc6/0xf0 [ 814.503755][T10926] hsr_dev_xmit+0x77/0x90 [ 814.503767][T10926] dev_hard_start_xmit+0x1c1/0x3f0 [ 814.503785][T10926] __dev_queue_xmit+0x1e53/0x3010 [ 814.503810][T10926] dev_queue_xmit+0x17/0x20 [ 814.503822][T10926] neigh_connected_output+0x3df/0x410 [ 814.503846][T10926] ip_finish_output2+0x13be/0x18d0 [ 814.503856][T10926] ? ip_fraglist_prepare+0x2e5/0x590 [ 814.503872][T10926] ip_do_fragment+0x1528/0x1d10 [ 814.503880][T10926] ? ip_fragment+0x210/0x210 [ 814.503904][T10926] ? rcu_lock_release+0xd/0x30 [ 814.503914][T10926] ? ipv4_mtu+0x2bc/0x3c0 [ 814.503927][T10926] ip_fragment+0x11f/0x210 [ 814.503940][T10926] __ip_finish_output+0x3fc/0x4b0 [ 814.503954][T10926] ip_finish_output+0x52/0x1e0 [ 814.503962][T10926] ? ip_mc_output+0x4c6/0x620 [ 814.503979][T10926] ip_mc_output+0x4db/0x620 [ 814.564206][T10926] ip_send_skb+0x126/0x1e0 [ 814.584772][T10926] ip_push_pending_frames+0x66/0x80 [ 814.584788][T10926] raw_sendmsg+0x1e06/0x3790 [ 814.584831][T10926] inet_sendmsg+0x147/0x310 02:43:19 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x8000000000000000, 0x0) [ 814.640672][T10926] ? security_socket_sendmsg+0xa0/0xd0 [ 814.640685][T10926] ? inet_send_prepare+0x250/0x250 [ 814.640707][T10926] kernel_sendmsg+0x109/0x140 [ 814.655935][T10926] sock_no_sendpage+0x100/0x140 [ 814.660811][T10926] inet_sendpage+0x18c/0x340 [ 814.665473][T10926] ? inet_sendmsg+0x310/0x310 [ 814.670192][T10926] sock_sendpage+0xd3/0x120 [ 814.674711][T10926] pipe_to_sendpage+0x1f9/0x2a0 [ 814.679567][T10926] ? sock_fasync+0x100/0x100 [ 814.684169][T10926] __splice_from_pipe+0x2f7/0x8a0 [ 814.689230][T10926] ? generic_splice_sendpage+0x180/0x180 [ 814.694886][T10926] generic_splice_sendpage+0x114/0x180 [ 814.700362][T10926] ? iter_file_splice_write+0xe20/0xe20 [ 814.705901][T10926] __se_sys_splice+0x71a/0x1ac0 [ 814.710784][T10926] ? check_preemption_disabled+0xb7/0x2a0 [ 814.710798][T10926] ? debug_smp_processor_id+0x1c/0x20 [ 814.721875][T10926] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 814.727975][T10926] __x64_sys_splice+0xe5/0x100 [ 814.732779][T10926] do_syscall_64+0xf7/0x1c0 [ 814.732795][T10926] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 814.732806][T10926] RIP: 0033:0x459f49 [ 814.732817][T10926] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 814.732823][T10926] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 814.732834][T10926] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 814.732840][T10926] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 814.732846][T10926] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 814.732852][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 814.732858][T10926] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:20 executing program 5 (fault-call:7 fault-nth:53): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:20 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) rt_sigprocmask(0x2, &(0x7f0000000180)={0x6}, &(0x7f00000001c0), 0x8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba692807f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8298973846ab54a64bd343cfa"]) socket$caif_stream(0x25, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x203, 0xffffffffffffffff) getsockname$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@remote, @remote, @default, @remote, @rose, @bcast, @remote, @bcast]}, &(0x7f0000000140)=0x48) write$P9_RLINK(r0, &(0x7f0000000080)={0x7, 0x47, 0x1}, 0x7) 02:43:20 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x8cffffff00000000, 0x0) 02:43:20 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8789, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:20 executing program 0: ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, &(0x7f0000000100)=0x400) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) write$FUSE_POLL(r0, &(0x7f00000000c0)={0x18, 0x0, 0x3, {0x24000}}, 0x18) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:20 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c0036193bf20e521d01ea386ef5e2a99f3511c811bd62b9850d12d657e12e32e7ed19600b00000000000009aa1b0f"]) 02:43:20 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x9926000000000000, 0x0) [ 815.395555][T10970] FAULT_INJECTION: forcing a failure. [ 815.395555][T10970] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 815.408807][T10970] CPU: 0 PID: 10970 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 815.416706][T10970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 815.426780][T10970] Call Trace: [ 815.430293][T10970] dump_stack+0x1d8/0x2f8 [ 815.434659][T10970] should_fail+0x555/0x770 [ 815.439105][T10970] should_fail_alloc_page+0x55/0x60 [ 815.444324][T10970] prepare_alloc_pages+0x283/0x460 [ 815.449483][T10970] __alloc_pages_nodemask+0xb2/0x5d0 [ 815.454780][T10970] ? ip_push_pending_frames+0x66/0x80 [ 815.460161][T10970] ? raw_sendmsg+0x1e06/0x3790 [ 815.464939][T10970] ? kernel_sendmsg+0x109/0x140 [ 815.469819][T10970] kmem_getpages+0x4d/0xa00 [ 815.469834][T10970] cache_grow_begin+0x7e/0x2c0 [ 815.469847][T10970] cache_alloc_refill+0x311/0x3f0 [ 815.469862][T10970] ? check_preemption_disabled+0x47/0x2a0 [ 815.469880][T10970] kmem_cache_alloc_node_trace+0x2a3/0x2d0 02:43:20 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000240)=0x47, 0x4) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = semget$private(0x0, 0x2000000010a, 0x0) semctl$SEM_STAT(r4, 0x0, 0x12, &(0x7f0000000100)=""/248) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000000c0)=""/123) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3000089891a88889d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9fc6f99384725886bcfdf1c736faefeffffffffffffff1a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000000280)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:20 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="736d61636b66465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba0764c1a4a8d398a57e8cb5d595afd2c68c59913189b827dfa90b7f802417d63aaa0fb11cb8a15abe6340b12493157ee5da4aadeec35e6863b8e3827d65b1b5e1a7080001b449e21c375ff77ae85f2011eed93d1f7ababc55abbe5466284eee5e4c59744dfcd7a9f897be5185ce25c8601303cfbda423e5bb551e3a8bc6875063a3c6adc5055c8030da00"/187]) 02:43:20 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xebffffff00000000, 0x0) 02:43:20 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xec00000000000000, 0x0) [ 815.469891][T10970] ? __kmalloc_node_track_caller+0x3c/0x60 [ 815.469906][T10970] __kmalloc_node_track_caller+0x3c/0x60 [ 815.469916][T10970] ? __pskb_copy_fclone+0xac/0x12b0 [ 815.469929][T10970] __alloc_skb+0xe8/0x500 [ 815.469945][T10970] __pskb_copy_fclone+0xac/0x12b0 [ 815.469956][T10970] ? lockdep_hardirqs_on+0x295/0x7d0 [ 815.469978][T10970] hsr_forward_skb+0xca9/0x2040 [ 815.470003][T10970] ? hsr_port_get_hsr+0xc6/0xf0 [ 815.470017][T10970] hsr_dev_xmit+0x77/0x90 [ 815.470030][T10970] dev_hard_start_xmit+0x1c1/0x3f0 02:43:20 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xf6ffffff00000000, 0x0) [ 815.470050][T10970] __dev_queue_xmit+0x1e53/0x3010 [ 815.470077][T10970] dev_queue_xmit+0x17/0x20 [ 815.470089][T10970] neigh_connected_output+0x3df/0x410 [ 815.470114][T10970] ip_finish_output2+0x13be/0x18d0 [ 815.470124][T10970] ? ip_fraglist_prepare+0x2e5/0x590 [ 815.470144][T10970] ip_do_fragment+0x1528/0x1d10 [ 815.470154][T10970] ? ip_fragment+0x210/0x210 [ 815.470178][T10970] ? rcu_lock_release+0xd/0x30 [ 815.470185][T10970] ? ipv4_mtu+0x2bc/0x3c0 [ 815.470199][T10970] ip_fragment+0x11f/0x210 [ 815.470210][T10970] __ip_finish_output+0x3fc/0x4b0 [ 815.470225][T10970] ip_finish_output+0x52/0x1e0 [ 815.604443][T10970] ? ip_mc_output+0x4c6/0x620 [ 815.604458][T10970] ip_mc_output+0x4db/0x620 [ 815.613672][T10970] ip_send_skb+0x126/0x1e0 [ 815.613688][T10970] ip_push_pending_frames+0x66/0x80 [ 815.613703][T10970] raw_sendmsg+0x1e06/0x3790 [ 815.613753][T10970] inet_sendmsg+0x147/0x310 [ 815.613768][T10970] ? security_socket_sendmsg+0xa0/0xd0 [ 815.613778][T10970] ? inet_send_prepare+0x250/0x250 [ 815.613793][T10970] kernel_sendmsg+0x109/0x140 [ 815.613808][T10970] sock_no_sendpage+0x100/0x140 [ 815.613829][T10970] inet_sendpage+0x18c/0x340 [ 815.613841][T10970] ? inet_sendmsg+0x310/0x310 [ 815.613850][T10970] sock_sendpage+0xd3/0x120 [ 815.613864][T10970] pipe_to_sendpage+0x1f9/0x2a0 [ 815.613871][T10970] ? sock_fasync+0x100/0x100 [ 815.613884][T10970] __splice_from_pipe+0x2f7/0x8a0 [ 815.613896][T10970] ? generic_splice_sendpage+0x180/0x180 [ 815.613917][T10970] generic_splice_sendpage+0x114/0x180 [ 815.613931][T10970] ? iter_file_splice_write+0xe20/0xe20 [ 815.613942][T10970] __se_sys_splice+0x71a/0x1ac0 [ 815.613957][T10970] ? check_preemption_disabled+0xb7/0x2a0 [ 815.613970][T10970] ? debug_smp_processor_id+0x1c/0x20 [ 815.613982][T10970] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 815.614002][T10970] __x64_sys_splice+0xe5/0x100 [ 815.614018][T10970] do_syscall_64+0xf7/0x1c0 [ 815.614032][T10970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 815.614041][T10970] RIP: 0033:0x459f49 [ 815.614051][T10970] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 815.614056][T10970] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 815.614066][T10970] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 815.614071][T10970] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 815.614081][T10970] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 815.790932][T10970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 815.798888][T10970] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:21 executing program 5 (fault-call:7 fault-nth:54): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:21 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xf9fdffff00000000, 0x0) 02:43:21 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:21 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='syzkaller\x00', 0x0, r4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0], 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200}, [@map={0x18, 0x0, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0xca, &(0x7f00000001c0)=""/202, 0x41100, 0x7, [], 0x0, 0xd, r5, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x8, 0xfffffffb, 0x1}, 0x10}, 0x70) writev(r6, &(0x7f00000000c0), 0x2) 02:43:21 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x90, 0x18, &(0x7f0000000080)="d2a6e2e47d73af22", {0x101, 0x7fff, 0x56544943, 0x9, 0x875, 0x2, 0xb}}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e25a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d477fad595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:21 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1, @ANYBLOB="2cd066506e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 816.289686][T11001] FAULT_INJECTION: forcing a failure. [ 816.289686][T11001] name failslab, interval 1, probability 0, space 0, times 0 [ 816.302411][T11001] CPU: 1 PID: 11001 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 816.310307][T11001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 816.320367][T11001] Call Trace: [ 816.323657][T11001] dump_stack+0x1d8/0x2f8 [ 816.327994][T11001] should_fail+0x555/0x770 [ 816.332521][T11001] __should_failslab+0x11a/0x160 [ 816.337487][T11001] should_failslab+0x9/0x20 [ 816.341999][T11001] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 816.348417][T11001] ? __kmalloc_node_track_caller+0x3c/0x60 [ 816.354330][T11001] __kmalloc_node_track_caller+0x3c/0x60 [ 816.359958][T11001] ? __pskb_copy_fclone+0xac/0x12b0 [ 816.365142][T11001] __alloc_skb+0xe8/0x500 [ 816.369472][T11001] __pskb_copy_fclone+0xac/0x12b0 [ 816.374502][T11001] ? hsr_addr_subst_dest+0x211/0x4b0 [ 816.379791][T11001] hsr_forward_skb+0xca9/0x2040 [ 816.384655][T11001] hsr_dev_xmit+0x77/0x90 02:43:21 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x101000) ioctl$KDENABIO(r1, 0x4b36) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000140)={0x2b97, 0x20, [0x1, 0x2, 0x3f, 0x3, 0x8, 0x7fffffff, 0x0, 0x5]}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x4002, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:21 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfbffffff00000000, 0x0) 02:43:21 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x22) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e3174ddbe153e7e894e513e040a6cb93c8a10573ffe51c101bd696d863f53af430a5f6ccedf9d31f1899e0069266740fb12c8b5321d70b47bd8cf27a382c31ae8be5c2421fa935fca6aa1df9a5d633cb5b44176ca07d16d243e7bfacc7338d1f5fcbc0212534507b0d7ab96047662eb5afa22b2523f00"/132, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) getsockopt$inet_buf(r0, 0x0, 0x1e, &(0x7f0000000040)=""/46, &(0x7f0000000080)=0x2e) [ 816.388985][T11001] dev_hard_start_xmit+0x1c1/0x3f0 [ 816.394103][T11001] __dev_queue_xmit+0x1e53/0x3010 [ 816.399141][T11001] dev_queue_xmit+0x17/0x20 [ 816.403676][T11001] neigh_connected_output+0x3df/0x410 [ 816.409070][T11001] ip_finish_output2+0x13be/0x18d0 [ 816.414178][T11001] ? ip_fraglist_prepare+0x2e5/0x590 [ 816.419472][T11001] ip_do_fragment+0x1528/0x1d10 [ 816.424358][T11001] ? ip_fragment+0x210/0x210 [ 816.428968][T11001] ? rcu_lock_release+0xd/0x30 [ 816.433731][T11001] ? ipv4_mtu+0x2bc/0x3c0 [ 816.438062][T11001] ip_fragment+0x11f/0x210 [ 816.442480][T11001] __ip_finish_output+0x3fc/0x4b0 [ 816.447514][T11001] ip_finish_output+0x52/0x1e0 [ 816.452267][T11001] ? ip_mc_output+0x4c6/0x620 [ 816.457016][T11001] ip_mc_output+0x4db/0x620 [ 816.461528][T11001] ip_send_skb+0x126/0x1e0 [ 816.466210][T11001] ip_push_pending_frames+0x66/0x80 [ 816.471415][T11001] raw_sendmsg+0x1e06/0x3790 [ 816.476033][T11001] inet_sendmsg+0x147/0x310 [ 816.480536][T11001] ? security_socket_sendmsg+0xa0/0xd0 [ 816.486004][T11001] ? inet_send_prepare+0x250/0x250 [ 816.491126][T11001] kernel_sendmsg+0x109/0x140 [ 816.495793][T11001] sock_no_sendpage+0x100/0x140 [ 816.500809][T11001] inet_sendpage+0x18c/0x340 [ 816.505379][T11001] ? inet_sendmsg+0x310/0x310 [ 816.510036][T11001] sock_sendpage+0xd3/0x120 [ 816.515059][T11001] pipe_to_sendpage+0x1f9/0x2a0 [ 816.519901][T11001] ? sock_fasync+0x100/0x100 [ 816.524485][T11001] __splice_from_pipe+0x2f7/0x8a0 [ 816.530181][T11001] ? generic_splice_sendpage+0x180/0x180 [ 816.535807][T11001] generic_splice_sendpage+0x114/0x180 [ 816.541244][T11001] ? iter_file_splice_write+0xe20/0xe20 [ 816.546763][T11001] __se_sys_splice+0x71a/0x1ac0 [ 816.551661][T11001] ? check_preemption_disabled+0xb7/0x2a0 [ 816.557376][T11001] ? debug_smp_processor_id+0x1c/0x20 [ 816.562729][T11001] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 816.568782][T11001] __x64_sys_splice+0xe5/0x100 [ 816.573526][T11001] do_syscall_64+0xf7/0x1c0 [ 816.578040][T11001] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 816.584004][T11001] RIP: 0033:0x459f49 [ 816.587874][T11001] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 816.607637][T11001] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 816.616025][T11001] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 816.623977][T11001] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 816.631935][T11001] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:21 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) chroot(&(0x7f0000000080)='./file0\x00') [ 816.639971][T11001] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 816.647920][T11001] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:21 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:21 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff00000000000000, 0x0) 02:43:22 executing program 5 (fault-call:7 fault-nth:55): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:22 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:22 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xff0f000000000000, 0x0) 02:43:22 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x2b86df29c57b2eae, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}], [{@euid_lt={'euid<', r3}}, {@obj_role={'obj_role', 0x3d, 'wfdno'}}, {@smackfsroot={'smackfsroot'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0xd02c731558d25092, 0xe66eb36051cfabed, 0x64, 0x65, 0x3dfde889f3bb5721, 0x37, 0xf], 0x2d, [0x61, 0x62, 0x4, 0x70], 0x2d, [0x31, 0x4f, 0x30, 0x62], 0x2d, [0x64, 0x35, 0x30, 0x30], 0x2d, [0x38, 0x30, 0x64, 0x34, 0x39, 0x30, 0x34, 0x39]}}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfshat={'smackfshat', 0x3d, 'wfdno'}}]}}) 02:43:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x8ff, 0xb6fb}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_DEASSIGN_DEV_IRQ(r3, 0x4040ae75, &(0x7f00000000c0)={0xd0, 0x292}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x24c}, {&(0x7f0000000340)}], 0x2) 02:43:22 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x205) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\x00\xa7\xcb\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="4c558cd327b7776e0ff05762cdbd3f05281e5cac259ccc2f640e78d40c6aae6286beef2ff07598f04bdeddd0442653d22bdf9548c62f4c17de9f387b856d6294866aa3dbfc445b255c3ff0b092f9152858ce964881bcefe152e690e3906fe850a0e15bf35dad3e98ada62f15eb5672ac13360ecd28c141a6ba2472f287a5b59bc31b78f945d193609408b7f7a615c2165e6c7a4d72953654f4c43f0a7e8ad2d73aa746eadcda06c6981b3bc139b6990544a5658f30688baa", @ANYRESDEC]]) [ 817.254371][T11046] FAULT_INJECTION: forcing a failure. [ 817.254371][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 817.267367][T11046] CPU: 0 PID: 11046 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 817.275268][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 817.285322][T11046] Call Trace: [ 817.285341][T11046] dump_stack+0x1d8/0x2f8 [ 817.285358][T11046] should_fail+0x555/0x770 [ 817.285374][T11046] __should_failslab+0x11a/0x160 [ 817.285390][T11046] should_failslab+0x9/0x20 [ 817.297455][T11046] kmem_cache_alloc_node+0x65/0x280 [ 817.297466][T11046] ? __alloc_skb+0x9f/0x500 [ 817.297482][T11046] ? mark_lock+0x107/0x1650 [ 817.321169][T11046] __alloc_skb+0x9f/0x500 [ 817.325510][T11046] __pskb_copy_fclone+0xac/0x12b0 [ 817.330590][T11046] ? lockdep_hardirqs_on+0x295/0x7d0 [ 817.335891][T11046] hsr_forward_skb+0xca9/0x2040 [ 817.335914][T11046] ? hsr_port_get_hsr+0xc6/0xf0 [ 817.345734][T11046] hsr_dev_xmit+0x77/0x90 [ 817.350071][T11046] dev_hard_start_xmit+0x1c1/0x3f0 [ 817.355326][T11046] __dev_queue_xmit+0x1e53/0x3010 [ 817.355355][T11046] dev_queue_xmit+0x17/0x20 [ 817.355372][T11046] neigh_connected_output+0x3df/0x410 [ 817.370270][T11046] ip_finish_output2+0x13be/0x18d0 [ 817.375388][T11046] ? ip_fraglist_prepare+0x300/0x590 [ 817.380691][T11046] ip_do_fragment+0x1528/0x1d10 [ 817.385639][T11046] ? ip_fragment+0x210/0x210 [ 817.390246][T11046] ? rcu_lock_release+0xd/0x30 [ 817.395033][T11046] ? ipv4_mtu+0x2bc/0x3c0 [ 817.399465][T11046] ip_fragment+0x11f/0x210 [ 817.403889][T11046] __ip_finish_output+0x3fc/0x4b0 [ 817.408956][T11046] ip_finish_output+0x52/0x1e0 [ 817.413743][T11046] ? ip_mc_output+0x4c6/0x620 [ 817.418525][T11046] ip_mc_output+0x4db/0x620 [ 817.423050][T11046] ip_send_skb+0x126/0x1e0 [ 817.427471][T11046] ip_push_pending_frames+0x66/0x80 [ 817.432671][T11046] raw_sendmsg+0x1e06/0x3790 [ 817.437301][T11046] inet_sendmsg+0x147/0x310 [ 817.441817][T11046] ? security_socket_sendmsg+0xa0/0xd0 [ 817.447389][T11046] ? inet_send_prepare+0x250/0x250 [ 817.452513][T11046] kernel_sendmsg+0x109/0x140 [ 817.457206][T11046] sock_no_sendpage+0x100/0x140 [ 817.462073][T11046] inet_sendpage+0x18c/0x340 [ 817.466666][T11046] ? inet_sendmsg+0x310/0x310 [ 817.471342][T11046] sock_sendpage+0xd3/0x120 [ 817.475847][T11046] pipe_to_sendpage+0x1f9/0x2a0 [ 817.480699][T11046] ? sock_fasync+0x100/0x100 [ 817.485298][T11046] __splice_from_pipe+0x2f7/0x8a0 [ 817.490324][T11046] ? generic_splice_sendpage+0x180/0x180 [ 817.495976][T11046] generic_splice_sendpage+0x114/0x180 [ 817.501448][T11046] ? iter_file_splice_write+0xe20/0xe20 [ 817.507002][T11046] __se_sys_splice+0x71a/0x1ac0 [ 817.511855][T11046] ? check_preemption_disabled+0xb7/0x2a0 [ 817.517565][T11046] ? debug_smp_processor_id+0x1c/0x20 [ 817.517576][T11046] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 817.517597][T11046] __x64_sys_splice+0xe5/0x100 [ 817.533777][T11046] do_syscall_64+0xf7/0x1c0 [ 817.538294][T11046] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 817.544186][T11046] RIP: 0033:0x459f49 [ 817.548079][T11046] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 817.567687][T11046] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 817.576103][T11046] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 817.584079][T11046] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 817.592053][T11046] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:22 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xfffdffff00000000, 0x0) 02:43:22 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x1c4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68759913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:22 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffff3f1f00000000, 0x0) 02:43:22 executing program 2: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xa27447c9f6fa52f8, &(0x7f00000000c0)=0x520caf9, 0x4) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000300)=ANY=[], 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x4e974ff300bf3fad}, 0xc) 02:43:22 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2cf766646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 817.600026][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 817.608012][T11046] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:22 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000000c0)=""/5) [ 817.850304][T11063] 9pnet: Insufficient options for proto=fd 02:43:22 executing program 5 (fault-call:7 fault-nth:56): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:22 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffff7f00000000, 0x0) 02:43:22 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno}', @ANYRESHEX=r1, @ANYBLOB=',\x00']) 02:43:22 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:23 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0xc0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) keyctl$invalidate(0x15, 0x0) 02:43:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:23 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffffff00000000, 0x0) 02:43:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'nr0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 818.167109][T11078] 9pnet: Insufficient options for proto=fd [ 818.243360][T11087] FAULT_INJECTION: forcing a failure. [ 818.243360][T11087] name failslab, interval 1, probability 0, space 0, times 0 [ 818.256132][T11087] CPU: 0 PID: 11087 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 818.264043][T11087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 818.274141][T11087] Call Trace: [ 818.277547][T11087] dump_stack+0x1d8/0x2f8 [ 818.281893][T11087] should_fail+0x555/0x770 [ 818.286413][T11087] __should_failslab+0x11a/0x160 [ 818.291384][T11087] should_failslab+0x9/0x20 [ 818.295898][T11087] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 818.301626][T11087] ? __kmalloc_node_track_caller+0x3c/0x60 [ 818.307443][T11087] __kmalloc_node_track_caller+0x3c/0x60 [ 818.313171][T11087] ? __pskb_copy_fclone+0xac/0x12b0 [ 818.318407][T11087] __alloc_skb+0xe8/0x500 [ 818.322759][T11087] __pskb_copy_fclone+0xac/0x12b0 [ 818.327799][T11087] ? lockdep_hardirqs_on+0x295/0x7d0 [ 818.333112][T11087] hsr_forward_skb+0xca9/0x2040 [ 818.337982][T11087] ? hsr_port_get_hsr+0xc6/0xf0 [ 818.343104][T11087] hsr_dev_xmit+0x77/0x90 [ 818.347445][T11087] dev_hard_start_xmit+0x1c1/0x3f0 [ 818.352567][T11087] __dev_queue_xmit+0x1e53/0x3010 [ 818.357617][T11087] dev_queue_xmit+0x17/0x20 [ 818.362141][T11087] neigh_connected_output+0x3df/0x410 [ 818.367535][T11087] ip_finish_output2+0x13be/0x18d0 [ 818.372663][T11087] ? ip_fraglist_prepare+0x300/0x590 [ 818.377970][T11087] ip_do_fragment+0x1528/0x1d10 [ 818.382835][T11087] ? ip_fragment+0x210/0x210 [ 818.387467][T11087] ? rcu_lock_release+0xd/0x30 [ 818.392245][T11087] ? ipv4_mtu+0x2bc/0x3c0 [ 818.396608][T11087] ip_fragment+0x11f/0x210 [ 818.401031][T11087] __ip_finish_output+0x3fc/0x4b0 [ 818.406062][T11087] ip_finish_output+0x52/0x1e0 [ 818.410827][T11087] ? ip_mc_output+0x4c6/0x620 [ 818.415505][T11087] ip_mc_output+0x4db/0x620 [ 818.420016][T11087] ip_send_skb+0x126/0x1e0 [ 818.424434][T11087] ip_push_pending_frames+0x66/0x80 [ 818.429638][T11087] raw_sendmsg+0x1e06/0x3790 [ 818.434392][T11087] inet_sendmsg+0x147/0x310 [ 818.438942][T11087] ? security_socket_sendmsg+0xa0/0xd0 [ 818.444421][T11087] ? inet_send_prepare+0x250/0x250 [ 818.449576][T11087] kernel_sendmsg+0x109/0x140 [ 818.454298][T11087] sock_no_sendpage+0x100/0x140 [ 818.459177][T11087] inet_sendpage+0x18c/0x340 [ 818.463780][T11087] ? inet_sendmsg+0x310/0x310 [ 818.468504][T11087] sock_sendpage+0xd3/0x120 [ 818.473022][T11087] pipe_to_sendpage+0x1f9/0x2a0 [ 818.477881][T11087] ? sock_fasync+0x100/0x100 [ 818.482497][T11087] __splice_from_pipe+0x2f7/0x8a0 [ 818.487541][T11087] ? generic_splice_sendpage+0x180/0x180 [ 818.493206][T11087] generic_splice_sendpage+0x114/0x180 [ 818.498684][T11087] ? iter_file_splice_write+0xe20/0xe20 [ 818.504253][T11087] __se_sys_splice+0x71a/0x1ac0 [ 818.509122][T11087] ? check_preemption_disabled+0xb7/0x2a0 [ 818.514869][T11087] ? debug_smp_processor_id+0x1c/0x20 [ 818.520245][T11087] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 818.526331][T11087] __x64_sys_splice+0xe5/0x100 [ 818.531122][T11087] do_syscall_64+0xf7/0x1c0 [ 818.535659][T11087] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 818.541569][T11087] RIP: 0033:0x459f49 [ 818.545597][T11087] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 818.565222][T11087] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 818.573705][T11087] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 818.581746][T11087] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:43:23 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) creat(&(0x7f0000000080)='./file0\x00', 0xd0) 02:43:23 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffffffffff0700, 0x0) 02:43:23 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffffffffffff7f, 0x0) [ 818.589764][T11087] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 818.597859][T11087] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 818.606049][T11087] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:23 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0xffffffffffffffff, 0x0) 02:43:23 executing program 5 (fault-call:7 fault-nth:57): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:23 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:23 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x40) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) 02:43:23 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000013c0)={&(0x7f0000000040), 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x12c, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0xc0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @mcast2, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @loopback, 0xb9}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20}, 0x20000003) writev(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)="81c0bb1210a3b6cf504c9f5e0b064ae5434649f093f41382b5c8ca539e53cc4f4ba563d6ad8365c27aafa0717ed049c4d5ccc97444446675c83683bb4c524f5ff0d517a3e3095c81cfb62f4e44f93c8530c616f7254e8de0080d5bedcc042e33a23b3b436d47ca1b284a0aaf6bd44b8bd91872626dcc92b72a", 0x79}, {&(0x7f0000000140)="ad25658266801ad9bd55b452e89e815d18d2d5965621af78699b716821d9d482e0f2cd20a1ac8dc116d6dc9d598ca133e782b2c32f085ba6f5335c2d7ff2d2124cb4b08af75d4bdfc7259de43ac1805bf890d8d39173005b02a9c8a55910a5981755d7a656addda290268b70774ef5927d032a8b9d26fbf166de0378578d79c352b757cc085bece8a9e42e95f9c1ccbebcdf601dd115", 0xffffffffffffff79}, {&(0x7f0000000200)="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", 0x1000}], 0x3) 02:43:23 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) read$usbmon(r0, &(0x7f0000000080)=""/176, 0xb0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000140)={0x100, 0xfff, 0x80, 0x7, 0x8, 0x1f, 0x8000}, 0xc) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:23 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) acct(&(0x7f0000000040)='./file0\x00') [ 819.058690][T11112] [EXFAT] trying to mount... [ 819.089914][T11112] [EXFAT] ffsMountVol failed 02:43:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffffc) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) [ 819.115120][T11112] [EXFAT] trying to mount... [ 819.121399][T11112] [EXFAT] ffsMountVol failed [ 819.158615][T11225] FAULT_INJECTION: forcing a failure. [ 819.158615][T11225] name failslab, interval 1, probability 0, space 0, times 0 [ 819.171370][T11225] CPU: 1 PID: 11225 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 819.171378][T11225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 819.171383][T11225] Call Trace: [ 819.171406][T11225] dump_stack+0x1d8/0x2f8 02:43:24 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x240884, &(0x7f0000000540)=ANY=[]) 02:43:24 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101080, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="d20000000000000087cd9e67f1eacc0c4eaa1dee46664d354bdef9d61347066c45bdb4cc0ff565071829867c2a5d84a1be2f6dfe9c4d8d8d6ecdd8928ce7dd4bb2825095ef54dd89256f3e5028ad7d679507a4d6640d64d2fc2ed2ce351f7199a4a402e4321a19805ee56203035da58fd3a5c48c8f72bf17534cec4b3b7f42713de9d9d001935f8b6e4c93c1b1d0f65c7c2663a18e3d46fbb0b04798e22a349b600e2f66fe6e3218b255e7885240464b8602e0e65ee5b194486292a389aa9dfaeaf6da432fdc93daef6a3b5aeec5d395329d"], &(0x7f0000000100), 0x800) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='/dev/nbd', 0x0, r0) [ 819.171424][T11225] should_fail+0x555/0x770 [ 819.171444][T11225] __should_failslab+0x11a/0x160 [ 819.171462][T11225] should_failslab+0x9/0x20 [ 819.171475][T11225] kmem_cache_alloc_node+0x65/0x280 [ 819.171488][T11225] ? __alloc_skb+0x9f/0x500 [ 819.171502][T11225] __alloc_skb+0x9f/0x500 [ 819.171518][T11225] __pskb_copy_fclone+0xac/0x12b0 [ 819.171533][T11225] ? hsr_addr_subst_dest+0x211/0x4b0 [ 819.171548][T11225] hsr_forward_skb+0xca9/0x2040 [ 819.171578][T11225] hsr_dev_xmit+0x77/0x90 [ 819.171590][T11225] dev_hard_start_xmit+0x1c1/0x3f0 [ 819.171609][T11225] __dev_queue_xmit+0x1e53/0x3010 [ 819.171643][T11225] dev_queue_xmit+0x17/0x20 [ 819.171654][T11225] neigh_connected_output+0x3df/0x410 [ 819.171678][T11225] ip_finish_output2+0x13be/0x18d0 [ 819.171691][T11225] ? ip_fraglist_prepare+0x300/0x590 [ 819.171711][T11225] ip_do_fragment+0x1528/0x1d10 [ 819.171723][T11225] ? ip_fragment+0x210/0x210 [ 819.171748][T11225] ? rcu_lock_release+0xd/0x30 [ 819.171756][T11225] ? ipv4_mtu+0x2bc/0x3c0 02:43:24 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x22) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x8000, 0x7fff, 0x7, 0x2, r0, 0x2, [], 0x0, r1, 0x5}, 0x3c) [ 819.171770][T11225] ip_fragment+0x11f/0x210 [ 819.171783][T11225] __ip_finish_output+0x3fc/0x4b0 [ 819.171797][T11225] ip_finish_output+0x52/0x1e0 [ 819.171806][T11225] ? ip_mc_output+0x4c6/0x620 [ 819.171818][T11225] ip_mc_output+0x4db/0x620 [ 819.171833][T11225] ip_send_skb+0x126/0x1e0 [ 819.171846][T11225] ip_push_pending_frames+0x66/0x80 [ 819.171857][T11225] raw_sendmsg+0x1e06/0x3790 [ 819.171904][T11225] inet_sendmsg+0x147/0x310 [ 819.171915][T11225] ? security_socket_sendmsg+0xa0/0xd0 [ 819.171925][T11225] ? inet_send_prepare+0x250/0x250 [ 819.171937][T11225] kernel_sendmsg+0x109/0x140 [ 819.171950][T11225] sock_no_sendpage+0x100/0x140 [ 819.171971][T11225] inet_sendpage+0x18c/0x340 [ 819.171983][T11225] ? inet_sendmsg+0x310/0x310 [ 819.171993][T11225] sock_sendpage+0xd3/0x120 [ 819.172009][T11225] pipe_to_sendpage+0x1f9/0x2a0 [ 819.172017][T11225] ? sock_fasync+0x100/0x100 [ 819.172031][T11225] __splice_from_pipe+0x2f7/0x8a0 [ 819.172044][T11225] ? generic_splice_sendpage+0x180/0x180 [ 819.172073][T11225] generic_splice_sendpage+0x114/0x180 02:43:24 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 819.172087][T11225] ? iter_file_splice_write+0xe20/0xe20 [ 819.172098][T11225] __se_sys_splice+0x71a/0x1ac0 [ 819.172112][T11225] ? check_preemption_disabled+0xb7/0x2a0 [ 819.172126][T11225] ? debug_smp_processor_id+0x1c/0x20 [ 819.172136][T11225] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 819.172157][T11225] __x64_sys_splice+0xe5/0x100 [ 819.172172][T11225] do_syscall_64+0xf7/0x1c0 [ 819.172186][T11225] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 819.172195][T11225] RIP: 0033:0x459f49 [ 819.172207][T11225] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 819.172212][T11225] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 819.172224][T11225] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 819.172229][T11225] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 819.172236][T11225] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 819.172243][T11225] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 819.172250][T11225] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 819.380908][T11331] [EXFAT] trying to mount... [ 819.387917][T11331] [EXFAT] ffsMountVol failed 02:43:24 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='\xa0\v\x00\x00\x00\x00', 0x400, 0x0) 02:43:24 executing program 5 (fault-call:7 fault-nth:58): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:24 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) vmsplice(r0, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0xfdea}], 0x1, 0x0) mbind(&(0x7f0000289000/0x400000)=nil, 0x400000, 0x0, 0x0, 0x0, 0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x5, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {r4, 0x7, 0x0, 0x0, 0x0, @ib={0x1b, 0xf5cb, 0x2d6, {"f6902036ad45698828227e047f6b6024"}, 0x7fff, 0x6, 0x1}, @in={0x2, 0x4e21, @multicast2}}}, 0x118) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec300000000e3827d846ab54a64bd343cfa7f2c"]) 02:43:24 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x878f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:24 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="8bfc6f7ccb0ac4816c623000e140f2ee94b7d0c3091766ab77e65f"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:24 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2800008, 0x40010, r0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x35a82fdf}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8}, 0x80) 02:43:24 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@random={'user.', '}!\x00'}) 02:43:24 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000100), 0xd0f09031}], 0x10000000000001f3) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/18) 02:43:25 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8790, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 820.071819][T11569] [EXFAT] trying to mount... [ 820.077052][T11569] [EXFAT] ffsMountVol failed [ 820.101042][T11572] FAULT_INJECTION: forcing a failure. [ 820.101042][T11572] name failslab, interval 1, probability 0, space 0, times 0 [ 820.112318][T11569] [EXFAT] trying to mount... [ 820.113728][T11572] CPU: 1 PID: 11572 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 820.126460][T11572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.129950][T11569] [EXFAT] ffsMountVol failed [ 820.136522][T11572] Call Trace: [ 820.136549][T11572] dump_stack+0x1d8/0x2f8 [ 820.136571][T11572] should_fail+0x555/0x770 [ 820.136599][T11572] __should_failslab+0x11a/0x160 [ 820.158147][T11572] should_failslab+0x9/0x20 [ 820.162648][T11572] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 820.168357][T11572] ? __kmalloc_node_track_caller+0x3c/0x60 [ 820.174160][T11572] __kmalloc_node_track_caller+0x3c/0x60 [ 820.179773][T11572] ? __pskb_copy_fclone+0xac/0x12b0 [ 820.185061][T11572] __alloc_skb+0xe8/0x500 [ 820.189370][T11572] __pskb_copy_fclone+0xac/0x12b0 [ 820.194375][T11572] ? hsr_addr_subst_dest+0x211/0x4b0 [ 820.199642][T11572] hsr_forward_skb+0xca9/0x2040 [ 820.204486][T11572] hsr_dev_xmit+0x77/0x90 [ 820.208794][T11572] dev_hard_start_xmit+0x1c1/0x3f0 [ 820.213894][T11572] __dev_queue_xmit+0x1e53/0x3010 [ 820.218915][T11572] dev_queue_xmit+0x17/0x20 [ 820.223406][T11572] neigh_connected_output+0x3df/0x410 [ 820.228764][T11572] ip_finish_output2+0x13be/0x18d0 [ 820.233853][T11572] ? ip_fraglist_prepare+0x300/0x590 [ 820.239288][T11572] ip_do_fragment+0x1528/0x1d10 [ 820.244139][T11572] ? ip_fragment+0x210/0x210 [ 820.248719][T11572] ? rcu_lock_release+0xd/0x30 [ 820.253460][T11572] ? ipv4_mtu+0x2bc/0x3c0 [ 820.257781][T11572] ip_fragment+0x11f/0x210 [ 820.262179][T11572] __ip_finish_output+0x3fc/0x4b0 [ 820.267206][T11572] ip_finish_output+0x52/0x1e0 [ 820.271973][T11572] ? ip_mc_output+0x4c6/0x620 [ 820.276643][T11572] ip_mc_output+0x4db/0x620 [ 820.281140][T11572] ip_send_skb+0x126/0x1e0 [ 820.285539][T11572] ip_push_pending_frames+0x66/0x80 [ 820.290744][T11572] raw_sendmsg+0x1e06/0x3790 [ 820.295361][T11572] inet_sendmsg+0x147/0x310 [ 820.299857][T11572] ? security_socket_sendmsg+0xa0/0xd0 [ 820.305311][T11572] ? inet_send_prepare+0x250/0x250 [ 820.310412][T11572] kernel_sendmsg+0x109/0x140 [ 820.315090][T11572] sock_no_sendpage+0x100/0x140 [ 820.319931][T11572] inet_sendpage+0x18c/0x340 [ 820.324503][T11572] ? inet_sendmsg+0x310/0x310 [ 820.329159][T11572] sock_sendpage+0xd3/0x120 [ 820.333644][T11572] pipe_to_sendpage+0x1f9/0x2a0 [ 820.338469][T11572] ? sock_fasync+0x100/0x100 [ 820.343039][T11572] __splice_from_pipe+0x2f7/0x8a0 [ 820.348042][T11572] ? generic_splice_sendpage+0x180/0x180 [ 820.353842][T11572] generic_splice_sendpage+0x114/0x180 [ 820.359380][T11572] ? iter_file_splice_write+0xe20/0xe20 [ 820.364920][T11572] __se_sys_splice+0x71a/0x1ac0 [ 820.369780][T11572] ? check_preemption_disabled+0xb7/0x2a0 [ 820.375487][T11572] ? debug_smp_processor_id+0x1c/0x20 [ 820.380928][T11572] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 820.386985][T11572] __x64_sys_splice+0xe5/0x100 [ 820.391733][T11572] do_syscall_64+0xf7/0x1c0 [ 820.396217][T11572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 820.402108][T11572] RIP: 0033:0x459f49 [ 820.405982][T11572] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 820.425982][T11572] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 820.434392][T11572] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 820.442351][T11572] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 820.450305][T11572] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 820.458277][T11572] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 02:43:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f00000000c0)=0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='/\x86\xc8\xe45\xfbb\x9d\x98#9') [ 820.466226][T11572] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:25 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="537b4c3fb5cb1ad5e23034a24de6151d5ea73db17037fa3f74706c66343e67271d3f918c3f186cf850025be107ccbda2c947ce0feac46023eaafc9028362e723639b71c9c74fce08e7c9d9b9d694d0fffd6229e65313a991da585436fc986b8073c366b0b19a812f33a5641079f7971b450cb8a79c6b"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:25 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8791, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:25 executing program 5 (fault-call:7 fault-nth:59): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:25 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:25 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000080)=0xfffffff7) mkdir(&(0x7f0000001240)='./file0\x00', 0x1a6) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba075c03c1a4a8d398a57e8cb5272f0612091ab398f8b309000000000000008c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:25 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000140)={0x4b1, 0x3, {0x3, 0x0, 0x200000, 0x1, 0x400}}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f00000000c0)) writev(r1, &(0x7f00000001c0), 0x1) 02:43:25 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8792, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:25 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000140)='./bus\x00', &(0x7f0000000180)=@random={'system.', 'vboxnet1\xf0\x00'}, &(0x7f00000001c0)=""/148, 0x94) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c41e6b0cdd520"]) 02:43:25 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) gettid() writev(r2, &(0x7f0000000040), 0x0) [ 820.871819][T11699] [EXFAT] trying to mount... [ 820.889365][T11699] [EXFAT] ffsMountVol failed 02:43:25 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x10d) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 820.961881][T11768] FAULT_INJECTION: forcing a failure. [ 820.961881][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 820.974731][T11768] CPU: 1 PID: 11768 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 820.982627][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.992689][T11768] Call Trace: [ 820.995989][T11768] dump_stack+0x1d8/0x2f8 [ 821.000335][T11768] should_fail+0x555/0x770 [ 821.004760][T11768] __should_failslab+0x11a/0x160 [ 821.009710][T11768] should_failslab+0x9/0x20 [ 821.009725][T11768] kmem_cache_alloc_node+0x65/0x280 [ 821.009740][T11768] ? __alloc_skb+0x9f/0x500 [ 821.009753][T11768] ? __lock_acquire+0xc75/0x1be0 [ 821.009765][T11768] __alloc_skb+0x9f/0x500 [ 821.009781][T11768] __pskb_copy_fclone+0xac/0x12b0 [ 821.038501][T11768] ? lockdep_hardirqs_on+0x295/0x7d0 [ 821.043810][T11768] hsr_forward_skb+0xca9/0x2040 [ 821.048700][T11768] ? hsr_port_get_hsr+0xc6/0xf0 [ 821.053561][T11768] hsr_dev_xmit+0x77/0x90 02:43:25 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8793, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:25 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$P9_RWRITE(r0, &(0x7f0000000240)={0xb, 0x77, 0x1, 0x5}, 0xb) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x4000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:26 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x1010000, &(0x7f0000000100)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d17585895d067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8c01a3112d595afd2c68c59913189b827dda92d89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cc67f2c2b83f94081fbaddee25ea17a35091b013ef36b8fd33fc24d2d464df282c97ebe4df647421b74f05b95a4606254c0204220a8ba9e58ce0773ef50ab119172f6d3910c54caa5ad8e8cab0933dd17e27835d135fe6a10d4c12763fa9d03a84bcb9a84ff53ec9a9e6807d97f042fb8d4d3de20987bf088f0d48550957389"]) [ 821.057930][T11768] dev_hard_start_xmit+0x1c1/0x3f0 [ 821.063056][T11768] __dev_queue_xmit+0x1e53/0x3010 [ 821.068092][T11768] dev_queue_xmit+0x17/0x20 [ 821.072600][T11768] neigh_connected_output+0x3df/0x410 [ 821.077984][T11768] ip_finish_output2+0x13be/0x18d0 [ 821.083101][T11768] ? ip_fraglist_prepare+0x300/0x590 [ 821.088401][T11768] ip_do_fragment+0x1528/0x1d10 [ 821.093252][T11768] ? ip_fragment+0x210/0x210 [ 821.093277][T11768] ? rcu_lock_release+0xd/0x30 [ 821.093285][T11768] ? ipv4_mtu+0x2bc/0x3c0 [ 821.093299][T11768] ip_fragment+0x11f/0x210 [ 821.093314][T11768] __ip_finish_output+0x3fc/0x4b0 [ 821.093328][T11768] ip_finish_output+0x52/0x1e0 [ 821.121152][T11768] ? ip_mc_output+0x4c6/0x620 [ 821.125835][T11768] ip_mc_output+0x4db/0x620 [ 821.125853][T11768] ip_send_skb+0x126/0x1e0 [ 821.125867][T11768] ip_push_pending_frames+0x66/0x80 [ 821.125886][T11768] raw_sendmsg+0x1e06/0x3790 [ 821.144759][T11768] inet_sendmsg+0x147/0x310 [ 821.150406][T11768] ? security_socket_sendmsg+0xa0/0xd0 02:43:26 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x300000200008990, &(0x7f0000000000)={'bond0\x00\x00z\a\x00\x00\x00z\x06\x00\x05', @ifru_names='ip6tnl0\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 821.155894][T11768] ? inet_send_prepare+0x250/0x250 [ 821.164315][T11768] kernel_sendmsg+0x109/0x140 [ 821.169001][T11768] sock_no_sendpage+0x100/0x140 [ 821.173898][T11768] inet_sendpage+0x18c/0x340 [ 821.178499][T11768] ? inet_sendmsg+0x310/0x310 [ 821.183190][T11768] sock_sendpage+0xd3/0x120 [ 821.187705][T11768] pipe_to_sendpage+0x1f9/0x2a0 [ 821.192557][T11768] ? sock_fasync+0x100/0x100 [ 821.197159][T11768] __splice_from_pipe+0x2f7/0x8a0 [ 821.202191][T11768] ? generic_splice_sendpage+0x180/0x180 [ 821.207634][T11826] bond0: (slave ip6tnl0): slave is up - this may be due to an out of date ifenslave [ 821.207832][T11768] generic_splice_sendpage+0x114/0x180 [ 821.207847][T11768] ? iter_file_splice_write+0xe20/0xe20 [ 821.228221][T11768] __se_sys_splice+0x71a/0x1ac0 [ 821.228240][T11768] ? check_preemption_disabled+0xb7/0x2a0 [ 821.228257][T11768] ? debug_smp_processor_id+0x1c/0x20 [ 821.244185][T11768] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 821.250282][T11768] __x64_sys_splice+0xe5/0x100 [ 821.250301][T11768] do_syscall_64+0xf7/0x1c0 [ 821.250315][T11768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 821.250326][T11768] RIP: 0033:0x459f49 [ 821.250337][T11768] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 821.250343][T11768] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 821.250353][T11768] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 821.250359][T11768] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 821.250363][T11768] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 821.250373][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 821.330046][T11768] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:26 executing program 5 (fault-call:7 fault-nth:60): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:26 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x10001, 0x8000) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/26) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x314402, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x10001) 02:43:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ftruncate(r2, 0x3f) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000180)={0x78, 0x0, 0x6, {0xee, 0xc0, 0x0, {0x2, 0x3a1e, 0x10001, 0x0, 0x6, 0x2, 0x5, 0x3, 0x7, 0x60000, 0xffffff01, 0xee01, r4, 0x80, 0x7ff}}}, 0x78) prctl$PR_GET_THP_DISABLE(0x2a) 02:43:26 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) prctl$PR_SVE_SET_VL(0x32, 0x3fd05) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x0, 0x3, 0x4, {}, 0x80000000, 0x7}) 02:43:26 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8794, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 821.728647][T11944] [EXFAT] trying to mount... [ 821.746880][T11944] [EXFAT] ffsMountVol failed [ 821.777302][T11944] [EXFAT] trying to mount... [ 821.793166][T11944] [EXFAT] ffsMountVol failed [ 821.823818][T11976] FAULT_INJECTION: forcing a failure. [ 821.823818][T11976] name failslab, interval 1, probability 0, space 0, times 0 [ 821.864024][T11976] CPU: 1 PID: 11976 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 821.871965][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 821.882028][T11976] Call Trace: [ 821.885328][T11976] dump_stack+0x1d8/0x2f8 [ 821.889662][T11976] should_fail+0x555/0x770 [ 821.889688][T11976] __should_failslab+0x11a/0x160 [ 821.899018][T11976] ? dst_alloc+0x173/0x580 [ 821.899029][T11976] should_failslab+0x9/0x20 [ 821.899041][T11976] kmem_cache_alloc+0x56/0x2e0 [ 821.899053][T11976] dst_alloc+0x173/0x580 [ 821.899072][T11976] ip_route_output_key_hash_rcu+0x1935/0x26b0 [ 821.923012][T11976] ip_route_output_key_hash+0x14e/0x260 [ 821.928749][T11976] ip_route_output_flow+0x29/0xc0 [ 821.933773][T11976] ? security_sk_classify_flow+0x8f/0xa0 [ 821.939415][T11976] raw_sendmsg+0x13a5/0x3790 [ 821.939457][T11976] inet_sendmsg+0x147/0x310 [ 821.948520][T11976] ? security_socket_sendmsg+0xa0/0xd0 [ 821.953977][T11976] ? inet_send_prepare+0x250/0x250 [ 821.959088][T11976] kernel_sendmsg+0x109/0x140 02:43:26 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x2) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="0b0337c58dd1c1092bfd2ed3946bb801b919924b1c591f5520abf1b5a35e4a6b4ec69643d7afccc1c3c482368429c0464e7f7c4e43717c58fcd394c1440759fb47a96b4c877996a15b1d7688f2222cb4c7f470398ef18f7050964070cad2462ffed2e2dcecb3eb2692f2ec924ac4b0dcf39bbebfc8402f87ec1110c2b0d70eebb9ea52a710dc799089b361a8004946ca8810443c3183be1284478bdaa7d4") ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x401) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 02:43:26 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) setxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x0, 0x5}, {0x3, 0xb5f}], r1}, 0x8, 0x629f74ce0e0b3b39) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x200, 0x0) getpeername$unix(r2, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) 02:43:26 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8795, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:26 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='M.\x1d\rt\x00\xcb\xb1\xf1\xbb\x9f[\x86o\xce}\x028\x1f\xb3\xfd\x01\xa5\x0f\xab2\xcb\xda3\x14\x93\x85\xa2I\xa5\xbb\xc4]\x14\xaa\x9c$\xe48f\xbd\xa1\xf9\xc3\x12\xa6F$_\xe4\x88\xf99\xcbdW\xa6\xaf\xfe\x04E\x19\x00\xcc\x91;7\x0e\x9bk=\xb6=F\x16\xcf\x11\xdc\x90\x1e\x84v\x96', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) fspick(r0, &(0x7f0000000080)='./file0\x00', 0x1) [ 821.963772][T11976] sock_no_sendpage+0x100/0x140 [ 821.968636][T11976] inet_sendpage+0x18c/0x340 [ 821.973246][T11976] ? inet_sendmsg+0x310/0x310 [ 821.977925][T11976] sock_sendpage+0xd3/0x120 [ 821.982433][T11976] pipe_to_sendpage+0x1f9/0x2a0 [ 821.987284][T11976] ? sock_fasync+0x100/0x100 [ 821.991886][T11976] __splice_from_pipe+0x2f7/0x8a0 [ 821.996954][T11976] ? generic_splice_sendpage+0x180/0x180 [ 822.002599][T11976] generic_splice_sendpage+0x114/0x180 [ 822.008060][T11976] ? iter_file_splice_write+0xe20/0xe20 02:43:26 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x24881, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)=@ccm_128={{0x303}, "230fe0fcd0685b78", "6ebdfc9559c4fe7efc8b411e3d9dbaba", "9dded641", "f89cdf2f5710709a"}, 0x28) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) [ 822.013605][T11976] __se_sys_splice+0x71a/0x1ac0 [ 822.018465][T11976] ? check_preemption_disabled+0xb7/0x2a0 [ 822.025347][T11976] ? debug_smp_processor_id+0x1c/0x20 [ 822.025359][T11976] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 822.025381][T11976] __x64_sys_splice+0xe5/0x100 [ 822.025396][T11976] do_syscall_64+0xf7/0x1c0 [ 822.025410][T11976] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.025419][T11976] RIP: 0033:0x459f49 02:43:27 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8796, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 822.025429][T11976] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.025434][T11976] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 822.025443][T11976] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 822.025448][T11976] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.025453][T11976] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 822.025459][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 822.025464][T11976] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:27 executing program 5 (fault-call:7 fault-nth:61): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:27 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bf03220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf36736faec5d0cb97e8c68da41a3eb9032a9fc9556bbb4ab6060000"], 0xa4) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/241) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0xffffff8d) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0xd000) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:27 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x1000, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000480)={0x9, 0x400, 0xfff, 0x0, r2}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000580)={0x1, 0x0, 0x1000, 0x10, &(0x7f00000004c0)="45ebb50d6d58783db7e6e65cb9db11aa", 0x62, 0x0, &(0x7f0000000500)="f418e406360fa58b0e6365e75765392eb48d251e3ffc76dcb31d4793456f61e53b2a40bcda8062236f21cda2e8bfb03e1113db77a2c8671a63f51d86343b748f7712c8f515749a9d6ef9b8acb2f3d35993036e9923f377852f696504250867ee0c3d"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="8fa448df0b05114efb95c89ac1dcfd9fe174ac894a3b9230b4cd87294dcc39da8daf721eab643bccabd2d6dbed07567adb0c77cf93140ce9f37f0f287ce69d0cf817cc3188b3c085771bd369e5b4d367f6f365b48c87666c1d001271ea3dd5138abb67cf6434cdfbd67541fae7f5ad8aff96e044fa36fba92f7e5f5c025e774cf388461d48277edbf3038363086283cd75915b21f7c1d2fa6f6914cc9c307d3be12d51d8a81838d43d3be11771ccc454c56d0ec86c905248e2aa6d7b49c82f9415e6537d0f74b9cab0e4f7c6674bb8cd5e759e6cc01240880f05352072d35d5f54ff9d8057174dfd", 0xe8, 0x9}, {&(0x7f0000000240)="6316ddec9add9a6c18fae4c4a63617376fb6e2f2c6327e9e23ff05f3e302456af91c97aff560f32f69ac8094422c025a2cda8cb7b77509a4a03d95f9b511db", 0x3f, 0x5}, {&(0x7f0000000280)="5d9649754224919e939f422edff8e606f01de4039a2ddc7c392ce3621c34f8b121186bdaf22536af2c4e87a45fb77d3f9f6719205dfa9adfc87a19dec797461b44a09718f70a33d533a614e719f90c5cc7a6", 0x52, 0x80000000}], 0x1000088, &(0x7f0000000380)={[{@nodiscard='nodiscard'}, {@adaptive_mode='mode=adaptive'}, {@extent_cache='extent_cache'}, {@prjjquota={'prjjquota', 0x3d, 'mime_type+keyring%'}}, {@nouser_xattr='nouser_xattr'}, {@noinline_data='noinline_data'}, {@discard='discard'}, {@grpquota={'grpquota'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsa#\x00'}}, {@smackfstransmute={'smackfstransmute'}}, {@subj_role={'subj_role'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/vcsa#\x00'}}, {@seclabel='seclabel'}]}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:27 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8797, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 822.612729][T12193] [EXFAT] trying to mount... [ 822.629287][T12193] [EXFAT] ffsMountVol failed [ 822.684388][T12246] FAULT_INJECTION: forcing a failure. [ 822.684388][T12246] name failslab, interval 1, probability 0, space 0, times 0 [ 822.697416][T12246] CPU: 0 PID: 12246 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 822.705399][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 822.715447][T12246] Call Trace: [ 822.715466][T12246] dump_stack+0x1d8/0x2f8 [ 822.715482][T12246] should_fail+0x555/0x770 [ 822.723096][T12246] __should_failslab+0x11a/0x160 [ 822.723111][T12246] should_failslab+0x9/0x20 [ 822.723124][T12246] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 822.723133][T12246] ? __kmalloc_node_track_caller+0x3c/0x60 [ 822.723147][T12246] __kmalloc_node_track_caller+0x3c/0x60 [ 822.723163][T12246] ? __pskb_copy_fclone+0xac/0x12b0 [ 822.759440][T12246] __alloc_skb+0xe8/0x500 [ 822.763796][T12246] __pskb_copy_fclone+0xac/0x12b0 [ 822.768923][T12246] ? lockdep_hardirqs_on+0x295/0x7d0 [ 822.774235][T12246] hsr_forward_skb+0xca9/0x2040 [ 822.779119][T12246] ? hsr_port_get_hsr+0xc6/0xf0 [ 822.783984][T12246] hsr_dev_xmit+0x77/0x90 [ 822.788333][T12246] dev_hard_start_xmit+0x1c1/0x3f0 [ 822.793468][T12246] __dev_queue_xmit+0x1e53/0x3010 [ 822.798532][T12246] dev_queue_xmit+0x17/0x20 [ 822.803047][T12246] neigh_connected_output+0x3df/0x410 [ 822.808561][T12246] ip_finish_output2+0x13be/0x18d0 [ 822.813722][T12246] ? ip_fraglist_prepare+0x300/0x590 [ 822.819035][T12246] ip_do_fragment+0x1528/0x1d10 [ 822.823909][T12246] ? ip_fragment+0x210/0x210 [ 822.828528][T12246] ? rcu_lock_release+0xd/0x30 [ 822.833307][T12246] ? ipv4_mtu+0x2bc/0x3c0 [ 822.837795][T12246] ip_fragment+0x11f/0x210 [ 822.842330][T12246] __ip_finish_output+0x3fc/0x4b0 [ 822.847362][T12246] ip_finish_output+0x52/0x1e0 [ 822.852126][T12246] ? ip_mc_output+0x4c6/0x620 [ 822.857045][T12246] ip_mc_output+0x4db/0x620 [ 822.861565][T12246] ip_send_skb+0x126/0x1e0 [ 822.865993][T12246] ip_push_pending_frames+0x66/0x80 [ 822.871214][T12246] raw_sendmsg+0x1e06/0x3790 [ 822.875839][T12246] inet_sendmsg+0x147/0x310 [ 822.880350][T12246] ? security_socket_sendmsg+0xa0/0xd0 [ 822.885831][T12246] ? inet_send_prepare+0x250/0x250 [ 822.890959][T12246] kernel_sendmsg+0x109/0x140 [ 822.895654][T12246] sock_no_sendpage+0x100/0x140 [ 822.900536][T12246] inet_sendpage+0x18c/0x340 [ 822.905226][T12246] ? inet_sendmsg+0x310/0x310 [ 822.909912][T12246] sock_sendpage+0xd3/0x120 [ 822.914427][T12246] pipe_to_sendpage+0x1f9/0x2a0 [ 822.919290][T12246] ? sock_fasync+0x100/0x100 [ 822.923895][T12246] __splice_from_pipe+0x2f7/0x8a0 [ 822.928936][T12246] ? generic_splice_sendpage+0x180/0x180 02:43:27 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="d52e79557d1ca5b46030c443b8077f333100"]) 02:43:27 executing program 2: ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000080)) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:27 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x4) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="1e637b9151a55d45ef4e41cf679b297951374438a64e4108672cc1d89a617ff2", 0x20}, {&(0x7f0000000100)="f2da6aa539753b19fa4e665bce1f15e2b9e71cd2f8e695a90b76b3f31f4a73e926816b05beb23379e4e2d4c9f99df3c11e88c755b885644ee354933d5bd9c02b0ff83a4c23115e8ea728ba7ec9607098cf61ed64273fffcadc44f58adfd2001b7788c313037b4fab7f83021bf7411d23226947ffe4bc0c433286dd36c2d2fb9290cafbccc35016ef9cf510be9c87b126c1391a78801342c42bd760ac21aaed2691fc9d11aa90ebf56efa155d5e02499df7e71fd4e3f2aca559e737cf3f7740c8604fe9c3f25467bdc3a603c3d98b633625f3520eec9cc54d3874e9b365df666c6f190951736415ac8f45dd015350a530", 0xf0}], 0x2, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x200f) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:27 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8798, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:27 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffffffff) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='\x00', 0x0, 0x0) [ 822.934690][T12246] generic_splice_sendpage+0x114/0x180 [ 822.940173][T12246] ? iter_file_splice_write+0xe20/0xe20 [ 822.945746][T12246] __se_sys_splice+0x71a/0x1ac0 [ 822.950624][T12246] ? check_preemption_disabled+0xb7/0x2a0 [ 822.956369][T12246] ? debug_smp_processor_id+0x1c/0x20 [ 822.961803][T12246] ? fpregs_assert_state_consistent+0xb7/0xe0 02:43:27 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) set_tid_address(&(0x7f0000000080)) [ 822.961831][T12246] __x64_sys_splice+0xe5/0x100 02:43:27 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdnm=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) [ 822.961848][T12246] do_syscall_64+0xf7/0x1c0 [ 822.961863][T12246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 822.961873][T12246] RIP: 0033:0x459f49 [ 822.961884][T12246] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 822.961889][T12246] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 822.961900][T12246] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 822.961905][T12246] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 822.961910][T12246] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 822.961915][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 822.961920][T12246] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 823.222993][T12428] 9pnet: Insufficient options for proto=fd 02:43:28 executing program 1: mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2e302000e3984fc1784f495e"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1000, 0x0) 02:43:28 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x8799, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:28 executing program 5 (fault-call:7 fault-nth:62): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:28 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:28 executing program 3: mkdir(&(0x7f0000001240)='./bus\x00', 0x80) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000140)=""/122) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1, &(0x7f0000005400)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="72d0f15959a7443a61dcd1fe25bb12c6d69c84bc70c56aa095ea2d2d6d913f9b39f4fb04233c691a56c96ace8c3a12b64760ef7086c8fff5e8654a2b8ffe3b45120bd9a7978201401c87f94c69bfcdd3a7eaf9a927ad450972d0c37d865c7d76097c7a102bfae3f72271b1e1d6dfc159bd1206b240477f5066abe9c71167d50d9b03e2d4", @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESOCT=r3, @ANYRESOCT=r9, @ANYRESDEC=r8, @ANYRES64=r1, @ANYRES64, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64, @ANYRESOCT], @ANYRES64, @ANYRES16=r5], @ANYRESOCT=r6, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES32]]]) r10 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000200)=0x40d) r11 = eventfd2(0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r11, 0x400c6615, &(0x7f00000001c0)) r12 = open(&(0x7f0000000040)='./bus\x00', 0x200000, 0x0) poll(&(0x7f0000000080)=[{r0, 0x2001}, {r10, 0x42}, {r12, 0x8010}], 0x3, 0x5) 02:43:28 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000580)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000005c0)=0x18) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x30}, &(0x7f00000001c0)=0x18) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={r8, 0x0, 0x30}, &(0x7f00000001c0)=0x18) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="ea144ce66a082a17e8cbeaf19d5fc079716704585c0070207d", 0x19}, {&(0x7f00000002c0)="37396c81c36d39fe540d5357899722e2517eb8a51e4430736b2b1196efa05a3794fb6506e3474fa815309b0ff6597a6ddb6580a9ff6f50e7d097bc809725364bf846cf68ac6c24899d849e9d67afaf3aa5eed18f8f94d1a9bf94b8f11df254d0528cf96471baaef31b7850982225ffee74eb2c710cbae3a788f1c82b8ed0a96b9ef86693bea264e2e6d447dcb75061cf56a693e0581eda97288213b192a387490a411f88c6dc5a84c79849", 0xab}, {&(0x7f0000000380)="c37e5bb398e335f034dfd61a0b9335561ebb66c32335ed513d4224a208792021de43de962c831766e1d2c373e569bc76d46d547597591f3822f4d708412da732eb6938ac9bcdb436d393e9167ffd6f9c1eedf145352651b9fb8fca89e6aec7ffe7624ed0c03f93276b778916adb7a41d9086011ea520e9c924e2bb7c1e89ddd9a393f84d98", 0x85}, {&(0x7f0000000440)="e793e0ca0456a595b863b47e681a4acac99f39cb41f46e42e9a6624f94e95e34d867dd90ad080297376c1f27c88fdd66da655db95c29ead05ad2cb85605d066b27a55f8897fc5bbbdb65b36ff79f1db1da9f6304bca9eb8cae4f8ab35bb1aa9ec7c6f83239ff81187731969ff6a5c02b7aa6fcf978a188e2e7cce165c22b8fbd650ee83e67a96aa08f8a4bf60103b1ff950dc7e517dd48a2f11f9341fea921ed5e00aa5bf5ff", 0xa6}, {&(0x7f00000012c0)="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", 0x1000}], 0x5, &(0x7f0000000600)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x8, 0x4, 0x0, r2}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xfc74}}, @init={0x18, 0x84, 0x0, {0x7f, 0x6, 0x7, 0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0xd56a, 0x200, 0x4093, 0x6, 0x3, 0x4, 0x8001, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}, @sndrcv={0x30, 0x84, 0x1, {0x38eb, 0x3, 0x2, 0x1f, 0x6, 0x7, 0x10001, 0x5, r8}}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @authinfo={0x18, 0x84, 0x6, {0xa5}}], 0x110, 0x1a}, 0x400e010) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0)="2f588e053859ce2f539204c53f40707fc235c470faaf7d24767cc126f635a8243ecda3825632d646f436fc71e73d8397e8d55fa4320339ced96c740cb17149748d02d0d81c2ef8cfb29c6fb0faffbcfdb4e1a972ff354e5b24c236c581cfa9dc346080fae4538c98d5ebbd3c8919f9366d0753426e5587b7bd4febd842fc9e7dd3fa0b44e4608456d571caaac56719d496016dd67b7947c37d152655c4cd60e1116fced842a4822fda737d7a1f6a19110f7d3e80fe7c3b4371fcc36a1e647eb01996fd525146707b138d77fb", 0xcc, r10}, 0x68) r11 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:28 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x80802, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x4012, r0, 0x0) [ 823.513122][T12438] vhci_hcd: invalid port number 115 [ 823.523968][T12438] vhci_hcd: default hub control req: 2e2f v7562 i0073 l0 [ 823.561696][T12451] FAULT_INJECTION: forcing a failure. [ 823.561696][T12451] name failslab, interval 1, probability 0, space 0, times 0 [ 823.574433][T12451] CPU: 0 PID: 12451 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 823.582338][T12451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 823.592526][T12451] Call Trace: [ 823.595834][T12451] dump_stack+0x1d8/0x2f8 [ 823.600184][T12451] should_fail+0x555/0x770 [ 823.604652][T12451] __should_failslab+0x11a/0x160 02:43:28 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x40000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r4, 0x20}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet_dccp_int(r6, 0x21, 0x0, &(0x7f0000000140)=0x800, 0x4) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:28 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@version_9p2000='version=9p2000'}, {@fscache='fscache'}, {@loose='loose'}]}}) [ 823.609610][T12451] should_failslab+0x9/0x20 [ 823.614123][T12451] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 823.619879][T12451] ? __kmalloc_node_track_caller+0x3c/0x60 [ 823.625694][T12451] __kmalloc_node_track_caller+0x3c/0x60 [ 823.631333][T12451] ? __pskb_copy_fclone+0xac/0x12b0 [ 823.636547][T12451] __alloc_skb+0xe8/0x500 [ 823.640887][T12451] __pskb_copy_fclone+0xac/0x12b0 [ 823.645921][T12451] ? hsr_addr_subst_dest+0x211/0x4b0 [ 823.651222][T12451] hsr_forward_skb+0xca9/0x2040 [ 823.656099][T12451] hsr_dev_xmit+0x77/0x90 [ 823.660432][T12451] dev_hard_start_xmit+0x1c1/0x3f0 [ 823.665546][T12451] __dev_queue_xmit+0x1e53/0x3010 [ 823.670593][T12451] dev_queue_xmit+0x17/0x20 [ 823.675086][T12451] neigh_connected_output+0x3df/0x410 [ 823.680468][T12451] ip_finish_output2+0x13be/0x18d0 [ 823.685586][T12451] ? ip_fraglist_prepare+0x300/0x590 [ 823.690887][T12451] ip_do_fragment+0x1528/0x1d10 [ 823.695741][T12451] ? ip_fragment+0x210/0x210 [ 823.700350][T12451] ? rcu_lock_release+0xd/0x30 [ 823.705119][T12451] ? ipv4_mtu+0x2bc/0x3c0 [ 823.709457][T12451] ip_fragment+0x11f/0x210 [ 823.713887][T12451] __ip_finish_output+0x3fc/0x4b0 [ 823.718915][T12451] ip_finish_output+0x52/0x1e0 [ 823.723676][T12451] ? ip_mc_output+0x4c6/0x620 [ 823.728354][T12451] ip_mc_output+0x4db/0x620 [ 823.732864][T12451] ip_send_skb+0x126/0x1e0 [ 823.737287][T12451] ip_push_pending_frames+0x66/0x80 [ 823.742497][T12451] raw_sendmsg+0x1e06/0x3790 [ 823.747131][T12451] inet_sendmsg+0x147/0x310 [ 823.751641][T12451] ? security_socket_sendmsg+0xa0/0xd0 [ 823.757110][T12451] ? inet_send_prepare+0x250/0x250 [ 823.762233][T12451] kernel_sendmsg+0x109/0x140 [ 823.766917][T12451] sock_no_sendpage+0x100/0x140 [ 823.771784][T12451] inet_sendpage+0x18c/0x340 [ 823.776380][T12451] ? inet_sendmsg+0x310/0x310 [ 823.781064][T12451] sock_sendpage+0xd3/0x120 [ 823.785578][T12451] pipe_to_sendpage+0x1f9/0x2a0 [ 823.790429][T12451] ? sock_fasync+0x100/0x100 [ 823.795041][T12451] __splice_from_pipe+0x2f7/0x8a0 [ 823.800094][T12451] ? generic_splice_sendpage+0x180/0x180 [ 823.805743][T12451] generic_splice_sendpage+0x114/0x180 02:43:28 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddr={0x2c, 0x14, 0x205, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0xa}}]}, 0x2c}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x2, 0x5, 0x7, 0x7f, 0x0, 0x10000000, 0x200, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0xb, @perf_config_ext={0x20, 0x1b47}, 0x20a0, 0x3800, 0x7fff, 0x1, 0x8000, 0x3a07, 0x3}, r4, 0x4, r5, 0x8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 823.811214][T12451] ? iter_file_splice_write+0xe20/0xe20 [ 823.816772][T12451] __se_sys_splice+0x71a/0x1ac0 [ 823.821669][T12451] ? check_preemption_disabled+0xb7/0x2a0 [ 823.827424][T12451] ? debug_smp_processor_id+0x1c/0x20 [ 823.832808][T12451] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 823.838923][T12451] __x64_sys_splice+0xe5/0x100 [ 823.843696][T12451] do_syscall_64+0xf7/0x1c0 [ 823.848204][T12451] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 823.854201][T12451] RIP: 0033:0x459f49 [ 823.858113][T12451] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 823.877727][T12451] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 823.886147][T12451] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 823.894128][T12451] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 823.902106][T12451] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 823.910085][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 823.918068][T12451] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:28 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879a, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:28 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x1) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x1, 0x0) [ 824.041369][T12572] [EXFAT] trying to mount... [ 824.052899][T12572] [EXFAT] ffsMountVol failed 02:43:29 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2f6465756c6d623000000040ba0000000000000094c6da0f072ead4bf7478c4dee2fa2a840be70679b017a6d21a2013c60d1f8d10dd06f86f8f22f4787949ea4695b64b849b41133cc52a2898d0ab1819fb6319ab28013c775055b5e1a0c3cd5d29eeba09be1f52354d6beba56fb791c0651f4a2de09ad09"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x78000024, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/20) 02:43:29 executing program 5 (fault-call:7 fault-nth:63): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:29 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879b, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) recvmmsg(r0, &(0x7f0000005d80)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000180)=""/102, 0x66}, {&(0x7f0000000200)=""/174, 0xae}], 0x3, &(0x7f0000000300)=""/73, 0x49}, 0x9}, {{&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/229, 0xe5}, {&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000000740)=""/201, 0xc9}, {&(0x7f0000000840)=""/151, 0x97}, {&(0x7f0000000900)=""/240, 0xf0}, {&(0x7f0000000a00)=""/26, 0x1a}], 0x9, &(0x7f0000000b00)=""/85, 0x55}, 0xfffffff8}, {{&(0x7f0000000b80)=@nfc, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000c00)=""/57, 0x39}, {&(0x7f0000000c40)=""/238, 0xee}, {&(0x7f0000000d40)=""/114, 0x72}, {&(0x7f0000000dc0)=""/39, 0x27}], 0x4}, 0x7}, {{&(0x7f0000000e40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000ec0)=""/35, 0x23}, {&(0x7f0000000f00)=""/104, 0x68}], 0x2}, 0x9}, {{&(0x7f0000000fc0)=@rc, 0x80, &(0x7f0000001140)=[{&(0x7f0000001040)=""/73, 0x49}, {&(0x7f00000010c0)=""/110, 0x6e}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x3}, 0x20}, {{&(0x7f0000001180)=@nfc, 0x80, &(0x7f0000001240)=[{&(0x7f00000022c0)=""/245, 0xf5}, {&(0x7f00000023c0)=""/144, 0x90}, {&(0x7f0000001200)=""/16, 0x10}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x4, &(0x7f0000003480)=""/222, 0xde}, 0xffff58c7}, {{&(0x7f0000003580)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/56, 0x38}, {&(0x7f0000004640)=""/188, 0xbc}, {&(0x7f0000004700)=""/203, 0xcb}], 0x4, &(0x7f0000004840)=""/22, 0x16}, 0xfffffff8}, {{&(0x7f0000004880)=@xdp, 0x80, &(0x7f0000005c80)=[{&(0x7f0000004900)=""/239, 0xef}, {&(0x7f0000004a00)=""/250, 0xfa}, {&(0x7f0000004b00)=""/97, 0x61}, {&(0x7f0000004b80)}, {&(0x7f0000004bc0)=""/41, 0x29}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/6, 0x6}, {&(0x7f0000005c40)=""/11, 0xb}], 0x8, &(0x7f0000005d00)=""/87, 0x57}, 0xfe}], 0x8, 0x20, &(0x7f0000005f80)={0x77359400}) 02:43:29 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xeee27bde0b5041fa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="8100948e3bd318a27860bd817c7ff8b52900000000000000e509000000040095c9"], 0x18}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x118, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffc4}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbd8f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x600}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fbf}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x50000}, 0x40000044) r3 = getpgrp(0x0) setpriority(0x0, r3, 0x100) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r3, r0, 0x0, 0xf, &(0x7f0000000300)='/dev/sequencer\x00', 0xffffffffffffffff}, 0x30) sched_setscheduler(r4, 0x6, &(0x7f0000000380)=0x7a1) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000ac0)='/dev/swradio#\x00', 0x1, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r10 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000000)={0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r12, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r13 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r13, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r14 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r14, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r15 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r16 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r16, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r17 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r17, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r18 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r18, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r19 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r19, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r20 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r20, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r7, &(0x7f00000011c0)=ANY=[@ANYRESOCT=r8, @ANYPTR64=&(0x7f0000000c00)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f0000000b00)=ANY=[@ANYPTR, @ANYRES32, @ANYRESDEC=r9, @ANYRES64=r10], @ANYRES64=r11, @ANYRESDEC=r12, @ANYRESHEX=r13, @ANYPTR=&(0x7f0000000b40)=ANY=[@ANYPTR64, @ANYRESDEC=r3, @ANYPTR64], @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYRES32=r14, @ANYRESHEX=0x0, @ANYRES32=r15, @ANYRESOCT=r5, @ANYPTR64, @ANYRESHEX=0x0, @ANYPTR64, @ANYRES16=r0, @ANYPTR]], @ANYRES16, @ANYRESDEC=r8, @ANYPTR64=&(0x7f0000000cc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8992873dde60dd6d53871b687e8ae9c7e7c67511293ea8cb7abd6cf517291fe18cff1b2ac97f81ff0bc1184199c5f1f984d4a1faa1cdff446d9eb48ba4081fd33f8f0b59e6930cd676bb57d858a96c7ed079bc855ed11b53f1ce361fdd661bb2a2b892cee937f35f4f89166a88605bbde3c7155c99a7433ae95447f6e9eaea", @ANYPTR64, @ANYBLOB="cd7142eada1d52c78fca21151a965fe3423bb13fe6ba2d39307b7d0462a207aa3f764e08f1269aa950201be79ae03e34182142dcecec7b9093b2fb7b57d321d5316157108f29fc5e525c4f0241109865b46c33f8b97605d0bc09142d1d40d8bd81c1ca655845cdb98d26dec340e6c0d2abf79c491d02a0af45ce4ed11d0ac8d003e7e5c2ef9f4f4712cffb2dbbd3a31321ae36f00d00abb30fb45c3fc513f7e9d9d5858fa932f516971181015032e4ca948d1c9c2c28b1aa2157eac32a6bcc8b7abf33796b519c9142b1d885ea529926382900e0a3904b2279adb5213d9ad430e9", @ANYBLOB="bd91c8f9f2c395399c10a5910203844d92f48620536f47081d7fb57a296c800e9a6b6d7df11984aa4d1464961e99691a91f4cb4a7c02f11fea9bb761bfee34de2131acc33311938334b36d7b167bbcc29b73a9971c0b36827c05024ce330d437c5ac42d8129f957c0c62c79d735aca965aa62386ed3e8690c86721ed7135e1502f5a038d43124760d341236f8c2746a428ec99ee323affdb130ba3ed08bf83d2a9fb3bdaaa17847676a8ac090447a7011b577f1479bb5d43d03286bc56ed36750e027d35a9694e38820fbdbb5df3ff818cb4a4aa442471a5cc19", @ANYRES16=r1, @ANYPTR64=&(0x7f0000000c80)=ANY=[@ANYRES32, @ANYRESOCT=r8, @ANYRES32, @ANYPTR64], @ANYRES32=r16], @ANYRES64=r8, @ANYRES32=r2, @ANYPTR=&(0x7f00000012c0)=ANY=[@ANYPTR=&(0x7f0000000f40)=ANY=[@ANYBLOB="66f7e1cdb32449240e31e546b8d045d4a8fcaa17292b2a71d92800623320560f4f2e50c079ace8b593f761eec98d80cd41cbc71356a18e5c7a898c8f4c4880e67f14c1b1d05c74d44f1106199bc34d0be8db85ab90c7889775d8224d81bdf65c3f793fdd1e4b03f9d2daa92e1a062a5d530a047e29c71d", @ANYRESHEX, @ANYRES16=r17, @ANYRES64=r18, @ANYRES64], @ANYPTR64, @ANYPTR=&(0x7f0000001000)=ANY=[@ANYBLOB="b04f551cc8ae475674df146101ed09d5b705b694eb9e92a4f4c8a2736aca45f424758097cdf1c2fe7698908fb1ac3a9f7d2970a485028aa70dd93e915d656facb85abe1fe26938e9bac416f4a854d16d52146d1ebffec341724266bd7a91bf179b0c7a8b82b2afbaef2c29aca0da8ff7061a31be46e5f4523fce7cbd8af594307bab87f078c2533845de6f3b7cf7930ed71543ec8b1faefef994c9dcc2a56b76c949fb67186b570d4898938a3c137f07fb5f91bf77550943ddcb1c933294ded8a3b904f527510836e90f00a9f2311cca691cf64f3f01acbc3328cea1ba1d1af94858196f744593e0c2e11e39f48d996dd65172c5", @ANYBLOB="7f84035a906f674e32e7efdf3f98fe01a5b22d14189a96fbbc2c3780fdbd5dadc21a605afe541977fd82c80473d4fcb2c4bf27ed287388343388f9a66765b1524258905d9552c9eac0b74dc0d4497c35ea555b6ce4512e992d0e0471bc27fad85a04541621e6901977491f27abac4d7631279d0cda1a574e0c1df39fb43f450c817af4eb82535fd6b2a2846233b95a5615ae465a7c6c3d033bf64b11943ad64e2096803ab6d6c29c1f"], @ANYBLOB="7c5b0b594bb1c8e776666f7a42e79e381c085e8d63e30bbd3a62e6698a2756eaf4d01497c04e4fd7b8a53b64d10b3e911248bcbdf75bb9ff28c4dfba3a9e84727f6dd30661b7013de3dde42b9c10cc408e536dd541cfc5264ab5a84e49b5fcd0d15e690876af605095beb018fc1fd761b92fc32322bd49251aff21b89f60c18715c87c6b7cb1791a2571aed3ef8e193490a8b63a9dc7d4162d35d9b847f3c57e7b63c6ab8a49dd8a1f18e4", @ANYRES64=r19, @ANYRESOCT=r20], @ANYRES32=r14], 0x55) getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f00000003c0), &(0x7f0000000480)=0x4) r21 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r21, 0xc0044306, &(0x7f0000000000)=0x670) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f00000005c0)={{0x9, 0x5, 0x9c9, 0x21}, 0x0, [0x1f, 0x9, 0x9ef, 0x1, 0x2fa48234, 0xac6, 0x8000, 0x8, 0x1, 0x0, 0x1ff, 0x43b, 0x7f, 0x5, 0x7a, 0x7, 0x2d, 0x100000001, 0x1, 0x3f, 0x1, 0x6, 0x7f, 0x1ff, 0x0, 0x0, 0x2, 0x7f, 0x9, 0x5, 0x4, 0x40, 0xc72, 0xffffffff, 0x2, 0x6, 0x3, 0xff, 0xffffffff, 0xfffffffffffffffd, 0x8, 0x2, 0x5, 0xffffffffffffffc1, 0xdf3, 0x80, 0x3, 0x1, 0x1, 0x6, 0x800, 0x2a26f6d6, 0xffff, 0x9, 0x72e, 0x6, 0x1, 0x0, 0x9, 0x2, 0xa87, 0x9, 0x88, 0x4, 0x2, 0x533, 0x7fffffff, 0x2, 0x27ab3737, 0x0, 0x5, 0x8, 0x81, 0x0, 0x6, 0x1, 0x0, 0x7fff, 0x0, 0x3, 0xfffffffffffff2bc, 0x8, 0x20, 0x7, 0xfffffffffffffff9, 0x0, 0x1, 0x1, 0x0, 0x1000, 0xacd5, 0x5, 0x7, 0x1, 0x3, 0x9, 0x7, 0x8, 0x4, 0x3, 0x1ebd, 0x10001, 0x76b8, 0x27, 0x7fff, 0x351e, 0xfffffffffffffabe, 0x4, 0x1, 0x3, 0x1, 0x12, 0x3, 0x7fff, 0x5, 0x7, 0x200, 0x8, 0x3, 0xf, 0x80, 0xdf12, 0x1, 0x4, 0xfffffffffffffb60, 0x11ccb144, 0x10001, 0x80], {0x0, 0x989680}}) ioctl$VIDIOC_ENUM_FRAMESIZES(r21, 0xc02c564a, 0x0) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r22, 0x0, 0x111) tkill(r22, 0xd) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r23 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r23, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba22588c0823a5ff6f3e0f47be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725000100001c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) socket$inet6(0xa, 0xa, 0x4) ioctl$EVIOCSKEYCODE_V2(r23, 0x40284504, &(0x7f00000002c0)={0x9, 0xb, 0x7, 0x8, "49b9a02a09c8f5d176f366dcacfd313f73d7a03bfdfe422558d084988b359d23"}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x200, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f00000000c0)) [ 824.408352][T12579] vhci_hcd: default hub control req: 000f v0001 i0000 l0 [ 824.449190][T12689] FAULT_INJECTION: forcing a failure. [ 824.449190][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 824.474184][T12689] CPU: 1 PID: 12689 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 824.482244][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 824.492321][T12689] Call Trace: [ 824.495638][T12689] dump_stack+0x1d8/0x2f8 [ 824.499977][T12689] should_fail+0x555/0x770 [ 824.499998][T12689] __should_failslab+0x11a/0x160 [ 824.500011][T12689] ? dst_alloc+0x173/0x580 [ 824.500023][T12689] should_failslab+0x9/0x20 [ 824.500035][T12689] kmem_cache_alloc+0x56/0x2e0 [ 824.500048][T12689] dst_alloc+0x173/0x580 [ 824.500068][T12689] ip_route_output_key_hash_rcu+0x1935/0x26b0 [ 824.500088][T12689] ip_route_output_key_hash+0x14e/0x260 [ 824.509480][T12689] ip_route_output_flow+0x29/0xc0 [ 824.509493][T12689] ? security_sk_classify_flow+0x8f/0xa0 02:43:29 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879c, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 824.509510][T12689] raw_sendmsg+0x13a5/0x3790 [ 824.509550][T12689] inet_sendmsg+0x147/0x310 [ 824.509559][T12689] ? security_socket_sendmsg+0xa0/0xd0 [ 824.509568][T12689] ? inet_send_prepare+0x250/0x250 [ 824.509581][T12689] kernel_sendmsg+0x109/0x140 [ 824.509594][T12689] sock_no_sendpage+0x100/0x140 [ 824.509615][T12689] inet_sendpage+0x18c/0x340 [ 824.509630][T12689] ? inet_sendmsg+0x310/0x310 [ 824.588567][T12689] sock_sendpage+0xd3/0x120 [ 824.593090][T12689] pipe_to_sendpage+0x1f9/0x2a0 [ 824.597946][T12689] ? sock_fasync+0x100/0x100 [ 824.602544][T12689] __splice_from_pipe+0x2f7/0x8a0 [ 824.607583][T12689] ? generic_splice_sendpage+0x180/0x180 [ 824.613246][T12689] generic_splice_sendpage+0x114/0x180 [ 824.618499][T12579] vhci_hcd: default hub control req: 000f v0001 i0000 l0 [ 824.618710][T12689] ? iter_file_splice_write+0xe20/0xe20 [ 824.631286][T12689] __se_sys_splice+0x71a/0x1ac0 [ 824.636152][T12689] ? check_preemption_disabled+0xb7/0x2a0 [ 824.641884][T12689] ? debug_smp_processor_id+0x1c/0x20 [ 824.647272][T12689] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 824.653366][T12689] __x64_sys_splice+0xe5/0x100 [ 824.658134][T12689] do_syscall_64+0xf7/0x1c0 [ 824.662633][T12689] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 824.668529][T12689] RIP: 0033:0x459f49 [ 824.672428][T12689] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 824.692151][T12689] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 02:43:29 executing program 1: mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 824.700563][T12689] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 824.708533][T12689] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 824.716508][T12689] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 824.724478][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 824.732438][T12689] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="1f0000000000000000000040050001000000e7fc4b0900000000000000b7871001000000000000003560b700ef"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="19040000020000008304000000000000000000000c95111200000000"]) ioctl$KVM_GET_PIT(0xffffffffffffffff, 0xc048ae65, &(0x7f0000000140)) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r3}}) 02:43:29 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) creat(&(0x7f00000000c0)='./file0\x00', 0x108) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:29 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879d, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 824.942925][T12717] 9pnet: Insufficient options for proto=fd [ 824.975970][T12720] 9pnet: Insufficient options for proto=fd 02:43:30 executing program 5 (fault-call:7 fault-nth:64): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:30 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) mount(&(0x7f00000007c0)=ANY=[@ANYBLOB="6b098f89e024bd2f6465762f1f6063da9a16715d43caa4ffffff7f00000000ab73e973f8dd72207c7d5ad219ee86f71d217da2a17688c6980400830f36fa119d7fe3f51eeeccd84b2f9a4a36deeff4f610bdd35aed1312b5e86108fcab690a7f9416968eac994dbdf4f38a"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@iocharset={'iocharset', 0x3d, 'macroman'}}], [{@subj_type={'subj_type', 0x3d, 'm\b5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@dont_appraise='dont_appraise'}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) getresuid(&(0x7f00000005c0), &(0x7f0000000600)=0x0, &(0x7f0000000640)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000180)=0x40, 0x4) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x34f4, 0x7, &(0x7f0000000500)=[{&(0x7f0000000080)="1fde104aa19ae8009e1661bf37ff77afdcdd38485dec44cd5dafebde57cd350de0b552239fdfc3cb6148a4ca794f12094f6c6d5112ee2e4c74b8283ff8895054f8cf13e197", 0x45, 0xc38}, {&(0x7f0000000100)="74bd567cd1f597ed8c071ea2405ee2d19257162174a9cd7c32198df70baba5397f3655c8b08e6f975ca3282d04d1400a08ff28a29cd9c22dff6dc0d68dbda155d90f6c069e21", 0x46, 0x7}, {&(0x7f0000000240)="6912a3485c9d7a8737f33b9c5d7f0e9809d3861362699f07057a92370edd5f1bb1d0a7cc38f5b2d3bf1be37dd14bbaf089a722ddd28cb6ad6fe2f147b8313d40b9302c0aea346239d9cc31ba27b32581164947619ff024b0b7d172630dd915efe114189e172b5544f3484ba5cca619e9f183c6c6a58c22e74ae3df2e12", 0x7d, 0x6}, {&(0x7f00000002c0)="5d07eed6274d9c8fb1855189f519b85b51df28235f1ca48bf4f885bee1122f4827464694cfcd650b7cf0", 0x2a, 0x4}, {&(0x7f0000000300)="022dad985dd932274169368c8dd45542daa8c2bf0ec010b2c0ef0ba1d16980bb36e2bcb0e39a058065197d891d6d5787c67b173ffd362b237d3835337f8b024f8b7590cb7c6a6ebdde27718e380f767c11a967701a", 0xffffffffffffff5b, 0x6b}, {&(0x7f0000000380)="eacff13c1ff09257f4e600089ba3ba5526ca940451881942073d6a3b7927eda579c348964db4b53ff7548f0510eb03c4482fc72f94b71ceb2de86e56f3f94d61c1", 0x41, 0x9}, {&(0x7f0000000400)="658679b9a83796bb8d1f8e79cc38bd854e83789a5b1196d49a2c001047bfb571aae82a992a3ea68fc39766de85ebaf39825a7a04aa8fa191a3c6286c283924d5b015643adb7a89ae85f352c1d83da401061512d676dca59744b2a2155d8df7891f6318403e60a5add0a0654dce47815e78488801a036043cb0337b2305ae04db1ec09d9f47d8d7df49350d59829b73affb4d252f92cd9b27bcc3f4188d056d4aaae34bbd31bf83d384d1636c0c08a2fd4659ea45f281d5adcccdf9e39efe5ea67f85bb975fe340d29901f166e5ec6dc47182dd0cb340dc398c7b934492", 0xdd, 0x3}], 0x1, &(0x7f0000000680)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@dmask={'dmask', 0x3d, 0x8001}}, {@errors_continue='errors=continue'}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@gid={'gid', 0x3d, r1}}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@dont_measure='dont_measure'}, {@euid_lt={'euid<', r4}}, {@subj_type={'subj_type', 0x3d, '/dev/nullb0\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@subj_user={'subj_user', 0x3d, 'exfat\x00'}}]}) 02:43:30 executing program 2: keyctl$join(0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r4, 0x0) r5 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000ff5ffc)={0x0, 0x3}, 0x4) sendto$inet(r0, &(0x7f0000865000), 0xffe4, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0x10) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x2380, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000180)={r9, 0x0, 0x30}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={r9, 0xffffffff}, 0x8) read(r1, &(0x7f0000000000)=""/129, 0x81) read(r1, &(0x7f00000001c0)=""/145, 0x91) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f0000000100)=0x1, 0x4) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYPTR]) 02:43:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x55ce858f35a098eb, &(0x7f00000001c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0x192b}}, {@sq={'sq', 0x3d, 0x4}}], [{@dont_appraise='dont_appraise'}, {@subj_role={'subj_role', 0x3d, 'system\\-\x8a*%}&'}}]}}) r3 = socket$netlink(0x10, 0x3, 0x16) sendfile(r3, r0, &(0x7f00000000c0), 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:30 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x101000) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000140)={0x5, 0xc, 0x25, "9014b97e5f8e62ba767e1d77f27a137c3f0589337db93657ff3e63e4bca87a94d5a83ade742e3508dba9d686702fd01122950da79322cede325c38f7", 0x33, "45f6c5d08600106f68143d48d3befd31c27e5b896c019adbadbe27389e16e8374b24c417d5905c17f26e51b081746a6a8da9b671220e865e3746f7e6", 0x10}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) 02:43:30 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879e, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:30 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) userfaultfd(0x100800) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="5c8438fc94", 0x5}, {&(0x7f0000000340)}], 0x2) [ 825.302802][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 825.332723][T12770] FAULT_INJECTION: forcing a failure. [ 825.332723][T12770] name failslab, interval 1, probability 0, space 0, times 0 02:43:30 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000040)={0x0, {0xffff}}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB]) mount(&(0x7f0000000080)=@sr0='/dev/sr0\x00', &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='fuse\x00', 0xe1eb08f5cc70f653, 0x0) [ 825.359066][T12770] CPU: 1 PID: 12770 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 825.367021][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 825.377098][T12770] Call Trace: [ 825.380408][T12770] dump_stack+0x1d8/0x2f8 [ 825.384757][T12770] should_fail+0x555/0x770 [ 825.389194][T12770] __should_failslab+0x11a/0x160 [ 825.394144][T12770] should_failslab+0x9/0x20 [ 825.398658][T12770] kmem_cache_alloc_node+0x65/0x280 [ 825.403867][T12770] ? __alloc_skb+0x9f/0x500 [ 825.408382][T12770] __alloc_skb+0x9f/0x500 [ 825.412720][T12770] __ip_append_data+0x2077/0x31a0 [ 825.417755][T12770] ? do_raw_getsockopt+0x1c0/0x1c0 [ 825.423845][T12770] ? lock_sock_nested+0xa8/0x120 [ 825.428921][T12770] ip_append_data+0x11c/0x190 [ 825.433650][T12770] ? do_raw_getsockopt+0x1c0/0x1c0 [ 825.438787][T12770] raw_sendmsg+0x1d9e/0x3790 [ 825.443448][T12770] inet_sendmsg+0x147/0x310 [ 825.447946][T12770] ? security_socket_sendmsg+0xa0/0xd0 [ 825.453414][T12770] ? inet_send_prepare+0x250/0x250 02:43:30 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) [ 825.458536][T12770] kernel_sendmsg+0x109/0x140 [ 825.463226][T12770] sock_no_sendpage+0x100/0x140 [ 825.468096][T12770] inet_sendpage+0x18c/0x340 [ 825.472698][T12770] ? inet_sendmsg+0x310/0x310 [ 825.477375][T12770] sock_sendpage+0xd3/0x120 [ 825.481887][T12770] pipe_to_sendpage+0x1f9/0x2a0 [ 825.486746][T12770] ? sock_fasync+0x100/0x100 [ 825.491354][T12770] __splice_from_pipe+0x2f7/0x8a0 [ 825.496388][T12770] ? generic_splice_sendpage+0x180/0x180 [ 825.502044][T12770] generic_splice_sendpage+0x114/0x180 [ 825.507662][T12770] ? iter_file_splice_write+0xe20/0xe20 [ 825.513210][T12770] __se_sys_splice+0x71a/0x1ac0 [ 825.513227][T12770] ? check_preemption_disabled+0xb7/0x2a0 [ 825.513239][T12770] ? debug_smp_processor_id+0x1c/0x20 [ 825.513249][T12770] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 825.513267][T12770] __x64_sys_splice+0xe5/0x100 [ 825.513282][T12770] do_syscall_64+0xf7/0x1c0 [ 825.513296][T12770] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 825.513307][T12770] RIP: 0033:0x459f49 [ 825.513320][T12770] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 825.513324][T12770] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 825.513334][T12770] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 825.513340][T12770] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 825.513350][T12770] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:30 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x879f, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 825.523891][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 825.523898][T12770] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:30 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000080)=0x1) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:30 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018ccb09c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706e175ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) sendmsg$rds(r2, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/181, 0xb5}], 0x3, &(0x7f0000000b00)=[@rdma_args={0x48, 0x114, 0x1, {{0x40, 0xffffffc0}, {&(0x7f0000000400)=""/104, 0x68}, &(0x7f0000000a40)=[{&(0x7f0000000480)=""/24, 0x18}, {&(0x7f00000004c0)=""/219, 0xdb}, {&(0x7f00000005c0)=""/218, 0xda}, {&(0x7f00000006c0)=""/139, 0x8b}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/18, 0x12}, {&(0x7f0000000880)=""/149, 0x95}, {&(0x7f0000000940)=""/101, 0x65}, {&(0x7f00000009c0)=""/73, 0x49}], 0x9, 0x76, 0x8}}], 0x48, 0x40}, 0x4a13c9ee61113d9f) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:31 executing program 5 (fault-call:7 fault-nth:65): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:31 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x8) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) write$P9_RRENAME(r0, &(0x7f0000000340)={0x7, 0x15, 0x1}, 0x7) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200202, 0x0) acct(&(0x7f0000000100)='./file0\x00') ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000080)=0x1de) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2f64000000000000f30cfce92d02755071d833d2e71300"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0xee7033f4b2b4261f, 0x1dcbcaa7b818eeb2) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389b403d6e69d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r6 = syz_open_dev$admmidi(&(0x7f0000000380)='/dev/admmidi#\x00', 0x20, 0x22c600) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={r5, r6, 0x14, 0x1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r7, 0x0, 0x30}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0x5}, 0x8) 02:43:31 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsaX\xc6', 0x1, 0x200000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:31 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) lremovexattr(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)=@random={'osx.', 'bpf\x00'}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x4, 0x3f}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7868d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c5991310a1830eef88b1889b804dda90b89802417d63aaa157ee5da4aadeec35e68fd73e3827d846ab54a64bd343cfa7f2c"]) [ 826.180825][T12885] FAULT_INJECTION: forcing a failure. [ 826.180825][T12885] name failslab, interval 1, probability 0, space 0, times 0 [ 826.193656][T12885] CPU: 1 PID: 12885 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 826.193664][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 826.193668][T12885] Call Trace: [ 826.193690][T12885] dump_stack+0x1d8/0x2f8 [ 826.219227][T12885] should_fail+0x555/0x770 [ 826.223659][T12885] __should_failslab+0x11a/0x160 [ 826.228605][T12885] should_failslab+0x9/0x20 [ 826.233114][T12885] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 826.238830][T12885] ? __kmalloc_node_track_caller+0x3c/0x60 [ 826.244630][T12885] __kmalloc_node_track_caller+0x3c/0x60 [ 826.244644][T12885] ? __ip_append_data+0x2077/0x31a0 [ 826.244659][T12885] __alloc_skb+0xe8/0x500 [ 826.244675][T12885] __ip_append_data+0x2077/0x31a0 [ 826.264819][T12885] ? do_raw_getsockopt+0x1c0/0x1c0 [ 826.269946][T12885] ? lock_sock_nested+0xa8/0x120 [ 826.274896][T12885] ip_append_data+0x11c/0x190 [ 826.279588][T12885] ? do_raw_getsockopt+0x1c0/0x1c0 [ 826.279603][T12885] raw_sendmsg+0x1d9e/0x3790 [ 826.279651][T12885] inet_sendmsg+0x147/0x310 [ 826.289322][T12885] ? security_socket_sendmsg+0xa0/0xd0 [ 826.289334][T12885] ? inet_send_prepare+0x250/0x250 [ 826.289349][T12885] kernel_sendmsg+0x109/0x140 [ 826.289364][T12885] sock_no_sendpage+0x100/0x140 [ 826.289385][T12885] inet_sendpage+0x18c/0x340 [ 826.289396][T12885] ? inet_sendmsg+0x310/0x310 [ 826.323207][T12885] sock_sendpage+0xd3/0x120 [ 826.327704][T12885] pipe_to_sendpage+0x1f9/0x2a0 [ 826.332549][T12885] ? sock_fasync+0x100/0x100 [ 826.337148][T12885] __splice_from_pipe+0x2f7/0x8a0 [ 826.342179][T12885] ? generic_splice_sendpage+0x180/0x180 [ 826.347828][T12885] generic_splice_sendpage+0x114/0x180 [ 826.353293][T12885] ? iter_file_splice_write+0xe20/0xe20 [ 826.358830][T12885] __se_sys_splice+0x71a/0x1ac0 [ 826.363687][T12885] ? check_preemption_disabled+0xb7/0x2a0 [ 826.369406][T12885] ? debug_smp_processor_id+0x1c/0x20 [ 826.374777][T12885] ? fpregs_assert_state_consistent+0xb7/0xe0 02:43:31 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any='access=any'}, {@noextend='noextend'}, {@nodevmap='nodevmap'}, {@fscache='fscache'}, {@cache_none='cache=none'}]}}) 02:43:31 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="3f646576af0b210a8a554a00"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[]) [ 826.380849][T12885] __x64_sys_splice+0xe5/0x100 [ 826.385619][T12885] do_syscall_64+0xf7/0x1c0 [ 826.390125][T12885] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 826.396006][T12885] RIP: 0033:0x459f49 [ 826.399882][T12885] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 826.399888][T12885] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 02:43:31 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 826.399897][T12885] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 826.399903][T12885] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 826.399913][T12885] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 826.427897][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 826.427904][T12885] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:31 executing program 1: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/142, 0x8e}], 0x1, &(0x7f0000000240)=""/74, 0x4a}, 0x2040) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 826.587087][T13005] [EXFAT] trying to mount... [ 826.599959][T13005] [EXFAT] ffsMountVol failed 02:43:31 executing program 5 (fault-call:7 fault-nth:66): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) 02:43:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x100, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x32, @multicast1, 0x4e20, 0x1, 'sh\x00', 0x0, 0x1, 0x6b}, 0x2c) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:31 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:31 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="c5e9c191531e14016c623000"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x400, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000,version=9p2000.L,cache=none,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',fscache,cache=fscache,msize=0x0000000000000002,access=any,cachetag=exfat\x00,smackfsroot=ppp0,defcontext=root,euid>', @ANYRESDEC=r5, @ANYBLOB=',u,\x00']) getpid() r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={r8, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x2, 0x101, 0x7fffffff, r8}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000003c0)={r9, 0x7fffffff}, &(0x7f0000000400)=0x8) 02:43:31 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mq_unlink(&(0x7f0000000200)='&*\x00') r2 = dup(r1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) write$P9_RREADDIR(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="8700000029020000000000040400000001000000000000007f000000009def5b5807002e2f66696c6530400300000006000000000000000800000000000000d807002e2f66696c65300a000000000800000000000000ea00000000000000e107002e2f66696c653000020000000500000000000000ffffffff000000007f07002e2f66696c6530"], 0x87) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = dup(r3) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000001c0)) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 02:43:31 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) socket$netlink(0x10, 0x3, 0x6) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000080)) [ 827.066937][T13148] FAULT_INJECTION: forcing a failure. [ 827.066937][T13148] name failslab, interval 1, probability 0, space 0, times 0 [ 827.115975][T13148] CPU: 0 PID: 13148 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 827.123923][T13148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.134018][T13148] Call Trace: [ 827.134043][T13148] dump_stack+0x1d8/0x2f8 [ 827.134063][T13148] should_fail+0x555/0x770 [ 827.134084][T13148] __should_failslab+0x11a/0x160 [ 827.151069][T13148] should_failslab+0x9/0x20 [ 827.151084][T13148] kmem_cache_alloc_node+0x65/0x280 [ 827.151097][T13148] ? __alloc_skb+0x9f/0x500 [ 827.151108][T13148] __alloc_skb+0x9f/0x500 [ 827.151123][T13148] __ip_append_data+0x2077/0x31a0 [ 827.151142][T13148] ? do_raw_getsockopt+0x1c0/0x1c0 [ 827.151174][T13148] ip_append_data+0x11c/0x190 [ 827.151185][T13148] ? do_raw_getsockopt+0x1c0/0x1c0 [ 827.151198][T13148] raw_sendmsg+0x1d9e/0x3790 [ 827.151245][T13148] inet_sendmsg+0x147/0x310 [ 827.151257][T13148] ? security_socket_sendmsg+0xa0/0xd0 [ 827.151267][T13148] ? inet_send_prepare+0x250/0x250 [ 827.151279][T13148] kernel_sendmsg+0x109/0x140 [ 827.151292][T13148] sock_no_sendpage+0x100/0x140 [ 827.151313][T13148] inet_sendpage+0x18c/0x340 [ 827.151324][T13148] ? inet_sendmsg+0x310/0x310 [ 827.151339][T13148] sock_sendpage+0xd3/0x120 [ 827.151360][T13148] pipe_to_sendpage+0x1f9/0x2a0 [ 827.204194][T13148] ? sock_fasync+0x100/0x100 [ 827.204212][T13148] __splice_from_pipe+0x2f7/0x8a0 [ 827.204225][T13148] ? generic_splice_sendpage+0x180/0x180 [ 827.214029][T13148] generic_splice_sendpage+0x114/0x180 [ 827.258197][T13148] ? iter_file_splice_write+0xe20/0xe20 [ 827.263868][T13148] __se_sys_splice+0x71a/0x1ac0 [ 827.269352][T13148] ? check_preemption_disabled+0xb7/0x2a0 [ 827.275163][T13148] ? debug_smp_processor_id+0x1c/0x20 [ 827.280621][T13148] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 827.286688][T13148] __x64_sys_splice+0xe5/0x100 [ 827.291445][T13148] do_syscall_64+0xf7/0x1c0 [ 827.295937][T13148] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 827.301830][T13148] RIP: 0033:0x459f49 [ 827.305704][T13148] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 827.325308][T13148] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 827.333698][T13148] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 827.341647][T13148] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 827.349623][T13148] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 827.357583][T13148] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 02:43:32 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x4000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:32 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31a9f87ff0f728b1f07bfb3220180dc7cadd59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d8efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f000000000000000000001702eee0ac80584c290a765ea8221c90dda7fffa7779c3fe2da0a523551cb0d6b0663437cbac91cfb772d70edc3c6bd823e9814ec1c17a06bca385c0347e00"/226], 0xa4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:32 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file1\x00', 0x8, 0x2) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:32 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5963b8ce24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa153290e5f70d4035956863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) syz_open_pts(r1, 0x440000) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r2, 0x0, 0x9, 0x3, 0xffffffff}) [ 827.365530][T13148] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 827.450461][T13239] [EXFAT] trying to mount... [ 827.484667][T13239] [EXFAT] ffsMountVol failed 02:43:32 executing program 5 (fault-call:7 fault-nth:67): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340), 0xfffffffffffffea3}], 0x2) 02:43:32 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x200062, &(0x7f0000000540)=ANY=[]) 02:43:32 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:32 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000440)={0x4, 0x5, 0x7f61a8ec, 0x20, 0x16, 0x4, 0xe2, 0x63, 0xffffffff, 0x8000, 0xffff, 0x80000000}) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)="07bbb5ad4104cd08817014b82788a5d29455a9b8e845737b5379d088d658a6d357a75e27b8fa7c54570b183079c4d66ab0ae3953404bef2d51d28c32ac73a93ef35ab88f", 0x44}, {&(0x7f0000000240)="3fc48566fc0aca185bfe261031909f5acf93f3d8e107c464501593d679c712e49cce95498849f69a95f88cfc3b2e851f11d48994a6aeeee215ef8e17c6aecf3d3bc194cdf3d7a0003875f6f08c0babc5f74579d1ee8088647ddead418c2902f2d8f6b7ca54b1a3405dc47ae572578c55dce51c6d6977bbbbaa8ce02a952d221c50ed7042604e641647d2f7eaacf63dc9a41fc735d0cb54bc521c2273ff5088fd7e83906a285d5b2212201f49c6cb6925f77d5f714eea1a859bce", 0xba}, {&(0x7f0000000300)="2731986b47dc4933140055876f1c213e987f1f565b02e082529a4339ddf4d550a47f191045318cd81c4f0b39c8cd65c3818ac258645fff788ecb11a3a229e549916d88d2107dedd01f4ad57ac38fa830cfac315463535d78efc999d88f4918715fd011fd8938033054530e6e3f19a84a6f177403a09266ed62ac9dad31aaed74aa4e1e4a02f8e368da7423272e3ea4957b0a4cfde9cf905e012d82b83d23bca06da6f81e83aa6d1ed7f16f941028838301e8fc209733ef60f9b62e068d2afd94cf7a86f1ceccbcd6b4f3873e988047a22d1daf6d79381cb851dd5876ab970daa96fef58c24559bd23795a71134578922c59c", 0xf2}, {&(0x7f0000000100)="0010effc33e807e109029b5f97c68f187f0b24980ddf4292d185165818a360e74a2dfe3a2ff084c447f260c2615e0ed5ed562add", 0x34}], 0x4, 0xffffffffffffffff, 0x0, 0x40050}], 0x6a0, 0x1) [ 827.865821][T13356] [EXFAT] trying to mount... 02:43:32 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT]) 02:43:32 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x93f, @rand_addr="46a8c109b8597fd9457625b6b79b429a", 0x7}}, 0xce, 0x7ff, 0x1, 0x80000001, 0x53}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r5, 0x0, 0xb0, "4d9da57fc09640ce25737684fcd1b43f370f7264163189bd6925664fbc803c0e52611bb63090dc6ebec7568cf7ad5d544f319643d83286847897e2d0fb8c77bb075e341c5e98077284d550bd72047849f7f9ebafd56d3f6c2086faf791b91704d415cc10ccdae86ab02686b78a8dd7f1b1ef49614d49783b71c9fb9524f0d330f644e3f837cf4c66a4df6e2c4b5b1ed0ef6a630d145bb2e1a6157b4bcd942896ee6e7931d85b934de6268803abaa4159"}, 0xb8) r6 = syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x0, 0x2) recvfrom$rose(r6, &(0x7f0000000340)=""/45, 0x2d, 0x1, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) [ 827.890142][T13356] [EXFAT] ffsMountVol failed [ 827.959680][T13457] FAULT_INJECTION: forcing a failure. [ 827.959680][T13457] name failslab, interval 1, probability 0, space 0, times 0 [ 827.974737][T13457] CPU: 1 PID: 13457 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 827.982662][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 827.992715][T13457] Call Trace: [ 827.996010][T13457] dump_stack+0x1d8/0x2f8 [ 828.000345][T13457] should_fail+0x555/0x770 [ 828.000367][T13457] __should_failslab+0x11a/0x160 [ 828.000385][T13457] should_failslab+0x9/0x20 [ 828.000399][T13457] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 828.000409][T13457] ? __kmalloc_node_track_caller+0x3c/0x60 [ 828.000427][T13457] __kmalloc_node_track_caller+0x3c/0x60 [ 828.000439][T13457] ? __ip_append_data+0x2077/0x31a0 [ 828.000451][T13457] __alloc_skb+0xe8/0x500 [ 828.000469][T13457] __ip_append_data+0x2077/0x31a0 [ 828.000492][T13457] ? do_raw_getsockopt+0x1c0/0x1c0 [ 828.000526][T13457] ip_append_data+0x11c/0x190 [ 828.000536][T13457] ? do_raw_getsockopt+0x1c0/0x1c0 [ 828.000549][T13457] raw_sendmsg+0x1d9e/0x3790 [ 828.000597][T13457] inet_sendmsg+0x147/0x310 [ 828.000607][T13457] ? security_socket_sendmsg+0xa0/0xd0 [ 828.000623][T13457] ? inet_send_prepare+0x250/0x250 [ 828.009971][T13457] kernel_sendmsg+0x109/0x140 [ 828.087556][T13457] sock_no_sendpage+0x100/0x140 [ 828.087577][T13457] inet_sendpage+0x18c/0x340 [ 828.097003][T13457] ? inet_sendmsg+0x310/0x310 [ 828.097015][T13457] sock_sendpage+0xd3/0x120 [ 828.097032][T13457] pipe_to_sendpage+0x1f9/0x2a0 [ 828.097039][T13457] ? sock_fasync+0x100/0x100 [ 828.097059][T13457] __splice_from_pipe+0x2f7/0x8a0 [ 828.097071][T13457] ? generic_splice_sendpage+0x180/0x180 [ 828.097095][T13457] generic_splice_sendpage+0x114/0x180 [ 828.097109][T13457] ? iter_file_splice_write+0xe20/0xe20 [ 828.097122][T13457] __se_sys_splice+0x71a/0x1ac0 [ 828.097138][T13457] ? check_preemption_disabled+0xb7/0x2a0 [ 828.097152][T13457] ? debug_smp_processor_id+0x1c/0x20 [ 828.097165][T13457] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 828.097184][T13457] __x64_sys_splice+0xe5/0x100 [ 828.097201][T13457] do_syscall_64+0xf7/0x1c0 [ 828.097215][T13457] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 828.097224][T13457] RIP: 0033:0x459f49 [ 828.097234][T13457] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 828.097240][T13457] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 02:43:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) connect$netrom(r1, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7677aec3045ba2258080823a5ff7d9d518ed3b5b389891a0e809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000000c0)=0xc2eb0301e0bbd86d, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:33 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x182) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0}, 0xfffffffffffffddc) [ 828.097250][T13457] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 828.097255][T13457] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 828.097261][T13457] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 828.097266][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 828.097272][T13457] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@sg0='/dev/sg0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x40000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KDDELIO(r0, 0x4b35, 0x5) 02:43:33 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) write$P9_RCREATE(r0, &(0x7f0000000040)={0x163, 0x73, 0x1, {{0x42, 0x0, 0x4}, 0x2}}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(r2, r3) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r6, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20040, &(0x7f00000002c0)=ANY=[]) 02:43:33 executing program 5 (fault-call:7 fault-nth:68): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61634c6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595b9d2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x28) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) 02:43:33 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r2, 0x110, 0x5, &(0x7f00000000c0)=[0x4, 0x2], 0x2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:33 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='nsfs\x00', 0x308000, &(0x7f0000000180)='securitysecuritycgroup/&\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) acct(&(0x7f00000001c0)='./file0/file0\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:33 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@int=0x4, 0x4) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeed6e7d711aaa144e1bdc35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x3, 0x5, 0x800, 0x4e5, 0x8}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x7, 0x0, 0x420a, 0x10000, 0x9, 0x20, 0x32f, 0x9, r1}, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') write$FUSE_LSEEK(r3, &(0x7f0000000140)={0x18, 0x0, 0x2, {0x2b1c}}, 0x18) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(r0, &(0x7f0000000040), 0x2) 02:43:33 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x3000, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x2900, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x6, @loopback, 0x1}}, 0x7, 0x8}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={r2, 0x0, 0x1, 0x7f, 0xb3a, 0x4}, 0x14) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000040)=""/117, 0x79, 0x2100, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xfffffffffffffe26) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2f646576056e756c6c62300047ddb027f82e58ca5d77abc0b943ef7ce8c5883880832c3bba12164ff46343a4bf2f3d"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 828.848411][T13727] FAULT_INJECTION: forcing a failure. [ 828.848411][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 828.885562][T13727] CPU: 1 PID: 13727 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 828.893536][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.903596][T13727] Call Trace: [ 828.903620][T13727] dump_stack+0x1d8/0x2f8 [ 828.903638][T13727] should_fail+0x555/0x770 [ 828.903657][T13727] __should_failslab+0x11a/0x160 [ 828.903671][T13727] should_failslab+0x9/0x20 [ 828.903685][T13727] kmem_cache_alloc_node+0x65/0x280 [ 828.903704][T13727] ? __alloc_skb+0x9f/0x500 [ 828.925296][T13727] __alloc_skb+0x9f/0x500 [ 828.925319][T13727] __ip_append_data+0x2077/0x31a0 [ 828.925338][T13727] ? do_raw_getsockopt+0x1c0/0x1c0 [ 828.949832][T13727] ip_append_data+0x11c/0x190 [ 828.954558][T13727] ? do_raw_getsockopt+0x1c0/0x1c0 [ 828.959694][T13727] raw_sendmsg+0x1d9e/0x3790 [ 828.964341][T13727] inet_sendmsg+0x147/0x310 [ 828.968870][T13727] ? security_socket_sendmsg+0xa0/0xd0 [ 828.974347][T13727] ? inet_send_prepare+0x250/0x250 [ 828.979651][T13727] kernel_sendmsg+0x109/0x140 [ 828.984349][T13727] sock_no_sendpage+0x100/0x140 [ 828.989233][T13727] inet_sendpage+0x18c/0x340 [ 828.993840][T13727] ? inet_sendmsg+0x310/0x310 02:43:33 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1) 02:43:33 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:33 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="89edef8e062574c42532", 0xa}, {&(0x7f0000000100)="2d947e88ca057cd0d41fe5fd61ed15cb50c9b11a652b157b8cd7cb782f87afb7444ef0526e2bcfb423d1b4aba6f254367dec1e3d9142a8bfbd5796d1db107b0a1c490c94ec78ab3c2fce249fc8ca88135b0589efcd71c3d3abac60e56462a3bf499870394f51235f294febd159f555a35b377c2bcf6157bc3456198dbb0bb836137bbc43e13aa1d6de", 0x89}], 0x2) [ 828.998530][T13727] sock_sendpage+0xd3/0x120 [ 829.003401][T13727] pipe_to_sendpage+0x1f9/0x2a0 [ 829.008444][T13727] ? sock_fasync+0x100/0x100 [ 829.013103][T13727] __splice_from_pipe+0x2f7/0x8a0 [ 829.018147][T13727] ? generic_splice_sendpage+0x180/0x180 [ 829.023834][T13727] generic_splice_sendpage+0x114/0x180 [ 829.029305][T13727] ? iter_file_splice_write+0xe20/0xe20 [ 829.034866][T13727] __se_sys_splice+0x71a/0x1ac0 [ 829.039730][T13727] ? check_preemption_disabled+0xb7/0x2a0 [ 829.045556][T13727] ? debug_smp_processor_id+0x1c/0x20 [ 829.050947][T13727] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 829.057046][T13727] __x64_sys_splice+0xe5/0x100 [ 829.061934][T13727] do_syscall_64+0xf7/0x1c0 [ 829.066453][T13727] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 829.072352][T13727] RIP: 0033:0x459f49 [ 829.076261][T13727] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 829.076268][T13727] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 829.076279][T13727] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 829.076284][T13727] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 829.076290][T13727] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 829.076296][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 829.076302][T13727] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:34 executing program 5 (fault-call:7 fault-nth:69): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:34 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) 02:43:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f000000000000000000000000000000000000a447b89aef3d3a26bea3431f87265f60"], 0xa4) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x9, &(0x7f0000000100)={0x4}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 02:43:34 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = open(&(0x7f0000000300)='./bus\x00', 0x84801, 0x40) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) renameat(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) close(r2) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x59, 0x4) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:34 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:34 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@local, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x1000001, &(0x7f00000002c0)=ANY=[@ANYBLOB='tr \x00\x00\x00fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) 02:43:34 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000080)='erofs\x00', &(0x7f00000000c0)='./file0\x00', 0x3f, 0x7, &(0x7f0000000440)=[{&(0x7f00000002c0)="b71e189da0d3a565967625d0342715f0b6f866f2c21293866bab1c9c1173b780fe45b76feb831a2615d3b9", 0xffffff51, 0xcc}, {&(0x7f0000000140)="a12cc2b54a114c4474c48e3345f6c6e2aa7751b8b62e08d5fc6608075fbfc593cca32c7d777a8b0d041e45b3ee6fee8bcaa162c7e42f86258f3fd738b9ca877490d9092256f25fa417f445fa658ef5556feb0b909e045fdc9a6780b3b1e95f", 0x5f, 0x2}, {&(0x7f00000001c0)="ef4fb34a91805c345c1c8bc0598ce04846f62dfb645c6e0510dfec960e4b975e0afc5b66897d927af1f654", 0x2b, 0xc}, {&(0x7f0000000200)="59ba523279574cb0956ff8025306c950de80a2e8a84b84806b7f248ac68ecb7465f8bfca1ad536dd6fae8b5d5a76c90984b19d318e72a9efaa953b8f5aee85346b75331d16fc4d6abe53e7ccd3a6ec09ec87c69fe98af849df07de2ab8958c4f7f25526e38af659c85ced52ff7052166c45d332966741e4f2edb0f73eb370740cc7de5dff1fa8c43c23df8be8263902f3baaed0dfa84a637", 0x98, 0x7}, {&(0x7f00000002c0), 0x0, 0x2}, {&(0x7f0000000300)="650dcc41e5512de31de3c1e4b452fccd77772e0c5b651fc5e56b09265224c1a060ad21c7507497cf128da8f21ad475b73a3e3da435d5bde83c38c7813f6ce35613195f0517678c2ed7e687d261b07a1db439bf90b70f95e1e43377331fd65cafb32b9e7e1b1e24572650", 0x6a, 0x7}, {&(0x7f0000000380)="8c4457ce6c775479694eec5d3cba788140de22744d6e5c4ab7fa85d3ec829f5d05d00fbfac80d1ed51577d8433bdbf307ba32cddfc3d439d7f04341bd6dc79e9af4043eb2a63ec2a5c8b662ded8001597ee8cc6271ddd6444f1714e9c7219a46880a7b3e7d6a4a462524b129ee23e85d7850b4ca7bcde197306c839cfe7d92cd31a958b31d8fb68aa5", 0x89, 0x800}], 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6661756c745f696e6a653078303030303030303030303030303030352c6e6f757365725f78617474722c6661756c745f696e6a656374696f6e3d30783337674f082c9bb530303030303030322c726f6f74636f6e65645f752c646f6e745f61707072616973652c6f626a5f757365723d627066002c00"]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 829.682147][T13878] [EXFAT] trying to mount... [ 829.689882][T13878] [EXFAT] ffsMountVol failed 02:43:34 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(r1, 0x406, r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400600, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) writev(r0, &(0x7f00000005c0), 0x1c5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8080, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0x20000, 0x0, [0x2, 0x28000000000000, 0x1, 0xa37e, 0x81, 0x1c0000000000, 0x7fffffff, 0xffffffffffffff2b]}) [ 829.736990][T13912] FAULT_INJECTION: forcing a failure. [ 829.736990][T13912] name failslab, interval 1, probability 0, space 0, times 0 02:43:34 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87a9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:34 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r7, @in={{0x2, 0x4e20, @multicast2}}, 0x5703, 0x3}, &(0x7f0000000300)=0x90) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r8, 0x5}, 0x8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_ts_info}) ftruncate(r3, 0x40) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000040)) [ 829.857165][T13912] CPU: 0 PID: 13912 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 829.865113][T13912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 829.875176][T13912] Call Trace: [ 829.878490][T13912] dump_stack+0x1d8/0x2f8 [ 829.882846][T13912] should_fail+0x555/0x770 [ 829.887300][T13912] __should_failslab+0x11a/0x160 [ 829.892456][T13912] should_failslab+0x9/0x20 [ 829.896979][T13912] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 829.902718][T13912] ? __kmalloc_node_track_caller+0x3c/0x60 [ 829.908581][T13912] __kmalloc_node_track_caller+0x3c/0x60 [ 829.914233][T13912] ? __ip_append_data+0x2077/0x31a0 [ 829.919558][T13912] __alloc_skb+0xe8/0x500 [ 829.924257][T13912] __ip_append_data+0x2077/0x31a0 [ 829.929311][T13912] ? do_raw_getsockopt+0x1c0/0x1c0 [ 829.934466][T13912] ip_append_data+0x11c/0x190 [ 829.939201][T13912] ? do_raw_getsockopt+0x1c0/0x1c0 [ 829.944340][T13912] raw_sendmsg+0x1d9e/0x3790 [ 829.948975][T13912] inet_sendmsg+0x147/0x310 [ 829.953495][T13912] ? security_socket_sendmsg+0xa0/0xd0 [ 829.958975][T13912] ? inet_send_prepare+0x250/0x250 [ 829.964150][T13912] kernel_sendmsg+0x109/0x140 [ 829.968857][T13912] sock_no_sendpage+0x100/0x140 [ 829.973734][T13912] inet_sendpage+0x18c/0x340 [ 829.978341][T13912] ? inet_sendmsg+0x310/0x310 [ 829.983028][T13912] sock_sendpage+0xd3/0x120 [ 829.987557][T13912] pipe_to_sendpage+0x1f9/0x2a0 [ 829.992417][T13912] ? sock_fasync+0x100/0x100 [ 829.997028][T13912] __splice_from_pipe+0x2f7/0x8a0 [ 830.002602][T13912] ? generic_splice_sendpage+0x180/0x180 [ 830.008267][T13912] generic_splice_sendpage+0x114/0x180 [ 830.013760][T13912] ? iter_file_splice_write+0xe20/0xe20 [ 830.019337][T13912] __se_sys_splice+0x71a/0x1ac0 [ 830.024208][T13912] ? check_preemption_disabled+0xb7/0x2a0 [ 830.024225][T13912] ? debug_smp_processor_id+0x1c/0x20 [ 830.024237][T13912] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 830.024261][T13912] __x64_sys_splice+0xe5/0x100 [ 830.035851][T13912] do_syscall_64+0xf7/0x1c0 [ 830.035868][T13912] entry_SYSCALL_64_after_hwframe+0x49/0xbe 02:43:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000000c0)=0x1f, 0x4) r3 = dup(r1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000300)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x0, 0x80, 0xcea8, {0x0, 0x2710}, {r4, r5/1000+10000}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x8, 0x1df6533523d616de, 0x0, 0x0, "e9a8ed3efce60696"}}, 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x4000040) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0xfffffffffffffffa}, {&(0x7f0000000340)}], 0x2) 02:43:35 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0x0, 0x0) [ 830.035878][T13912] RIP: 0033:0x459f49 [ 830.035890][T13912] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 830.035898][T13912] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 830.054920][T13958] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 830.057169][T13912] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 830.057176][T13912] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.057182][T13912] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 830.057189][T13912] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 830.057195][T13912] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 830.132636][T14017] Can't find a SQUASHFS superblock on nullb0 02:43:35 executing program 5 (fault-call:7 fault-nth:70): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:35 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x82) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xf7e, 0x208240) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) connect$nfc_llcp(r2, &(0x7f0000000400)={0x27, 0x1, 0x2, 0x5, 0x4, 0x15, "0c0a227aa99fcde0b2176b0634b77e9179b3fca98ffc52a69483f09c5b4d68387e2c691fc1daff8db4e972432a91af97e8929df4074c94713be0363c08a6fd", 0x3f}, 0x60) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000100)={r3, 0x7}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x6, 0xb43742f2e4468788, @raw_data=[0x0, 0x6, 0xff, 0x6, 0x6, 0x38, 0x2, 0x4, 0x2, 0x7fff, 0x80000001, 0xfffffffa, 0x7, 0x40, 0x8, 0xf]}) setxattr$security_smack_entry(&(0x7f0000000140)='./bus\x00', &(0x7f0000000300)='security.SMACK64EXEC\x00', &(0x7f0000000340)='selinux\x00', 0x8, 0x2) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:35 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87aa, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x8001, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x670) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r4, 0x0, 0x111) process_vm_writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/62, 0x3e}], 0x1, &(0x7f0000000480)=[{&(0x7f0000000140)=""/144, 0x90}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000003c0)=""/159, 0x9f}], 0x5, 0x0) 02:43:35 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./bus\x00', 0x2, 0x4, &(0x7f0000000480)=[{&(0x7f0000000140)="76f271ab994b4a8a0f39a31e63ef86a9ec56280f32dcd06100ee5e345984af172dc0f97862c02e06d2a3c97c8be3ae6ac3cc2e905aa79e5c22b5482db5ef78b342f19b8802cdec05ddf348ff697e917e81d66fde8b978b1f73f03dc85502143ed07f1de079dc80b8bf5da194406b8ffa46f737788ce7c67af81f73af794c81a3876c", 0x82, 0x4}, {&(0x7f0000000200)="cd1a0e23ae30e7e891", 0x9, 0x8}, {&(0x7f0000000300)="39f021ef19a65e0f2f226b06ba1c48c809cfa39c02ce13d9312059c3c155da6428c729fc33582a9109927acc1d42b5c87fb6639dfa24af7f64dd4456952c87fbd232260fa40c696b7fef5ece34d25db4d68b4575c6837bad0b41893cb4077ec8339917d7ff9aa69b6768a09b77f6148e94a3e5ed0da5b5a522a41dbe912de5ace19a04319df1fbf18551e75b523c474719ca27033e2b278a6f8bdb96abdfb351dbd236328d8cf9f09899859edab70964ceacf914fc2129cd6c8047c06824516e3794e7f65518e84ec05d20e958bed6184557d8a4742a9cc4b8", 0xd9, 0x2}, {&(0x7f0000000400)="ce46190fa22a7168073828769ab2e33d87ec12126b43bf11d6e20ae8e210be8395c7fafd61b7a0de719acbf90eb3adcaf98392ce6e7251eb1a1ba05f4d8c1f5988ae8b9438c0d3941a787dea2b53acf0815bfcf7ea6f12812389edc5b57e0a48fbcc9be9a0348b35c085c88fe75e4daf1e128325765aa745532e12f3a51cace0", 0x80, 0x2}], 0x4000, &(0x7f00000005c0)={[{@session={'session', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, 'proc$'}}, {@smackfsdef={'smackfsdef', 0x3d, 'bpf\x00'}}, {@subj_user={'subj_user', 0x3d, 'posix_acl_access[wlan0'}}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@seclabel='seclabel'}, {@smackfsroot={'smackfsroot', 0x3d, 'bpf\x00'}}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f3f26e8fb9201a2fbef1bd635266461605744c2a389269354882abea9806f99384713886bcfdf1c736faec5d0cb97e8c68da41a3eb91f2a9fc9556b23"], 0xa4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x200280, 0x4) [ 830.542997][T14032] hfs: unable to parse mount options 02:43:35 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000340)={0x0, 'veth0_to_bond\x00', 0x3}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000b00200"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0x5}, @ldst={0x1, 0x1, 0x0, 0x7, 0x6, 0xfffffffffffffff0, 0x1}, @jmp={0x5, 0x0, 0xa, 0xb, 0x8, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x6, 0xd, 0x9, 0xffffffffffffffe0, 0x1}], &(0x7f0000000100)='syzkaller\x00', 0xfff, 0xdf, &(0x7f0000000140)=""/223, 0x21780, 0x4, [], r7, 0x619ad35477204bf5, r8, 0x8, &(0x7f0000000240)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xf, 0x1, 0x77}, 0x10}, 0x70) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:35 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87ab, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 830.576354][T14037] [EXFAT] trying to mount... [ 830.587027][T14037] [EXFAT] ffsMountVol failed [ 830.612824][T14049] FAULT_INJECTION: forcing a failure. [ 830.612824][T14049] name failslab, interval 1, probability 0, space 0, times 0 [ 830.635166][T14044] hfs: unable to parse mount options [ 830.644409][T14073] vhci_hcd: invalid port number 115 [ 830.668054][T14049] CPU: 1 PID: 14049 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 830.676032][T14049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 830.681271][T14073] vhci_hcd: default hub control req: 2e2f v7562 i0073 l0 [ 830.686109][T14049] Call Trace: [ 830.696777][T14049] dump_stack+0x1d8/0x2f8 [ 830.701109][T14049] should_fail+0x555/0x770 [ 830.701130][T14049] __should_failslab+0x11a/0x160 [ 830.701142][T14049] ? skb_clone+0x1cc/0x380 [ 830.701158][T14049] should_failslab+0x9/0x20 [ 830.719363][T14049] kmem_cache_alloc+0x56/0x2e0 [ 830.719378][T14049] ? nf_hook+0x2ba/0x310 [ 830.719391][T14049] skb_clone+0x1cc/0x380 02:43:35 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x1ff, 0x4, 0x7, 0x800, &(0x7f0000000040)=[{}, {}, {}, {}]}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null}) [ 830.719403][T14049] ip_mc_output+0x24e/0x620 [ 830.719415][T14049] ip_send_skb+0x126/0x1e0 [ 830.719427][T14049] ip_push_pending_frames+0x66/0x80 [ 830.719440][T14049] raw_sendmsg+0x1e06/0x3790 [ 830.719484][T14049] inet_sendmsg+0x147/0x310 [ 830.719496][T14049] ? security_socket_sendmsg+0xa0/0xd0 [ 830.719509][T14049] ? inet_send_prepare+0x250/0x250 [ 830.737622][T14049] kernel_sendmsg+0x109/0x140 [ 830.737640][T14049] sock_no_sendpage+0x100/0x140 [ 830.737663][T14049] inet_sendpage+0x18c/0x340 [ 830.737677][T14049] ? inet_sendmsg+0x310/0x310 [ 830.766967][T14049] sock_sendpage+0xd3/0x120 [ 830.766987][T14049] pipe_to_sendpage+0x1f9/0x2a0 [ 830.766996][T14049] ? sock_fasync+0x100/0x100 [ 830.767010][T14049] __splice_from_pipe+0x2f7/0x8a0 [ 830.785731][T14049] ? generic_splice_sendpage+0x180/0x180 [ 830.785757][T14049] generic_splice_sendpage+0x114/0x180 [ 830.785772][T14049] ? iter_file_splice_write+0xe20/0xe20 [ 830.785783][T14049] __se_sys_splice+0x71a/0x1ac0 [ 830.795107][T14049] ? check_preemption_disabled+0xb7/0x2a0 [ 830.795123][T14049] ? debug_smp_processor_id+0x1c/0x20 [ 830.795135][T14049] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 830.795155][T14049] __x64_sys_splice+0xe5/0x100 [ 830.804726][T14049] do_syscall_64+0xf7/0x1c0 [ 830.804742][T14049] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 830.804753][T14049] RIP: 0033:0x459f49 [ 830.804764][T14049] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 02:43:35 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000100)='\x00', &(0x7f0000000140)="d07e1d88684b931f48ddd609f534fd48c1016d7feaf0215fed1cd9b8f96d2fbb7a4495ca9c9939dd153145ab78a59e73cdfa61817d53bceb50fe47564cc7d360cc3312704b51dc127499a9d0c6a5d66b0213c6ecfa8703204e60b2315e863bf3b91b943d573ed37800944453cea6419a087a1b3b0252b8abf198f7d39311e9218eb741b6dc10e072f1345d6369e54b40fd62e5ad62d48249b3c8454697c536fcea9e98dcd1f545dafbae1dd9402c6b8109994341df5c", 0xb6) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) [ 830.804772][T14049] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 830.815810][T14049] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 830.815815][T14049] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.815821][T14049] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 830.815827][T14049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 830.815833][T14049] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 830.956615][T14168] [EXFAT] trying to mount... [ 830.961842][T14168] [EXFAT] ffsMountVol failed [ 831.080811][T14051] bridge2: port 1(veth11) entered blocking state [ 831.087232][T14051] bridge2: port 1(veth11) entered disabled state 02:43:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87ac, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:36 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000280)={0x1, 0x0, 0x1}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/rt_acct\x00') ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x1, 0x6}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d67aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd346da7d3a8800c6af68f666bde3cfa7f2c44c9b7c08facd0cced36625cc1f32583fdfac2dc570b5bc986336a9da9e73063b59b687b69114c79c96708e4c4fbd5d5bc7d3d02fff8b38830b89aaa47aaf357da6788cb31c782516b927eef1e811e0ef76982c3ab32593725d1a6c95c185643b0106a747dfc0677b391bc6ac420c81d07368544ba0e9953"]) write$input_event(r1, &(0x7f0000000100)={{}, 0x1, 0x3, 0x2}, 0x18) 02:43:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000040)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="94", 0x1}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r3 = perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x6, 0xa, 0x7f, 0x0, 0xfffffffffffffffb, 0x4cd63db415a87030, 0xd, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext, 0x4, 0x1, 0x3, 0x8, 0x3, 0xddb, 0x7fff}, 0xffffffffffffffff, 0x1, r2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x20, r3, &(0x7f0000000240)="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", 0x1000, 0x93, 0x0, 0x1, r4}, &(0x7f00000000c0)) [ 831.122328][T14051] device veth11 entered promiscuous mode [ 831.144254][T14165] device veth11 left promiscuous mode [ 831.206923][T14165] bridge2: port 1(veth11) entered disabled state [ 831.207841][T14317] [EXFAT] trying to mount... [ 831.229756][T14317] [EXFAT] ffsMountVol failed [ 831.281216][T14317] [EXFAT] trying to mount... [ 831.286486][T14317] [EXFAT] ffsMountVol failed 02:43:36 executing program 5 (fault-call:7 fault-nth:71): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:36 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x80) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20ncci\x00', 0x100, 0x0) bind$isdn_base(r1, &(0x7f0000000180)={0x22, 0x8, 0x5, 0x20, 0x1f}, 0x6) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f00000001c0)=0x85, &(0x7f0000000200)=0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9v\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c7766648f6f3df1f73846b42ee5485e1f5401de9d8ca6014dab0634c4a9a5a2403bb39ded1ea1c3b1737f3614a01f8177f828af84a224b066706871785425bafb2c45a5c278c2be33a34b0bea7ac58e8dffa49e92da517c1722a8ab7b6f6725fd0edff5d8a015f4956fe9cd3a0eeb9b7729a2391e894cb019de3d46ea03b4a1a73030cb3fc0f0f95fb29123c72275dc3b5438c3b9746eeb2514ed1701be5d259445ae75", @ANYRESHEX=r3, @ANYBLOB=',fsname=9p\x00,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c646f6e745f68617368f9467f0efa40a3eb655f747970653d696d617369672c0019af1fb68dd440f51cffdc61ef7c3c3fc363d0f61c29930808decfd0d541cf9598cb9f992ca8b8495f92761ec60f6b9b50db06fdde6d3bf33fbbf659467d7a614f2418e96ed71befd5b24fa892bfe8cdccf6bdfffdcaf743e3e5844eba411fb21cdd7613197a03f2cfd2518d81ce9b4fb307e2de1dec27ff9836ba7ed083a95ac486627d21e23b0c129982cb27e1f4c14d535b8e6b29e1ac6242586a3f219939675e31fb9f4e9ea721341e1640219012ad02190b9304333b4bd3214dcb577fd3599ff55f8a085e9ebe90a4e145be94b9af736a9e0cc95a0e905e9a907236e6b47eb76918f803a39a9cb41e055cca54899f12e3596a4254ffa51c1de4423e21bf4b3e47fa322b68c309fcf2c60495c060a6ebb06a27b96333e260b12bd429c561d3c3dfe6be4284957de828408506f1c6c45e48e1757a4d8f56031ae67bb6d97a076752ec80cb528ba3cc641f5f351880b353113270dc7c72ac"]) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)) 02:43:36 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x20000, &(0x7f0000000540)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16, @ANYRESHEX, @ANYRESHEX=r0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="862505f2b68e9d689c2a6481ffa267547defa873c1790573a49f59746655e2ff9f48063f6c9da84388f856b070570b2d04d4cec3f4e88525f6b63c814ff1b023d3a8209e871dbd5e141845a40af5f9bc6694d3a4f2044c906a781b3b4d4ed0bc3501a9ce8236cb5c05530d9e28e22a544d86b0054472f9fa31089bcfbd496b1ef9306c973ca24ec773c3caf401858df17959fe9f666ca46f2ea74f1f1b3229698ac173fdae478e342bc80eace3bada5f4d289a1736bae2ac84e2bc9a7b8fdde46018c499a24278f70e8b567c167fe554b611b32b39c655e0e6e2f7005ade866bf13e92bcf64dc0ddaf966bc508fc0a4f62c3d59b30f7a1131191ceedc5a47eafea0e7c716670a153aede4e8628219a96602180eb161c340c43e110bbe46204d48d21cf5a932fdcd1321884fbb66f1e06b3a4e8fc94b6ce64c61378d1645538f784f9156ccaeb73cedb1dce401f993098437fea887fc4", @ANYRES32, @ANYRES16=r1, @ANYPTR64, @ANYRESHEX, @ANYPTR, @ANYRESDEC, @ANYPTR64, @ANYRES32], @ANYRESDEC, @ANYBLOB="d7020404a3", @ANYRES32, @ANYRESOCT]]) 02:43:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87ad, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:36 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0xb5, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000b00200"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r7}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@loopback, 0x4e21, 0xe0, 0x4e22, 0x138c, 0x5, 0x40, 0xb0, 0x3b, r8, r9}, {0xe0a, 0x8, 0x1000, 0x9, 0x6, 0xfffffffffffffdf0, 0x4, 0x2}, {0x401, 0x100, 0x8, 0xffffffff}, 0x7ff, 0x6e6bc0, 0x0, 0x4c4b32d5044ce38e, 0x3}, {{@in=@empty, 0x4d2}, 0xa, @in=@broadcast, 0x3502, 0x0, 0x0, 0x1, 0xce, 0x1, 0x80000001}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:36 executing program 2: unlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[]) 02:43:36 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x10) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='esfat\x00', 0x0, 0x0) 02:43:36 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87ae, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 831.524485][T14458] FAULT_INJECTION: forcing a failure. [ 831.524485][T14458] name failslab, interval 1, probability 0, space 0, times 0 [ 831.607195][T14456] bridge2: port 1(veth13) entered blocking state [ 831.626889][T14458] CPU: 1 PID: 14458 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 831.634840][T14458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 831.645269][T14458] Call Trace: [ 831.647740][T14456] bridge2: port 1(veth13) entered disabled state 02:43:36 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x900019, &(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYBLOB="9bec079b749bcbd23e5f1c375b3b2358431e5e28439413f5015ce6bf7ad9ec7656c8fb9cf92651c2aed944ce909c42b078dc0387bb2c2c6a037c0adb0192a35814b88aa8be3914a3999a7bb9a5f46b1e75069771d0c8e8f95bd3f203545a836a6084016cb561c748b9e074f8a594cc5a5e0faa0f105cffe05178660133b54704f2e21c097c7195812f621d3eb7ede2e93e745c63487173558209420d84600ba10cc422459ce06993ee195f662cc723c4ba2c5d39d01bf90d59470ba1e2facf0ee4fdba15df41dac74c", @ANYRESHEX=0x0, @ANYBLOB="d2801890ba93d6fa5108be0b370e3ff435dc933bf2044a0be4a927f62b0c851a8843e002c6"], @ANYRES64, @ANYRESDEC=r3]) [ 831.648582][T14458] dump_stack+0x1d8/0x2f8 [ 831.648603][T14458] should_fail+0x555/0x770 [ 831.663862][T14458] __should_failslab+0x11a/0x160 [ 831.668991][T14458] ? dst_alloc+0x173/0x580 [ 831.673419][T14458] should_failslab+0x9/0x20 [ 831.673435][T14458] kmem_cache_alloc+0x56/0x2e0 [ 831.673451][T14458] dst_alloc+0x173/0x580 [ 831.679089][T14456] device veth13 entered promiscuous mode [ 831.682719][T14458] rt_dst_clone+0x57/0x6d0 [ 831.682734][T14458] ? ip_mc_finish_output+0xc3/0x410 [ 831.692769][T14458] ip_mc_finish_output+0x127/0x410 [ 831.692784][T14458] ip_mc_output+0x2c1/0x620 [ 831.692797][T14458] ip_send_skb+0x126/0x1e0 [ 831.692811][T14458] ip_push_pending_frames+0x66/0x80 [ 831.692825][T14458] raw_sendmsg+0x1e06/0x3790 [ 831.692865][T14458] inet_sendmsg+0x147/0x310 [ 831.702438][T14458] ? security_socket_sendmsg+0xa0/0xd0 [ 831.702451][T14458] ? inet_send_prepare+0x250/0x250 [ 831.702464][T14458] kernel_sendmsg+0x109/0x140 [ 831.702476][T14458] sock_no_sendpage+0x100/0x140 [ 831.702495][T14458] inet_sendpage+0x18c/0x340 02:43:36 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0xc0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/def/nyllb0\x00'], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='overlay\x00', 0x800000, &(0x7f0000000240)={[{@nfs_export_off='nfs_export=off'}, {@xino_auto='xino=auto'}, {@metacopy_off='metacopy=off'}, {@metacopy_off='metacopy=off'}, {@metacopy_on='metacopy=on'}, {@xino_off='xino=off'}, {@xino_off='xino=off'}, {@workdir={'workdir', 0x3d, './file0/file0'}}], [{@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, '@(]system/I!'}}, {@measure='measure'}, {@obj_role={'obj_role', 0x3d, '/dev/nullb0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@fsname={'fsname', 0x3d, '-ppp0ppp1'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user'}}, {@subj_role={'subj_role'}}, {@euid_gt={'euid>', r1}}]}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xae6, 0x200000) write$binfmt_script(r2, &(0x7f0000001280)={'#! ', './file0/file0', [{0x20, 'exfat\x00'}, {}, {0x20, '@(]system/I!'}, {0x20, '/dev/nullb0\x00'}], 0xa, "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"}, 0x1033) 02:43:36 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x40, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) open(&(0x7f0000000040)='./bus\x00', 0x400000, 0x80) [ 831.702505][T14458] ? inet_sendmsg+0x310/0x310 [ 831.702514][T14458] sock_sendpage+0xd3/0x120 [ 831.702534][T14458] pipe_to_sendpage+0x1f9/0x2a0 [ 831.702541][T14458] ? sock_fasync+0x100/0x100 [ 831.702552][T14458] __splice_from_pipe+0x2f7/0x8a0 [ 831.702563][T14458] ? generic_splice_sendpage+0x180/0x180 [ 831.702583][T14458] generic_splice_sendpage+0x114/0x180 [ 831.702597][T14458] ? iter_file_splice_write+0xe20/0xe20 [ 831.702613][T14458] __se_sys_splice+0x71a/0x1ac0 [ 831.721855][T14469] device veth13 left promiscuous mode [ 831.726486][T14458] ? check_preemption_disabled+0xb7/0x2a0 [ 831.726506][T14458] ? debug_smp_processor_id+0x1c/0x20 [ 831.752079][T14469] bridge2: port 1(veth13) entered disabled state [ 831.755765][T14458] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 831.755797][T14458] __x64_sys_splice+0xe5/0x100 [ 831.836511][T14458] do_syscall_64+0xf7/0x1c0 [ 831.836527][T14458] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 831.836535][T14458] RIP: 0033:0x459f49 [ 831.836547][T14458] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 831.844162][T14482] 9pnet: Insufficient options for proto=fd [ 831.846907][T14458] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 831.846918][T14458] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 831.846924][T14458] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 02:43:36 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f0000000240)=""/4096, 0x1000) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 831.846930][T14458] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 831.846936][T14458] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 831.846942][T14458] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 831.898190][T14482] 9pnet: Insufficient options for proto=fd [ 831.966998][T14590] [EXFAT] trying to mount... [ 832.013984][T14590] [EXFAT] ffsMountVol failed 02:43:37 executing program 5 (fault-call:7 fault-nth:72): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:37 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87af, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6696646566465d76626e78c7860f49a40400e11a3cb5e24a3f0d1758dfd067f1954eba07f064c1a4a8d398a57e8c06272f0612091abb98f8b3d4780cd595afdda90b898024179300000000000000adeec35e6863b8e3827d846ab54a64bd343cfa7f2c00"]) 02:43:37 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap='nodevmap'}, {@cachetag={'cachetag', 0x3d, '\x00\x00\xe2#/00#\x00'/21}}, {@uname={'uname', 0x3d, 'trans=fd,'}}, {@cache_none='cache=none'}, {@cache_loose='cache=loose'}]}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x30000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r6, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r6, 0x7, 0x7}, &(0x7f0000000340)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000240)={0x7691, 0x3f, 0x1, 0xa, 0x1}) 02:43:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000180)={0x2}, 0x4) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b84fbbfb3222280dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891288809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65fa0529b87131c51f6ef1bd6352664612abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f00"/164], 0xa4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x2d2fd1cc, 0x3, 0xff, 0x3, 0x2, 0x8000, 0x9b4, 0x7, 0x80000001, 0x6, 0xf214, 0xfffffff8, 0x341, 0x6, 0x1, 0x1f, 0xfffeffff, 0x1, 0x4, 0x1, 0x2, 0xfff, 0x5, 0x7, 0x4, 0x2, 0x80, 0xffffffff, 0x4, 0x3, 0x6, 0x4]}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/dg6/nullb0\x00'], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:37 executing program 2: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) syncfs(r0) mkdir(&(0x7f0000000080)='./file0\x00', 0x4) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a400000000010000008d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:37 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa4) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f00000000c0)={0x7, {0xd6, 0x3, 0x3, 0x8}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r4) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000180)={r8, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={r8, 0x20, 0x10, 0x8001, 0x9}, &(0x7f0000000140)=0x18) 02:43:37 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b0, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 832.405179][T14738] FAULT_INJECTION: forcing a failure. [ 832.405179][T14738] name failslab, interval 1, probability 0, space 0, times 0 [ 832.417886][T14738] CPU: 0 PID: 14738 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 832.425976][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 02:43:37 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) sendmsg$TIPC_NL_BEARER_ADD(r6, &(0x7f0000000700)={&(0x7f0000000100), 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x3a4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfff}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd696}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x92d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8dbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0x60, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x85}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c7b}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x80}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x14080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@debug={'debug', 0x3d, 0x7b38}}, {@msize={'msize', 0x3d, 0x9}}, {@fscache='fscache'}, {@cache_none='cache=none'}, {@msize={'msize', 0x3d, 0x7b47}}, {@cache_none='cache=none'}, {@access_uid={'access', 0x3d, r3}}], [{@uid_gt={'uid>', r5}}, {@appraise='appraise'}, {@permit_directio='permit_directio'}]}}) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x4000, 0x0) 02:43:37 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={0x0, 0x0, &(0x7f0000058000)={&(0x7f000023f000)=ANY=[@ANYBLOB="8400faffffffffbf20d00000000000000000fffc0c000000bb5c00000000dd015b650700290ffc380c2dbfdc5e9f13e1a04810d404fbc3f4c1b4e2bf8f0df69f949869c200f0ffff9f04005e4fcd4dd3050bc1700612dbc3080c91745fa158cf0d70309f7f1969136edfd73494c0356675ffff000044f22432a15b4ce56aa166b5030d"], 0x83}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x263) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xa356e655f8ef13a0, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0xfffffffffffffeb2) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='\xc71\x85#', 0x0, &(0x7f0000000540)=ANY=[]) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e21, 0x2, @mcast1, 0x9}, {0xa, 0x4e24, 0x0, @mcast2, 0x955}, 0x2, [0x1800, 0x7, 0x8, 0xb60, 0x3, 0x10001, 0x4, 0x19]}, 0x5c) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0xcc53b714f4014f3c, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r3, 0x11, 0x2, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) [ 832.425981][T14738] Call Trace: [ 832.426003][T14738] dump_stack+0x1d8/0x2f8 [ 832.426023][T14738] should_fail+0x555/0x770 [ 832.426043][T14738] __should_failslab+0x11a/0x160 [ 832.426062][T14738] should_failslab+0x9/0x20 02:43:37 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 832.426077][T14738] kmem_cache_alloc_node+0x65/0x280 [ 832.426091][T14738] ? __alloc_skb+0x9f/0x500 [ 832.426103][T14738] ? mark_lock+0x107/0x1650 [ 832.426115][T14738] __alloc_skb+0x9f/0x500 [ 832.426131][T14738] __pskb_copy_fclone+0xac/0x12b0 [ 832.426142][T14738] ? lockdep_hardirqs_on+0x295/0x7d0 [ 832.426161][T14738] hsr_forward_skb+0xca9/0x2040 [ 832.426187][T14738] ? hsr_port_get_hsr+0xc6/0xf0 [ 832.426200][T14738] hsr_dev_xmit+0x77/0x90 [ 832.426211][T14738] dev_hard_start_xmit+0x1c1/0x3f0 [ 832.426230][T14738] __dev_queue_xmit+0x1e53/0x3010 [ 832.426250][T14738] dev_queue_xmit+0x17/0x20 [ 832.426258][T14738] neigh_connected_output+0x3df/0x410 [ 832.426277][T14738] ip_finish_output2+0x13be/0x18d0 [ 832.426285][T14738] ? ip_fraglist_prepare+0x2e5/0x590 [ 832.426300][T14738] ip_do_fragment+0x1528/0x1d10 [ 832.426308][T14738] ? ip_fragment+0x210/0x210 [ 832.426327][T14738] ? rcu_lock_release+0xd/0x30 [ 832.426333][T14738] ? ipv4_mtu+0x2bc/0x3c0 [ 832.426342][T14738] ip_fragment+0x11f/0x210 [ 832.426352][T14738] __ip_finish_output+0x3fc/0x4b0 [ 832.426363][T14738] ip_finish_output+0x52/0x1e0 [ 832.426369][T14738] ? ip_mc_output+0x4c6/0x620 [ 832.426379][T14738] ip_mc_output+0x4db/0x620 [ 832.426394][T14738] ip_send_skb+0x126/0x1e0 [ 832.426407][T14738] ip_push_pending_frames+0x66/0x80 [ 832.426418][T14738] raw_sendmsg+0x1e06/0x3790 [ 832.426464][T14738] inet_sendmsg+0x147/0x310 [ 832.426475][T14738] ? security_socket_sendmsg+0xa0/0xd0 [ 832.426484][T14738] ? inet_send_prepare+0x250/0x250 [ 832.426496][T14738] kernel_sendmsg+0x109/0x140 [ 832.426508][T14738] sock_no_sendpage+0x100/0x140 [ 832.426528][T14738] inet_sendpage+0x18c/0x340 [ 832.426541][T14738] ? inet_sendmsg+0x310/0x310 [ 832.426551][T14738] sock_sendpage+0xd3/0x120 [ 832.426567][T14738] pipe_to_sendpage+0x1f9/0x2a0 [ 832.426575][T14738] ? sock_fasync+0x100/0x100 [ 832.426589][T14738] __splice_from_pipe+0x2f7/0x8a0 [ 832.426601][T14738] ? generic_splice_sendpage+0x180/0x180 [ 832.426624][T14738] generic_splice_sendpage+0x114/0x180 [ 832.426638][T14738] ? iter_file_splice_write+0xe20/0xe20 [ 832.426650][T14738] __se_sys_splice+0x71a/0x1ac0 [ 832.426663][T14738] ? check_preemption_disabled+0xb7/0x2a0 [ 832.426677][T14738] ? debug_smp_processor_id+0x1c/0x20 [ 832.426688][T14738] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 832.426708][T14738] __x64_sys_splice+0xe5/0x100 [ 832.426722][T14738] do_syscall_64+0xf7/0x1c0 [ 832.426736][T14738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 832.426744][T14738] RIP: 0033:0x459f49 [ 832.426755][T14738] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 832.426760][T14738] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 832.426779][T14738] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 832.426784][T14738] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 832.426790][T14738] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 832.426796][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 832.426801][T14738] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:38 executing program 5 (fault-call:7 fault-nth:73): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:38 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f0f6e754c606230"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @pix={0x3, 0xffff, 0x4f11f954221eb1cb, 0x2, 0x4, 0x6, 0x9, 0x4, 0x0, 0x1, 0xd5410b6999473dec, 0x1}}) 02:43:38 executing program 2: mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) 02:43:38 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b2, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SVE_SET_VL(0x32, 0x23c81) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:38 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='//10\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x12\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',7fdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) rmdir(&(0x7f0000000080)='./file0\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 02:43:38 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) llistxattr(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0), 0x0) [ 833.270151][T14912] 9pnet: Insufficient options for proto=fd [ 833.301836][T14994] FAULT_INJECTION: forcing a failure. [ 833.301836][T14994] name failslab, interval 1, probability 0, space 0, times 0 02:43:38 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b3, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 833.314636][T14994] CPU: 1 PID: 14994 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 833.322531][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 833.324434][T14912] 9pnet: Insufficient options for proto=fd [ 833.332676][T14994] Call Trace: [ 833.332697][T14994] dump_stack+0x1d8/0x2f8 [ 833.332713][T14994] should_fail+0x555/0x770 [ 833.332729][T14994] __should_failslab+0x11a/0x160 [ 833.332743][T14994] should_failslab+0x9/0x20 [ 833.332755][T14994] kmem_cache_alloc_node_trace+0x6e/0x2d0 02:43:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000080)) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r2 = getpgrp(0x0) setpriority(0x0, r2, 0x100) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000180)=r2) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x400000, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000140)) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000000c0)=0x20) [ 833.332764][T14994] ? __kmalloc_node_track_caller+0x3c/0x60 [ 833.332782][T14994] __kmalloc_node_track_caller+0x3c/0x60 [ 833.378446][T14994] ? __pskb_copy_fclone+0xac/0x12b0 [ 833.383648][T14994] __alloc_skb+0xe8/0x500 [ 833.387969][T14994] __pskb_copy_fclone+0xac/0x12b0 [ 833.392997][T14994] ? lockdep_hardirqs_on+0x295/0x7d0 [ 833.398552][T14994] hsr_forward_skb+0xca9/0x2040 [ 833.403423][T14994] ? hsr_port_get_hsr+0xc6/0xf0 [ 833.408275][T14994] hsr_dev_xmit+0x77/0x90 [ 833.412637][T14994] dev_hard_start_xmit+0x1c1/0x3f0 02:43:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="ad9943d410665d025e52c421d4da7825a2fae064555ef8c86bb4f7314b70237cdea40136046d833088267944262e5ed4846c60d6022fe533d21212558469db8d63bc71e4e90b31e0675d23cd4d618623d293b890fff907238881daa5368fdffe32a7d9254b5d16553047cc536424ade187f1665933690292d44641173a316a12a47259e350a122cdc99116ee85a82b56885efffac6aa87ecb080aa7628d465e389bbf4da58a85ffec4ec0994327b57db40f5") writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:38 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:38 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x348c000000, 0x414240) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[]) [ 833.417756][T14994] __dev_queue_xmit+0x1e53/0x3010 [ 833.423682][T14994] dev_queue_xmit+0x17/0x20 [ 833.428194][T14994] neigh_connected_output+0x3df/0x410 [ 833.433579][T14994] ip_finish_output2+0x13be/0x18d0 [ 833.438689][T14994] ? ip_fraglist_prepare+0x2e5/0x590 [ 833.443987][T14994] ip_do_fragment+0x1528/0x1d10 [ 833.448822][T14994] ? ip_fragment+0x210/0x210 [ 833.453425][T14994] ? rcu_lock_release+0xd/0x30 [ 833.458188][T14994] ? ipv4_mtu+0x2bc/0x3c0 [ 833.462526][T14994] ip_fragment+0x11f/0x210 [ 833.466945][T14994] __ip_finish_output+0x3fc/0x4b0 [ 833.471967][T14994] ip_finish_output+0x52/0x1e0 [ 833.476725][T14994] ? ip_mc_output+0x4c6/0x620 [ 833.481421][T14994] ip_mc_output+0x4db/0x620 [ 833.481436][T14994] ip_send_skb+0x126/0x1e0 [ 833.481450][T14994] ip_push_pending_frames+0x66/0x80 [ 833.481463][T14994] raw_sendmsg+0x1e06/0x3790 [ 833.481507][T14994] inet_sendmsg+0x147/0x310 [ 833.481517][T14994] ? security_socket_sendmsg+0xa0/0xd0 [ 833.481527][T14994] ? inet_send_prepare+0x250/0x250 [ 833.481538][T14994] kernel_sendmsg+0x109/0x140 [ 833.481551][T14994] sock_no_sendpage+0x100/0x140 [ 833.495666][T14994] inet_sendpage+0x18c/0x340 [ 833.495680][T14994] ? inet_sendmsg+0x310/0x310 [ 833.495694][T14994] sock_sendpage+0xd3/0x120 [ 833.495710][T14994] pipe_to_sendpage+0x1f9/0x2a0 [ 833.495721][T14994] ? sock_fasync+0x100/0x100 [ 833.548390][T14994] __splice_from_pipe+0x2f7/0x8a0 [ 833.553419][T14994] ? generic_splice_sendpage+0x180/0x180 [ 833.559061][T14994] generic_splice_sendpage+0x114/0x180 [ 833.564546][T14994] ? iter_file_splice_write+0xe20/0xe20 [ 833.564559][T14994] __se_sys_splice+0x71a/0x1ac0 [ 833.574950][T14994] ? check_preemption_disabled+0xb7/0x2a0 [ 833.576811][T15012] [EXFAT] trying to mount... [ 833.580843][T14994] ? debug_smp_processor_id+0x1c/0x20 [ 833.580856][T14994] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 833.580878][T14994] __x64_sys_splice+0xe5/0x100 [ 833.580893][T14994] do_syscall_64+0xf7/0x1c0 [ 833.580907][T14994] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 833.580915][T14994] RIP: 0033:0x459f49 [ 833.580928][T14994] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 833.592088][T15012] [EXFAT] ffsMountVol failed [ 833.597260][T14994] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 833.597272][T14994] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 833.597277][T14994] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 833.597283][T14994] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 833.597290][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 833.597295][T14994] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 833.726395][T15014] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #32 [ 833.763525][T15016] usb usb7: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #32 02:43:38 executing program 5 (fault-call:7 fault-nth:74): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:38 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x2, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x100408, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x33, 0x61, 0x37, 0x65, 0x35, 0x34], 0x2d, [0x34, 0x64, 0x33, 0x33], 0x2d, [0x32, 0x31, 0x32, 0x1c], 0x2d, [0x6bc4dad430204f30, 0x37, 0x62, 0xeb8aa31171e084e3], 0x2d, [0x37, 0x32, 0x65, 0x32, 0x63, 0x32, 0x35, 0x39]}}}]}}) 02:43:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r4 = ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={r4, 0x0, 0x4, 0x8, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:38 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xff}, 0x28, 0x0) 02:43:38 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b4, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:38 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x7, 0x309001) execveat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='ppp0\x00'], &(0x7f0000000280)=[&(0x7f0000000200)='bpf\x00', &(0x7f0000000240)='\x00'], 0x1000) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x10400) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000000c0)={0x7, {0x416, 0x1, 0x8, 0x8748}}) 02:43:39 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$9p_xen(&(0x7f0000000080)='9p\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=xen,', {[{@access_user='access=user'}], [{@hash='hash'}, {@appraise='appraise'}, {@permit_directio='permit_directio'}]}}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="bbbea034ce"]) 02:43:39 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x1}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x3f, 0x76}, 0x6) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001280)="ecdb24981d50b5b94db0cab0930c69ea3f9248f7c8a5002edcd44057a110275874a1f23aabcd3e44f6880e4ea6808b733043cdce48530ed54978eb94283961ee2d575f2350565109c6892e9cbcdcf08d544d9bb70ee26120c1c4251faa627599a9119b45cec48a88e77d1ffd0a52f6ef1048e9aafef29cf5b2bb3515e2684c9ee9690f630f0ddf9aa8b4d92f5d300441ece05ec174b984702b022ffa1d6d9403f11d5b316dba81c1d33877ea51e0e3175fac7785b34a853d47cba2ac1c572d91d78329967ac2a067ecd2fc0bf85a7065b3e438306e092f1b4223ffc319519140624a044699b30e458b42a70e81b9d670c5c0f6a653324b036267a43e443f251551407c14dfd2dcc731d62509aab3f3f0fc5e29a515915e8816bd2e03cdbf1e1393d6e12d669779debea0f468fd98e9f85cf8411a55557e0e86e9cb9d562a8e59d8f345fa12a4c36c97fd747294e0d05779e6c3e9b8b744b519cdb35cfbcd6d6e5eb9a6c73ee69c657cbc1309ac3f26e8c266c6526c3ffdb4d149e9272d3f6055303661c25befcbd6b9220018747a0d84005332acc6ad23a9d69c3b7ab34ddd06e38a50a37bb95df21244405dca29632e622edff8e52ce20d039390bd7e7cfd634ff59919090f38752df83e1e6d7a31e30ac545d5c827cd8ec8d2b57d6771130689aedf7e5809f6eb03c5652c835f3feafe583d34c15f2c8eabd994d01fadf16c8272600e6b6801693d396c59c8fd79a5f7167fd627055f350bbd9e73f5be6499b27039d8dc2524f5588248925345d666e675ed2db6642d22683e059b2309436ea92efe7f666423f934f70e41689af8086450f1a4610f89e1486597dd86c05dbc329e7fe03a6d719265e47d466864b7ad01a6b16e6d3e14793abd14b51ad3989a89b5a17220aa83f43de09890a7b8b29199fe04a9156ac4154ea5b72951d5683adc6077820318b6e9320539f757a4db32537e425e86dcda1fb63864eabf40c30d40fd73adbc6fb5ca8b22919b0f756b0dab38a0980ba504eb31620d2187b9191a4d1a2855e3a8c27642a10213ad6bb200e7e76f5337dc7a22ed32bf839a186330075989aaef4321ffc722c3e6b103c55018f9f71359f0a54835e0e589b1f58f502921adf998c86c4c0708c896cd6624187eeaa1a7e20b416718584561e3e58638b0ebbc86e1c4aab964104c8754fa7a082ea0d551b2b1678661d93552808eb04948e164d1763dd6bbb76d6f429179b0591b5c43947298f6874f94e74b0686784a83e3d31806e61dd3192f25114e03ccf493cbcff6c89eb90ade087deeba36128b85dff8174ed9d65c13c3174c09222ce221a0492f3a47cdd0b7e56135c4c41339ebfa468044234256dbc942102ae52886730650dfedba238614744abeda70ca9c440cfafb87d77cbe0e327b829b943e196e7fc6ef02065198127d1cb5618b71958a378bea0c94ce8d662d8f89adfd46c55ee7526ed7d251249358e04163af661446b11300239166d34073fe5203e3d99a156ef775216656351ebd852f08e16cadc75d69f9b1d9f7452c7e84c9c123d08490ee207ee60d535593f9e16c344567fc7a8faf40bab41ba5bfcd32fd50f933a760c7b78cd6d673e27856e06500f61362ca543520ba968d4f0998273b90dced5fc071108a7c340986121fca491b91727623914b355aeb98ee01ec4ae589b33e77db77845927d7ba1ec1aaa19e0c67df5f80a080839dabda33b5342cca997b7214df9d69b3bf599c7d13ef7f5ce4c280b23b1479708a70ae6166ac04f1778d01649a49b610654cedca63c65bcd5704cf1b79e502c908b9f0839e4c7574593cbdc514cd9511c7e7b484c6ca184fca710a86c3d2950ede8d9cdc4724f3efb7cebd124de6491fa6287d98354e94860c1cfe27b43ec3db1ee3dc99d720d0339bbae1539436b0a1d62cfbe577eb021fe12453d8de19990fc1070d1b7856e0926ffa967ff672a308315ffc5086a556e3f3e04a5cc90dc1505442227bea41edaecb240e914d6bfc182bfbfda6a74ffa0b2117149e4a7df7f24e26ee6e965fa71f43959aa116f9e3fee7c271f9c7373fcb7439fc87594048fa97fe93728b31ec3217bcc1fabcc434f31b933329c79d80325112c6f6f8b3b5709add2db5ac3901cd60b1b6137e0b0a410e447b8c69e49abe288a188743926104ea3ca8008e7b1265ef84e7f0bbc3143c11d589a769008139386c75a9bf5a4eda340a3d8f4e09db4235f2f87e8d13b282c90113b05091e3ce5f826a011e48e2d1f622e68bcab1d0301a4b366ca67a2ec6e16f7bee17f3d631be0d506b8b1f21bd36a4ba61120775b01d28eab1bf308871e1132ca07358984342d60edd310a72c69a98323dc384f85ac7cd7a60cbc183e2b6ab7840396f71f58f38d2d6eeb764adf1234129242c19bc2ef19ca58c6bfbdeffa27b816777ccdc64aa921531c5399db2026831c6fa3590c4a7e15d4f10cc1ed10ae10bc96c97ed282b1f8b4ef1e4ee89a9e33dc2eed9100f3e718767083d31a4a36340d576821d5fd327daa5c940652ca6337c79b4c923726702f3fec7eb89dca55a6aaa2f191ecccee467913c46b2e8eb093fdc96ca1bb5aa815546280e0d34d087517fce65c005b6a5339206833df378637a5c54835a5b61e6044bd459481de3ed4a51257e2835ea66b052a944367fd1f31a3b8c672f6e7bd264392131e9a4ea29812c2b563f2127afad83543f66fe7def73c566474f11ffe95cc47b2919ef1730688c580a0576c5f42e9e8f9ca1c592444f6009a20caf708c660c9f583bdaec08b815274bfbe081c97abf257abde50cbdf4d8470a3cd6fb2a8987d5cd6bfdae52eed61dde29700f04aa6b10602161f486cb4db61b621237bc6df64a0910ea87508b8dbdfafa2824dcbc045ffa8c589311fa9f7d95c6b3f9743dd388c728289ea0fbb4b87f3d5c6eee5b3446c282876f18e69b976231db8ec8a02bc52f62461c15d1dc5cc91b2d7ca07a09fc98a8ea6186338b819cc672bbca243f9d4892816e05cc5ef613ace573e92a97acd94384c5e47bc6638a6dad1cda217367e6560c09795d1abcc6a09ce32592bf87fc66f4e279788a086e8c3219a63dc135d60868112e3f05a835a7d17c0107a5a64c203bd6a3fa1a5c882550ad329ba8cd557d1141815b43363b611affdc17862e5c8ee0944e1bc08ad76823cb3389aa47965cd012ad314c708b4c13e5d85b94fa9c670430ec1573ce77a5f6ea6fd06beef216ccd934bf3bbeabab9be40daa245bf8fa332bb075b7a67928ecc4c96927ff3dfa2fd41579726c59fa71450ea6030d26792a90cf66f5e94844e53dcc3d6b0165938d697be15333858a5cfa1917920fb4b80c2959d8c0b56dd85a9f030882462e3d4c4ea25caa0e9efb9999966fed80037538b5eb7e80281a8513e767e7f28335b6e8df2f8fabe082573c91836c5db919cf42154855f3e5d87b4b1e396bbbcd9430367b34f946f0c87342d84d38444472ca80cb8c8a9389039009b8814cdcfeee69042820f4209885bd0fb75d8444ed03d54f045bbce8ab66aaddec641639b817017909167a4616caf990d378b7dde9ae94dabf86729894c09d4cfc429cd6be138b7f3498786d7ed3ee6beb180d5f0890b7a8112995c9decb5b1c274b1a497d96d2e73be4c69c03a25aa9b53f888ea2bc2307edc8edc17da82ff69ccf967bd17823287d7ea684d412b953eae8374dcb22c7871334c8976e9597c219680f619b1f9f3f5cb4e795baaf95fd365b08677dd386d15e4941d940d552f50ed769f8b5a82b13d9b09f37006676f402429b2eb406bd2500c6cb260d125de50432af318d1c5feb57e625b1bc0106f8ec98426854767f92bdafbf7be2b63b2f0cfc8cd68cd6f4388598eb81a736e804f2e219f9b642732ee9a4e758aa0632d9ead9d0eb2a430fdec9617679ae4b038e027f239d351e0be3f381a083b4a2fc1336103aedb4f216a608fe8c1bcd3b91194d03e74322de4f61222fb2d4f6a3249b9d86c1dbb585a1f82a6c6ccc053fe55af93fd148a60c76673557a451736cc525dd3ee9d025fe8c35b41e145e4cc9bb15cef8639017387d531593f174fb7909a3c2ba54263fe2efa0bcd370874319317bcfc48d6b5a9653cbf0d16c8d0fe29c5ac6a08307a478025ae6d7bbae323a479704b4da761e2fd2bce340a58880444cb4c03fad9c93489326a1e219feab986e58fe1bc4bfe64628894530a6da1f955ba5fcf51b899691c2ce341959ce1ade50d4c57bea0cd9010fa9240419149b2c49d06bdad59c2f6c2b535e784fc7db0242c35d56378a05f98525271e555b522a9722c76e3af13266558717ecc8914c27e4d5606f547e607e73e2339292151f5e454a9b99e0e5328ce37782174f4b5ab3b3dbf921cbafde8ad5a653e6541733af1dd2bf0f788a60a785807daf9dbb1b6dfc999e941cd37ebad84cbb27b6a81ee916b7576bce21a3a2b8b2ec8d016f48eae5f4bcd0195cb7f78b00ca529c4e529e3558c6ea0d0b012c7d8fb0b76d6f2f6a8c51994f2e26c4c77ff023d39838566231e3679a30abef42584f3a89c4799b3997369df88d79bf5bd0a75b6a798794435a88c10e7d5fde8685843e2cc6608ab5929201045c995c1c63201776f29aa36cd35eac2e749fb40515e859c33b197a12204b12070889a2ec922c192a9e5cd938e746f60c88c4a664e4dd0c4cd0125d582284bb0ad68e67b1f81236d767aa478756f1d1ed45e05554b7f87a1f14394b0862372db4929728a6bbcc1c6970fa518c8d9db4c90df5f2ee689e08c9600363373d1f51e2acaea86c8b78021e32525d188033a9d881d1c69461e14a474384e4b00363bb3eaff100f203dae19f62f7136c86827b7eabcfe258efb56d361fa18e37f92e989832b4177894b2e65408e1dcf5906990831f542451fc340e3732e502127800dbca2a47e46c966de22cfec0f3a4dd59f0f11fcd5baffb8d7acbf1bca1c5be2a4c4e7ad7f632527655aabad543260f5832850c00115f7749f8d32425d5ea03d71387a593cf87c1f828ff4cbc5dc7c7e18bc0a49cd23513340e33284af44891e662bacb6f0acfed2a0db226efa7b9fd1e79d7936c202a802d2b90a58188985b1c6dbbfa1fe265fedbfd9433af6595d8cd110250c10353f91a446b314bfc9350eaf4eb5312ee781490bd5d25b22dfb5a048e8bd3de14fdf3a265caaf7e7a42ede1a3fe57e15039779574dc5d62e229fa9efc9c24e17ee46a86f230eabcabc7487fa4462d8959b7ff439bc24e5250ab0ab83e1123935b9df81162830f244ed98e2ffdad579d0ffd9db85bc5e050ce18c9cf6baaebceea9c1e83fbe49c46aad8989a290a4dd6c4e6afc6e0171a435ad71e85145a597b0473c1022ec31ae940cf78a9a861abd0c8914f9a1d900b7b8806cd6a71433294d627d7fc81ed79e7f5f4fd64da183963f7a3dd6f9e88babd8d4fd052f5e01aaaf690532c56d413b1a4394bff22d570f089834b98a41e2a49ed5bf6074ae15baf25f74e589f38aeaec286e1ead51a8cf2ae967f1344e3c80a83e4da46f77cb0fa77d35620dc8d6f820a4f7f150e641a3b900d0f2a7acd74f705d133becee9dfad350732f2b48816a96b456127538f334c8739b087ef622b3b483865fd48b13b2078c256070dfcc5b2898dcb5b9aeabfcbffe716fa2f95d66d3ccf0c38087e7e1d3271dee8009f4ac500d17b850e1b9bebc1ee7700225ddbb0b3305b1418d4d92f2fb39b1dfcffb8a97b5405b61e470e71f49826a75736a4f6dfd039092cc7b6d022c5c55ed24f750e8d0106a9359c8b", 0x1000}], 0x1, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x30}, 0x40) [ 834.139290][T15032] [EXFAT] trying to mount... [ 834.156401][T15032] [EXFAT] ffsMountVol failed [ 834.180252][T15038] FAULT_INJECTION: forcing a failure. [ 834.180252][T15038] name failslab, interval 1, probability 0, space 0, times 0 [ 834.192972][T15038] CPU: 0 PID: 15038 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 834.201674][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 834.211907][T15038] Call Trace: [ 834.215207][T15038] dump_stack+0x1d8/0x2f8 [ 834.219561][T15038] should_fail+0x555/0x770 [ 834.224019][T15038] __should_failslab+0x11a/0x160 [ 834.228954][T15038] should_failslab+0x9/0x20 [ 834.228967][T15038] kmem_cache_alloc_node+0x65/0x280 [ 834.228981][T15038] ? __alloc_skb+0x9f/0x500 [ 834.228992][T15038] __alloc_skb+0x9f/0x500 [ 834.229005][T15038] __pskb_copy_fclone+0xac/0x12b0 [ 834.229020][T15038] ? hsr_addr_subst_dest+0x211/0x4b0 [ 834.229034][T15038] hsr_forward_skb+0xca9/0x2040 [ 834.229059][T15038] hsr_dev_xmit+0x77/0x90 [ 834.238728][T15038] dev_hard_start_xmit+0x1c1/0x3f0 [ 834.272539][T15038] __dev_queue_xmit+0x1e53/0x3010 02:43:39 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b5, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) fcntl$setpipe(r2, 0x407, 0x40000000000000) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f00000000c0)="aa902f5a33492cba2cfbd6935b06961bea4a70e0f2b862b335ecef3f8b4963137ffea72188984413d2738d99273fb7ffe867ac3afd1f618ee2ddb2fcf4bd28ade075d8f875aac9ccfb898533748d9ec28cbc42308a15f13b2976e52e3fed44f6a68d53a37e1456c32d0ef7414edcd6d6f504c3043e0eee4c4710e767812ee028b420ef991af3972cd4f44d390278667115b9d7a2b29388c1555cf8aa2952f73a8143dcda862c1949ccb638fc84466975de40b875d17bcdfef6b8a0a8d1", 0xbd}], 0x2) [ 834.277597][T15038] dev_queue_xmit+0x17/0x20 [ 834.282116][T15038] neigh_connected_output+0x3df/0x410 [ 834.287514][T15038] ip_finish_output2+0x13be/0x18d0 [ 834.292729][T15038] ? ip_fraglist_prepare+0x2e5/0x590 [ 834.298035][T15038] ip_do_fragment+0x1528/0x1d10 [ 834.302887][T15038] ? ip_fragment+0x210/0x210 [ 834.307532][T15038] ? rcu_lock_release+0xd/0x30 [ 834.312300][T15038] ? ipv4_mtu+0x2bc/0x3c0 [ 834.314443][T15032] [EXFAT] trying to mount... [ 834.316640][T15038] ip_fragment+0x11f/0x210 [ 834.316657][T15038] __ip_finish_output+0x3fc/0x4b0 [ 834.316670][T15038] ip_finish_output+0x52/0x1e0 [ 834.316684][T15038] ? ip_mc_output+0x4c6/0x620 [ 834.340138][T15038] ip_mc_output+0x4db/0x620 [ 834.341413][T15032] [EXFAT] ffsMountVol failed [ 834.344652][T15038] ip_send_skb+0x126/0x1e0 [ 834.344669][T15038] ip_push_pending_frames+0x66/0x80 [ 834.344683][T15038] raw_sendmsg+0x1e06/0x3790 [ 834.344732][T15038] inet_sendmsg+0x147/0x310 [ 834.367998][T15038] ? security_socket_sendmsg+0xa0/0xd0 [ 834.373724][T15038] ? inet_send_prepare+0x250/0x250 [ 834.378851][T15038] kernel_sendmsg+0x109/0x140 [ 834.383537][T15038] sock_no_sendpage+0x100/0x140 [ 834.388417][T15038] inet_sendpage+0x18c/0x340 [ 834.393000][T15038] ? inet_sendmsg+0x310/0x310 [ 834.397700][T15038] sock_sendpage+0xd3/0x120 [ 834.402208][T15038] pipe_to_sendpage+0x1f9/0x2a0 [ 834.407035][T15038] ? sock_fasync+0x100/0x100 [ 834.411790][T15038] __splice_from_pipe+0x2f7/0x8a0 [ 834.416796][T15038] ? generic_splice_sendpage+0x180/0x180 [ 834.422420][T15038] generic_splice_sendpage+0x114/0x180 [ 834.427960][T15038] ? iter_file_splice_write+0xe20/0xe20 [ 834.433497][T15038] __se_sys_splice+0x71a/0x1ac0 [ 834.438342][T15038] ? check_preemption_disabled+0xb7/0x2a0 [ 834.444843][T15038] ? debug_smp_processor_id+0x1c/0x20 [ 834.450890][T15038] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 834.456964][T15038] __x64_sys_splice+0xe5/0x100 [ 834.462173][T15038] do_syscall_64+0xf7/0x1c0 [ 834.467352][T15038] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 834.473226][T15038] RIP: 0033:0x459f49 [ 834.477115][T15038] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 834.496797][T15038] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 834.505194][T15038] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 834.513245][T15038] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 834.521205][T15038] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 834.529159][T15038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 834.537109][T15038] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 834.575911][T15081] 9pnet: Could not find request transport: xen [ 834.597087][T15081] 9pnet: Insufficient options for proto=fd [ 834.614560][T15081] 9pnet: Could not find request transport: xen 02:43:39 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="3c77df0100fe160256ebe1c6679ed71731ba00", @ANYRESHEX=r0, @ANYBLOB=',\x00']) [ 834.630566][T15106] 9pnet: Insufficient options for proto=fd 02:43:39 executing program 5 (fault-call:7 fault-nth:75): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:39 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x121080, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f00bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd6352664616099384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f00"/164], 0xa4) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x30}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)={r3, 0x0, 0x5, [0x9026, 0x55, 0xffc0, 0xfffb, 0xfffc]}, &(0x7f0000000640)=0x12) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000680)={r4, 0xff}, &(0x7f00000006c0)=0x8) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000005c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) r6 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x0) write$uinput_user_dev(r6, &(0x7f00000000c0)={'syz0\x00', {0x4, 0xfff, 0x7, 0x80}, 0x42, [0x103, 0x4, 0x7, 0x8, 0x800, 0x1, 0x1, 0x6f, 0x947, 0xfffffdfa, 0x3, 0x5, 0x8001, 0x200, 0x7fff, 0x8, 0x40, 0x5, 0x6, 0x7, 0x7, 0x2, 0x8, 0x1ff, 0x40, 0x80000000, 0x9, 0x10001, 0xc0000000, 0x7, 0xffff, 0x7, 0x10000, 0xf0a3, 0x5, 0x401, 0x7, 0x1, 0xffff, 0x2, 0xc00d, 0x300b5d9f, 0x101, 0x6, 0x6, 0x5, 0xfffffeff, 0x8, 0x2, 0x3, 0xfff, 0x1, 0x6e0, 0x6, 0x8, 0x1a, 0xffffffe0, 0x472, 0x2, 0x1, 0x955, 0x8000, 0x3, 0x2], [0x3, 0x2, 0xff, 0x1ff, 0x5, 0x73a9, 0x1ff, 0x6bbe, 0x7, 0x8535, 0x2, 0xb914, 0x7, 0x0, 0x3ff, 0x6, 0xffffffff, 0x400, 0x1, 0x80000001, 0x44, 0x7f, 0x1, 0xd5aa, 0x1, 0x2, 0xaf6, 0x0, 0x9, 0x101, 0x1b, 0x3, 0x4, 0x9, 0x7, 0x3c8, 0x1, 0x3ff, 0x2e4c, 0x4, 0xfff, 0x10001, 0x10001, 0x6, 0x8, 0xab, 0x100, 0x8, 0x7, 0x6, 0xffff, 0x6, 0x401, 0x46, 0x3, 0x80000001, 0x6, 0x6, 0xf0c, 0x100, 0x9, 0x101, 0x3d77, 0x1], [0x8, 0x981, 0x4, 0x3ff, 0x5, 0x3, 0x2, 0x7, 0x6, 0x800, 0x2, 0x2, 0x8001, 0x2, 0x40, 0x7, 0x2d, 0x1, 0x8, 0x2, 0x7, 0x3, 0x8, 0x9d80, 0x5, 0x6, 0x2, 0xfb4f, 0x9, 0x200, 0x4, 0x6, 0x71, 0x7ff, 0x7, 0x7bf6, 0x0, 0x876, 0x8, 0x8, 0xf31e, 0x9, 0xdf60, 0x4, 0x6, 0x6, 0x4, 0x2, 0xfffffff7, 0x7, 0x1, 0x0, 0x3, 0x2, 0x1, 0x3, 0x9f7, 0xc8e2, 0x7, 0x860, 0x66, 0x6, 0xffffffe1, 0x1], [0x0, 0xc4, 0xce, 0x200, 0x529, 0x6, 0x768c, 0x2, 0x0, 0xfffffffd, 0x5, 0x6, 0x1, 0x0, 0x5, 0x2, 0x0, 0x20000000, 0x0, 0x80, 0x5, 0x7, 0x3c94, 0x6, 0x6000000, 0x0, 0x68, 0x2, 0x49, 0x3, 0x80, 0x9, 0xffff, 0xffff, 0x0, 0x0, 0x0, 0x1, 0x3, 0xffff5e35, 0x7ff, 0x81, 0x10001, 0x100, 0x7ff, 0x10001, 0x0, 0xf0, 0x3ff, 0x7, 0x8, 0x1, 0xbf, 0x80, 0x9, 0x1f, 0x7fffffff, 0x10000, 0x1ff, 0x8001, 0x9, 0x1f, 0x0, 0x5]}, 0x45c) 02:43:39 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b6, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:39 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) 02:43:39 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x4724b4f474b7fc53, 0x0) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000000c0)=0xfc2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r7, 0x0, 0x30}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)={r7, 0x5, 0x1000, "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"}, 0x1008) 02:43:39 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3d66242c726664896424", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="0182a88b489a719e85426d42a669f2999303690d1600097bb91f6b8a3be9e704e7ed3fd9f2416413dacf2da9c968719b9a444e27e09a8561c96812d616eb1f7b9c"]) 02:43:39 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) [ 834.996849][T15179] [EXFAT] trying to mount... [ 835.005203][T15179] [EXFAT] ffsMountVol failed [ 835.014313][T15179] [EXFAT] trying to mount... [ 835.035068][T15179] [EXFAT] ffsMountVol failed [ 835.063744][T15281] FAULT_INJECTION: forcing a failure. [ 835.063744][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 835.076463][T15281] CPU: 1 PID: 15281 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 835.084357][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 835.094434][T15281] Call Trace: [ 835.097746][T15281] dump_stack+0x1d8/0x2f8 [ 835.102092][T15281] should_fail+0x555/0x770 [ 835.106537][T15281] __should_failslab+0x11a/0x160 02:43:40 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x3884022, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}, {@metacopy_on='metacopy=on'}, {@nfs_export_off='nfs_export=off'}, {@nfs_export_on='nfs_export=on'}, {@metacopy_off='metacopy=off'}], [{@fowner_lt={'fowner<', r0}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_eq={'euid', 0x3d, r2}}, {@obj_user={'obj_user', 0x3d, ',{'}}, {@pcr={'pcr', 0x3d, 0x2}}]}) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 835.111494][T15281] should_failslab+0x9/0x20 [ 835.116088][T15281] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 835.121973][T15281] ? __kmalloc_node_track_caller+0x3c/0x60 [ 835.121986][T15281] __kmalloc_node_track_caller+0x3c/0x60 [ 835.121997][T15281] ? __pskb_copy_fclone+0xac/0x12b0 [ 835.122010][T15281] __alloc_skb+0xe8/0x500 [ 835.122024][T15281] __pskb_copy_fclone+0xac/0x12b0 [ 835.148819][T15281] ? hsr_addr_subst_dest+0x211/0x4b0 [ 835.154188][T15281] hsr_forward_skb+0xca9/0x2040 [ 835.159061][T15281] hsr_dev_xmit+0x77/0x90 [ 835.163504][T15281] dev_hard_start_xmit+0x1c1/0x3f0 [ 835.168622][T15281] __dev_queue_xmit+0x1e53/0x3010 [ 835.173661][T15281] dev_queue_xmit+0x17/0x20 [ 835.178173][T15281] neigh_connected_output+0x3df/0x410 [ 835.183548][T15281] ip_finish_output2+0x13be/0x18d0 [ 835.188653][T15281] ? ip_fraglist_prepare+0x2e5/0x590 [ 835.194032][T15281] ip_do_fragment+0x1528/0x1d10 [ 835.198890][T15281] ? ip_fragment+0x210/0x210 [ 835.203527][T15281] ? rcu_lock_release+0xd/0x30 [ 835.208305][T15281] ? ipv4_mtu+0x2bc/0x3c0 [ 835.212764][T15281] ip_fragment+0x11f/0x210 [ 835.217279][T15281] __ip_finish_output+0x3fc/0x4b0 [ 835.222417][T15281] ip_finish_output+0x52/0x1e0 [ 835.227181][T15281] ? ip_mc_output+0x4c6/0x620 [ 835.231874][T15281] ip_mc_output+0x4db/0x620 [ 835.236394][T15281] ip_send_skb+0x126/0x1e0 [ 835.240817][T15281] ip_push_pending_frames+0x66/0x80 [ 835.246011][T15281] raw_sendmsg+0x1e06/0x3790 [ 835.250602][T15281] inet_sendmsg+0x147/0x310 [ 835.255100][T15281] ? security_socket_sendmsg+0xa0/0xd0 [ 835.260556][T15281] ? inet_send_prepare+0x250/0x250 [ 835.265785][T15281] kernel_sendmsg+0x109/0x140 [ 835.270670][T15281] sock_no_sendpage+0x100/0x140 [ 835.275687][T15281] inet_sendpage+0x18c/0x340 [ 835.280267][T15281] ? inet_sendmsg+0x310/0x310 [ 835.284933][T15281] sock_sendpage+0xd3/0x120 [ 835.289496][T15281] pipe_to_sendpage+0x1f9/0x2a0 [ 835.294361][T15281] ? sock_fasync+0x100/0x100 [ 835.298947][T15281] __splice_from_pipe+0x2f7/0x8a0 [ 835.303961][T15281] ? generic_splice_sendpage+0x180/0x180 [ 835.309590][T15281] generic_splice_sendpage+0x114/0x180 [ 835.315036][T15281] ? iter_file_splice_write+0xe20/0xe20 [ 835.320570][T15281] __se_sys_splice+0x71a/0x1ac0 [ 835.325413][T15281] ? check_preemption_disabled+0xb7/0x2a0 [ 835.331145][T15281] ? debug_smp_processor_id+0x1c/0x20 [ 835.336710][T15281] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 835.342878][T15281] __x64_sys_splice+0xe5/0x100 [ 835.347659][T15281] do_syscall_64+0xf7/0x1c0 [ 835.352149][T15281] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 835.358201][T15281] RIP: 0033:0x459f49 [ 835.362089][T15281] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 835.381883][T15281] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 835.390284][T15281] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 835.398360][T15281] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 835.406325][T15281] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:40 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b7, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 835.414293][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 835.422346][T15281] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000a9126f038ce429cc202091118ef816d3a619a09bd65ff5472608eb31d85edeea26d8f59d589cd81844b68ef2016333240c484d9de4f457f7773eceed907abde9bbf275c7a18827367f0da23513bc967d1a739d79ce06a80714f2bc41efd293acc19b76620ad55e3e68d802e678501bafc1a7251acd57915f42eef83680e5d8a7f6bd9ce69ad4512b26ccb3a41dcde1fbd34ecc26efa72fe7dead1cd20bce969c99262cdd0bf2614ad9347c28341857518202ee446e56000000000000000048ab227cb7eb5b11663b"], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:40 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b8, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 835.534852][T15420] [EXFAT] trying to mount... [ 835.542665][T15420] [EXFAT] ffsMountVol failed 02:43:40 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x81, 0x20, 0x2, 0xff}, 0x6) [ 835.658135][T15531] [EXFAT] trying to mount... [ 835.663322][T15531] [EXFAT] ffsMountVol failed [ 835.679130][T15531] [EXFAT] trying to mount... [ 835.684178][T15531] [EXFAT] ffsMountVol failed 02:43:40 executing program 5 (fault-call:7 fault-nth:76): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:40 executing program 2: r0 = open(&(0x7f0000000080)='./file0\x00', 0x20002, 0x110) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0xfffff001, 0x9, 0x1, 'queue1\x00', 0x8000}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000080)=ANY=[]) 02:43:40 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87b9, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:40 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2701ff073000"], &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='exfat\x00', 0x1060, 0x0) open(&(0x7f0000000040)='./file0/file0\x00', 0x101840, 0x0) 02:43:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="e34f268101debe367824a31adf87ff0f728b1f07bfb3222bfbc2d7673aec3045ba22891a888095020000007706be75ad00f93ca409e11128fa8949269daec3141165103f81728efac0f2095794a12c177b5064016f3b9b67e6bfb9523c782f01e7ae384ea2fbef1bd635266461605744c2a389384725886b736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f000000000000008ff7bdaf81ef000000ed6b206f420000000000000000000000003f8e6bb8fe1333196370250e10fee699fd7f475e3b84d7b14f16c0bae935db92d778b6607affc89b4a602e158a29c9fc4d955156a6bbfbb9846f2a7fbfa89145600554826aaa0640948d2af814727455b04e3dd152d14a5b2c156b34f3252d586a0b76ea9d03aff2"], 0xa4) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000280)) r3 = dup(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000140)="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", 0x137}], 0x2) truncate(&(0x7f0000000100)='./bus\x00', 0x7ff) 02:43:40 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x9346636a3faaf498, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 02:43:40 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x9, 0x1, {0x0, 0x2, 0x5, 0x1, 0x7fff}}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f0000000040), 0x2) [ 835.975509][T15767] FAULT_INJECTION: forcing a failure. [ 835.975509][T15767] name failslab, interval 1, probability 0, space 0, times 0 [ 835.988266][T15767] CPU: 1 PID: 15767 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 835.996164][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.006208][T15767] Call Trace: [ 836.006227][T15767] dump_stack+0x1d8/0x2f8 [ 836.006244][T15767] should_fail+0x555/0x770 [ 836.006264][T15767] __should_failslab+0x11a/0x160 [ 836.006279][T15767] should_failslab+0x9/0x20 [ 836.006290][T15767] kmem_cache_alloc_node+0x65/0x280 [ 836.006299][T15767] ? __alloc_skb+0x9f/0x500 [ 836.006308][T15767] ? mark_lock+0x107/0x1650 [ 836.006321][T15767] __alloc_skb+0x9f/0x500 [ 836.046933][T15767] __pskb_copy_fclone+0xac/0x12b0 [ 836.051969][T15767] ? lockdep_hardirqs_on+0x295/0x7d0 [ 836.057290][T15767] hsr_forward_skb+0xca9/0x2040 [ 836.062168][T15767] ? hsr_port_get_hsr+0xc6/0xf0 [ 836.067028][T15767] hsr_dev_xmit+0x77/0x90 [ 836.071631][T15767] dev_hard_start_xmit+0x1c1/0x3f0 [ 836.077277][T15767] __dev_queue_xmit+0x1e53/0x3010 [ 836.082504][T15767] dev_queue_xmit+0x17/0x20 [ 836.087019][T15767] neigh_connected_output+0x3df/0x410 [ 836.092412][T15767] ip_finish_output2+0x13be/0x18d0 [ 836.097532][T15767] ? ip_fraglist_prepare+0x300/0x590 [ 836.102813][T15767] ip_do_fragment+0x1528/0x1d10 [ 836.102822][T15767] ? ip_fragment+0x210/0x210 [ 836.102845][T15767] ? rcu_lock_release+0xd/0x30 [ 836.102853][T15767] ? ipv4_mtu+0x2bc/0x3c0 [ 836.102865][T15767] ip_fragment+0x11f/0x210 02:43:41 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000500)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES64=r2, @ANYBLOB="ed8052055f8c4549cdf353d38595e2ad14a54a211f78239b7fad6d5825790304a1748c845d44f2519641ab6c9d2e3f30bbefdcc6c111ff9021cf0d98ea5d8999da863a8c81f49d600e700222fc8d5f97d223318375d77bf1e4665088669453ec9183eeccd280ba1cf0326651fad4d458db2f47755d42a658b4431d34defd213780a030a362973dea4deae8165662d44a8dd430c8243a3d8138b02f63ae696a7c14255261d33ea50b87791552d8124f4faac56ab6043f47eff82823a6555593c8b6986dbef48851bfd2", @ANYPTR, @ANYRESOCT=0x0, @ANYRES64=r5], 0x113) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x6) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@appraise_type='appraise_type=imasig'}, {@uid_lt={'uid<', r9}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fowner_lt={'fowner<', r7}}]}}) [ 836.125847][T15767] __ip_finish_output+0x3fc/0x4b0 [ 836.130884][T15767] ip_finish_output+0x52/0x1e0 [ 836.135656][T15767] ? ip_mc_output+0x4c6/0x620 [ 836.140360][T15767] ip_mc_output+0x4db/0x620 [ 836.145061][T15767] ip_send_skb+0x126/0x1e0 [ 836.149504][T15767] ip_push_pending_frames+0x66/0x80 [ 836.154716][T15767] raw_sendmsg+0x1e06/0x3790 [ 836.159361][T15767] inet_sendmsg+0x147/0x310 [ 836.163871][T15767] ? security_socket_sendmsg+0xa0/0xd0 [ 836.169322][T15767] ? inet_send_prepare+0x250/0x250 02:43:41 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) mount(&(0x7f0000000080)=@sr0='/dev/sr0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x20000, &(0x7f0000000140)='bpf\x00') 02:43:41 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87ba, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 836.174528][T15767] kernel_sendmsg+0x109/0x140 [ 836.179296][T15767] sock_no_sendpage+0x100/0x140 [ 836.179318][T15767] inet_sendpage+0x18c/0x340 [ 836.179333][T15767] ? inet_sendmsg+0x310/0x310 [ 836.193462][T15767] sock_sendpage+0xd3/0x120 [ 836.197977][T15767] pipe_to_sendpage+0x1f9/0x2a0 [ 836.202832][T15767] ? sock_fasync+0x100/0x100 [ 836.207428][T15767] __splice_from_pipe+0x2f7/0x8a0 [ 836.212453][T15767] ? generic_splice_sendpage+0x180/0x180 [ 836.218098][T15767] generic_splice_sendpage+0x114/0x180 02:43:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1000000000000, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) [ 836.218113][T15767] ? iter_file_splice_write+0xe20/0xe20 [ 836.218126][T15767] __se_sys_splice+0x71a/0x1ac0 [ 836.234135][T15767] ? check_preemption_disabled+0xb7/0x2a0 [ 836.243729][T15767] ? debug_smp_processor_id+0x1c/0x20 [ 836.249134][T15767] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 836.255222][T15767] __x64_sys_splice+0xe5/0x100 [ 836.255241][T15767] do_syscall_64+0xf7/0x1c0 [ 836.255256][T15767] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 836.255267][T15767] RIP: 0033:0x459f49 [ 836.255279][T15767] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 836.255283][T15767] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 836.274317][T15767] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 836.274324][T15767] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 836.274330][T15767] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 02:43:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f00000000c0)={{0x40, 0x2}, 0x2}, 0x10) clock_gettime(0x0, &(0x7f0000000140)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) [ 836.274336][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 836.274343][T15767] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 [ 836.321719][T15784] [EXFAT] trying to mount... [ 836.355708][T15784] [EXFAT] ffsMountVol failed 02:43:41 executing program 5 (fault-call:7 fault-nth:77): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:41 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x100, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0_to_bond\x00', {0x2, 0x4e20, @multicast1}}) 02:43:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f00000000c0), &(0x7f0000000100)=0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) 02:43:41 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87bb, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 836.820349][T15970] FAULT_INJECTION: forcing a failure. [ 836.820349][T15970] name failslab, interval 1, probability 0, space 0, times 0 [ 836.849766][T15970] CPU: 0 PID: 15970 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 836.857711][T15970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 836.867812][T15970] Call Trace: [ 836.871128][T15970] dump_stack+0x1d8/0x2f8 [ 836.875480][T15970] should_fail+0x555/0x770 [ 836.879917][T15970] __should_failslab+0x11a/0x160 [ 836.884888][T15970] ? dst_alloc+0x173/0x580 [ 836.889323][T15970] should_failslab+0x9/0x20 [ 836.893838][T15970] kmem_cache_alloc+0x56/0x2e0 [ 836.898612][T15970] dst_alloc+0x173/0x580 [ 836.903235][T15970] ip_route_output_key_hash_rcu+0x1935/0x26b0 [ 836.909328][T15970] ip_route_output_key_hash+0x14e/0x260 [ 836.914907][T15970] ip_route_output_flow+0x29/0xc0 [ 836.920121][T15970] ? security_sk_classify_flow+0x8f/0xa0 [ 836.925769][T15970] raw_sendmsg+0x13a5/0x3790 [ 836.930408][T15970] inet_sendmsg+0x147/0x310 [ 836.934922][T15970] ? security_socket_sendmsg+0xa0/0xd0 [ 836.940392][T15970] ? inet_send_prepare+0x250/0x250 [ 836.945522][T15970] kernel_sendmsg+0x109/0x140 [ 836.950217][T15970] sock_no_sendpage+0x100/0x140 [ 836.955117][T15970] inet_sendpage+0x18c/0x340 [ 836.959816][T15970] ? inet_sendmsg+0x310/0x310 [ 836.964591][T15970] sock_sendpage+0xd3/0x120 [ 836.969120][T15970] pipe_to_sendpage+0x1f9/0x2a0 [ 836.973982][T15970] ? sock_fasync+0x100/0x100 [ 836.978584][T15970] __splice_from_pipe+0x2f7/0x8a0 [ 836.983615][T15970] ? generic_splice_sendpage+0x180/0x180 [ 836.989267][T15970] generic_splice_sendpage+0x114/0x180 [ 836.994729][T15970] ? iter_file_splice_write+0xe20/0xe20 [ 837.000280][T15970] __se_sys_splice+0x71a/0x1ac0 [ 837.005141][T15970] ? check_preemption_disabled+0xb7/0x2a0 [ 837.010876][T15970] ? debug_smp_processor_id+0x1c/0x20 [ 837.016247][T15970] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 837.016272][T15970] __x64_sys_splice+0xe5/0x100 [ 837.027163][T15970] do_syscall_64+0xf7/0x1c0 [ 837.031673][T15970] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 837.037583][T15970] RIP: 0033:0x459f49 [ 837.037595][T15970] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 837.037601][T15970] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 02:43:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="56a8da00d0", 0x31a}, {&(0x7f0000000340)}], 0xffffdd4) 02:43:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r0, r1) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x7ff, &(0x7f0000000080)=0x4) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) [ 837.037611][T15970] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 837.037617][T15970] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 837.037622][T15970] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 837.037632][T15970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 837.101440][T15970] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:42 executing program 3: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) 02:43:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = add_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="8902446da9e9c2463b4fdf0e69154e05e8d9010696e8e177a000e3a02c46f0ecef3f911aa8e3330243895c21ed40ba832f5fa26bcc0d9b946f0cc23ff1e0cb68a6f5296989a4c4bf68df5db66386048e515d0602b12815faf01c9b12e1745b2acf15e101dd9fa45f1f2a80b96fb3c194f3c1", 0x72, 0xffffffffffffffff) keyctl$clear(0x7, r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) getuid() 02:43:42 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87bc, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 02:43:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x60001) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10010, r3, 0x3007f000) r4 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100), 0x2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="56a8da00d0", 0x5}, {&(0x7f0000000340)}], 0x2) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v2={0x5, 0x3, 0x12, 0x6, 0x2c, "d16d96b12c00059e9dc70ec9564666d735b30c224c506e1e0c95a7966c6529894d3df88192433aef918e6af5"}, 0x36, 0x3) 02:43:42 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000040)={0x10}) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nullb='/dev/nullb0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) r1 = geteuid() fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f00000003c0)=ANY=[@ANYBLOB="aecf0000", @ANYRESHEX=r2, @ANYBLOB="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"]) chown(&(0x7f0000000000)='./file0\x00', r1, r2) [ 837.417987][T16036] [EXFAT] trying to mount... 02:43:42 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87bd, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 837.449604][T16036] [EXFAT] ffsMountVol failed 02:43:42 executing program 5 (fault-call:7 fault-nth:78): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 02:43:42 executing program 1: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB='/dev\t\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000001840)) 02:43:42 executing program 2: mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="736d61636b6673646566465d76626e78c7860f49a4c6ffe11a3cb5e24a8d0d175844dfd067f1954eba07f064c1a4a8d398a57e8cb5272f0612091ab398f8b3d4780cd595afd2c68c59913189b827dda90b89802417d63aaa157ee5da4aadeec35e6863b8e3827d846ab54a64bd343cfa7f2c"]) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r2 = accept4$tipc(r1, &(0x7f00000009c0)=@id, &(0x7f0000000a00)=0x10, 0x80000) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r6, 0x0, 0x1, &(0x7f00000003c0)='\x00', r7}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, r5, 0x0, 0x4, &(0x7f0000000a40)='bpf\x00', r7}, 0x30) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r11}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r12 = getpgrp(0x0) setpriority(0x0, r12, 0x100) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) clone3(&(0x7f0000000c40)={0x10400200, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)=0x0, 0x18, 0x0, &(0x7f0000000b80)=""/65, 0x41, &(0x7f0000000c00)=""/59}, 0x40) r16 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r16, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet_IP_IPSEC_POLICY(r16, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f0000000d80)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r18}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r19 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r19, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r20 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/rtc0\x00', 0x101000, 0x0) r21 = socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000e00)={0xffffffffffffffff}, 0x4c00) r23 = socket$pptp(0x18, 0x1, 0x2) r24 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r24, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r25 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r25, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r26 = fcntl$getown(r25, 0x9) stat(&(0x7f0000000e40)='./file0/file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r28}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) getgroups(0x2, &(0x7f0000000f00)=[r28, 0xee01]) r30 = getpgrp(0x0) setpriority(0x0, r30, 0x100) r31 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r31, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r32) r33 = getegid() r34 = getpgid(0xffffffffffffffff) r35 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r35, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) getsockopt$inet6_IPV6_XFRM_POLICY(r35, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001040)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r37}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r38 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r38, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r39 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r39, 0x0, 0x1, &(0x7f00000003c0)='\x00', r40}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003340)={0x0, r38, 0x0, 0x4, &(0x7f0000003300)='bpf\x00', r40}, 0x30) stat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r43}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r44 = syz_open_dev$dri(&(0x7f0000003440)='/dev/dri/card#\x00', 0xfffffffffffffff9, 0x80480) r45 = socket$inet6_tcp(0xa, 0x1, 0x0) r46 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r46, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r47 = syz_open_dev$sndmidi(&(0x7f0000003480)='/dev/snd/midiC#D#\x00', 0x1, 0xa8040) r48 = syz_open_dev$video4linux(&(0x7f00000034c0)='/dev/v4l-subdev#\x00', 0x9, 0x88001) r49 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r49, 0xc0044306, &(0x7f0000000000)=0x670) ioctl$VIDIOC_ENUM_FRAMESIZES(r49, 0xc02c564a, 0x0) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) ptrace$setopts(0x7abb990919170921, r50, 0x0, 0x111) r51 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r51, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r52) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r53}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x30000, &(0x7f0000001b80)={[{@gid={'gid', 0x3d, r54}}], [{@subj_type={'subj_type', 0x3d, 'md5\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'devpts\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}) r55 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r55, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r56 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r56, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r57 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r57, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r58 = socket$bt_bnep(0x1f, 0x3, 0x4) r59 = socket$inet(0x2, 0xa, 0x3f) r60 = socket$caif_seqpacket(0x25, 0x5, 0x0) r61 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000003500)='/dev/mISDNtimer\x00', 0x6a000, 0x0) r62 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r62, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r63) r64 = getgid() r65 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r65, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r66 = openat$vfio(0xffffffffffffff9c, &(0x7f0000003540)='/dev/vfio/vfio\x00', 0x100, 0x0) r67 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$FUSE_DIRENTPLUS(r67, &(0x7f0000000240)=ANY=[@ANYBLOB="e3472681018cc909c9d42a44c35ea9debe367824a31adf87ff0f728b1f07bfb3220180dc7cadf59f332bfbc2d7673aec3045ba2258080823a5ff7d9d518ed3b5b389891a88809d020000007706be75ad00f93ca49daec3141165103f81728efa67e65db9523c782f01a2fbef1bd635266461605744c2a389269354882abea9806f99384725886bcfdf1c736faec5d0cb97e8c68da41a3eb9032a9fc9556b2363e57f0000"], 0xa4) r68 = accept4$inet6(r67, 0x0, &(0x7f0000003580), 0x466ba1d22479b8f0) r69 = openat$audio(0xffffffffffffff9c, &(0x7f00000035c0)='/dev/audio\x00', 0xa400, 0x0) r70 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r70, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r71 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003640)={&(0x7f0000003600)='./file0\x00', 0x0, 0x10}, 0x10) r72 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r72, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r73 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) ioctl$USBDEVFS_CONTROL(r73, 0xc0185500, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0}) r74 = openat$zero(0xffffffffffffff9c, &(0x7f0000003680)='/dev/zero\x00', 0x200, 0x0) sendmmsg$unix(r0, &(0x7f0000003800)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000100)="48d9079202aaab999eb78c065d9fe17f3ed0435fdf82c0b7060851aeaa75b03d55270845d519bb0472e7d1c82331ca48daa4615afdab211135d752e92dbca7eb641c0df37c5009371f9b38214ab2b25efc3fd4445e4f36fd48664377974d4998859bd43a96f27b3a86e231af81e4a3dfe19439865b9f8693156b8a6c28b92cd99b27a4765d2d11", 0x87}, {&(0x7f00000001c0)="c0cd2300a7b7d6614760ebb51e45d774e4a046f96a441b", 0x17}, {&(0x7f0000000200)="abc1418357d403aa0f77314faef618a7dec2658dc7c82c864a3410c42a056434d8e06c540ca3e580da285f292fa241f8ec6dd93729e453d3f6acb7080cc0aed098258d1389165392068dc5f11f2dfd8102528b7d16344d7bf2aa0f1580a6c4c92b49a081ac52c6b1a04b7111ec570c3a29f74575997c6f71859a36d31e", 0x7d}], 0x4, 0x0, 0x0, 0x1}, {&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000340)="3fe050a191a8a851ddbf33a967cdaf4dbe09767d4ed84a9b1319fe13be33e3b3b715f0c07ef22ac05678eb82aa0f9e7746a421637bae71eeb4a45878ac6c5a80ae802c646e7e5695dbae34a2314b2f229b58403226f90cb376be46b959254e992eb884ed072406eb073ba0", 0x6b}, {&(0x7f00000003c0)="45932406a14ccaed3bbcbd44c17ab53e32c6223e497f51fd1b8127e86919d80e4e777fc7ec54932af6eddcf11d4c669db4b4501cd5e8568640b9612507a2", 0x3e}, {&(0x7f0000000400)="49bee7b63f658ae4009539b284ae1a2aadfc4e373537f456e681987e354b88f999cca621575cad693e136088d29b5750914624ed0b32f0676981dc96e318ab759c408233f336be5fdad825498a4a8d06fd9b7d1c8a06ef962117ce5288437e7732322e8172e7a63f79d093ce347a4d37245b06f95b0d33a8bb235cf206a6c1de8f4d55cc7cc7dc910c3f95492ee189925f2e4dac72122524212c09cb61bd818515852067fd2c91af21deb55296fc2ff65034d02f921b53b6b49edbda54add67657d04e54bc0e51d7b84a037a754a4b8e7b916d6de5c3613a845443e096b4", 0xde}, {&(0x7f00000005c0)="00a9207b2fd3e2be60097da3a033aed50a943376c0bbe423c67718c2c3c3cbc6bb373495b57a86e77038874e03d02bfd8f965c9bdfac844e45b0f139025adb6b3153233be0466b87362f8f97dd2a4b5e26936e4ddea6e179023d65ed067338bce553c8d38b0d18c792b17fd7db05194ed36a6787c72d6a16e3e4e5f75be3b2941025936f1d0d7c5c1336fc4f0a46d002af4863cfeed9514f8f503992fda696d7a60858bf0cae7f1acd10b3ff41", 0xad}, {&(0x7f0000000500)="05e7d23cee4c77c7df5de374532aeeac073dea00f890b48a629505ddf2d7ecc5f6d6c1f9", 0x24}, {&(0x7f0000000680)="8ce0125eba63ab7db55aab4e7d6b66efc9ce9def998790892d6cc10ed3ae39112d3135852485e9c2d520b2d1e8943450ee28adbb8c020eccdf2e2c0d8ef98568bd6d95acafeed056492d4bc7596fcd6f5be10d3071e8125df97e3f243bbabc668d22103f738d4864500431e227881b684293072aa7783421feaa7bd27438fbc89370a04967a62ca1ca2512e70178d493bd6b208acb8abb2888d9ba3c1f5acbc67aec9954644dba4fd8368aa9cc11ab2e0050956994128590aee2485bcb6473f4fdf5916c47d803df9ca9d1a0bf7c581864b01723d4ea4e37ddfc94138bb0741700f763", 0xe3}, {&(0x7f0000000780)="b76bf9a638da08fa4d264fed28e82d0159288a2a23c8f0f08fb1cc59b41e495b69091ff47849a99fe64eb420af46d8089bd0d9bb53065cb114221225c1a4955a6520d683393ed5af404551c37b6467ad1749f122cc24e30eb8567cf8f30e790e872451ff96293a20a9a64672c02ba9dee5218b1a5cdde3ac25810d36bc61dd475e692e47d2fc338d9175b0919c868abe1bc4f5bd7116a689c39fbd85739edef3a9e221a7caf701471aba29", 0xab}, {&(0x7f0000000840)="e99b5401ac5e5888a8bd5cf85a3483e24e8f5581e4c00d50f299e1b336b373e8573578b8de6e9325897995fa74b042cf6befeef1c20105833b11cffb2a2d85294a7123", 0x43}, {&(0x7f00000008c0)="181e7e665ed21aa115042a47230b1c30c4689f98c93ba9b2763bced1c4053f640dc0a23665640934d3204410b3ee39af", 0x30}], 0x9, &(0x7f0000001080)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}, @rights={{0x2c, 0x1, 0x1, [r19, r20, 0xffffffffffffffff, r21, r22, r23, r24]}}, @cred={{0x1c, 0x1, 0x2, {r26, r27, r29}}}, @cred={{0x1c, 0x1, 0x2, {r30, r32, r33}}}, @cred={{0x1c, 0x1, 0x2, {r34, r36, r37}}}], 0x110, 0x4000000}, {&(0x7f00000011c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)='7', 0x1}], 0x2, &(0x7f00000036c0)=[@cred={{0x1c, 0x1, 0x2, {r41, r42, r43}}}, @rights={{0x24, 0x1, 0x1, [r44, r45, r46, r47, r48]}}, @cred={{0x1c, 0x1, 0x2, {r50, r52, r53}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r54}}}, @rights={{0x14, 0x1, 0x1, [r55]}}, @rights={{0x28, 0x1, 0x1, [r56, r57, r58, r59, r60, r61]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r63, r64}}}, @rights={{0x34, 0x1, 0x1, [r65, r66, r68, r69, r70, r71, r72, r73, r74]}}], 0x120, 0x40}], 0x3, 0x801) 02:43:42 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87be, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 837.742677][T16167] FAULT_INJECTION: forcing a failure. [ 837.742677][T16167] name failslab, interval 1, probability 0, space 0, times 0 [ 837.755793][T16167] CPU: 1 PID: 16167 Comm: syz-executor.5 Not tainted 5.4.0-rc5+ #0 [ 837.763691][T16167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 837.773761][T16167] Call Trace: [ 837.777079][T16167] dump_stack+0x1d8/0x2f8 [ 837.781430][T16167] should_fail+0x555/0x770 [ 837.785844][T16167] __should_failslab+0x11a/0x160 [ 837.790962][T16167] should_failslab+0x9/0x20 [ 837.795459][T16167] kmem_cache_alloc_node_trace+0x6e/0x2d0 [ 837.801161][T16167] ? __kmalloc_node_track_caller+0x3c/0x60 [ 837.806951][T16167] __kmalloc_node_track_caller+0x3c/0x60 [ 837.812562][T16167] ? __pskb_copy_fclone+0xac/0x12b0 [ 837.817748][T16167] __alloc_skb+0xe8/0x500 [ 837.823016][T16167] __pskb_copy_fclone+0xac/0x12b0 [ 837.828021][T16167] ? lockdep_hardirqs_on+0x295/0x7d0 [ 837.833300][T16167] hsr_forward_skb+0xca9/0x2040 [ 837.838155][T16167] ? hsr_port_get_hsr+0xc6/0xf0 [ 837.842991][T16167] hsr_dev_xmit+0x77/0x90 [ 837.847309][T16167] dev_hard_start_xmit+0x1c1/0x3f0 [ 837.852404][T16167] __dev_queue_xmit+0x1e53/0x3010 [ 837.857505][T16167] dev_queue_xmit+0x17/0x20 [ 837.861989][T16167] neigh_connected_output+0x3df/0x410 [ 837.867349][T16167] ip_finish_output2+0x13be/0x18d0 [ 837.872456][T16167] ? ip_fraglist_prepare+0x2e5/0x590 [ 837.877728][T16167] ip_do_fragment+0x1528/0x1d10 [ 837.882571][T16167] ? ip_fragment+0x210/0x210 [ 837.887164][T16167] ? rcu_lock_release+0xd/0x30 [ 837.891912][T16167] ? ipv4_mtu+0x2bc/0x3c0 [ 837.896399][T16167] ip_fragment+0x11f/0x210 [ 837.900799][T16167] __ip_finish_output+0x3fc/0x4b0 [ 837.906065][T16167] ip_finish_output+0x52/0x1e0 [ 837.910813][T16167] ? ip_mc_output+0x4c6/0x620 [ 837.915769][T16167] ip_mc_output+0x4db/0x620 [ 837.920258][T16167] ip_send_skb+0x126/0x1e0 [ 837.924834][T16167] ip_push_pending_frames+0x66/0x80 [ 837.930009][T16167] raw_sendmsg+0x1e06/0x3790 [ 837.934616][T16167] inet_sendmsg+0x147/0x310 [ 837.939102][T16167] ? security_socket_sendmsg+0xa0/0xd0 [ 837.944539][T16167] ? inet_send_prepare+0x250/0x250 [ 837.949894][T16167] kernel_sendmsg+0x109/0x140 [ 837.954560][T16167] sock_no_sendpage+0x100/0x140 [ 837.959493][T16167] inet_sendpage+0x18c/0x340 [ 837.964073][T16167] ? inet_sendmsg+0x310/0x310 [ 837.968735][T16167] sock_sendpage+0xd3/0x120 [ 837.973232][T16167] pipe_to_sendpage+0x1f9/0x2a0 [ 837.978071][T16167] ? sock_fasync+0x100/0x100 [ 837.984120][T16167] __splice_from_pipe+0x2f7/0x8a0 [ 837.989147][T16167] ? generic_splice_sendpage+0x180/0x180 [ 837.994778][T16167] generic_splice_sendpage+0x114/0x180 [ 838.000227][T16167] ? iter_file_splice_write+0xe20/0xe20 [ 838.005849][T16167] __se_sys_splice+0x71a/0x1ac0 [ 838.010685][T16167] ? check_preemption_disabled+0x47/0x2a0 [ 838.016386][T16167] ? check_preemption_disabled+0x47/0x2a0 [ 838.022094][T16167] ? check_preemption_disabled+0x47/0x2a0 [ 838.027791][T16167] ? check_preemption_disabled+0x47/0x2a0 [ 838.033499][T16167] __x64_sys_splice+0xe5/0x100 [ 838.038245][T16167] do_syscall_64+0xf7/0x1c0 [ 838.042730][T16167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 838.048598][T16167] RIP: 0033:0x459f49 [ 838.052470][T16167] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 838.072053][T16167] RSP: 002b:00007f7de7df8c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 838.080449][T16167] RAX: ffffffffffffffda RBX: 00007f7de7df8c90 RCX: 0000000000459f49 [ 838.088410][T16167] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 838.096446][T16167] RBP: 000000000075bfc8 R08: 0000000000010005 R09: 0000000000000000 [ 838.104398][T16167] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7de7df96d4 [ 838.112883][T16167] R13: 00000000004c9c8b R14: 00000000004e0af8 R15: 0000000000000006 02:43:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) close(r0) 02:43:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize'}}]}) 02:43:43 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x44102, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000040)) mkdir(&(0x7f0000001240)='./file0\x00', 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='exfat\x00', 0x0, 0x0) 02:43:43 executing program 4: mremap(&(0x7f00002cf000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r1, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x87bf, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 838.348130][T16284] EXT4-fs (loop3): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 838.413913][T16291] [EXFAT] trying to mount... 02:43:43 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) acct(&(0x7f00000001c0)='./file0\x00') [ 838.490349][ T2501] block nbd1: Attempted send on invalid socket [ 838.498210][ T2501] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.510941][T16291] ------------[ cut here ]------------ 02:43:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{&(0x7f0000000180)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize'}}]}) 02:43:43 executing program 5 (fault-call:7 fault-nth:79): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r3 = socket$inet(0x2, 0x3, 0x29) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0)='hsr0\x00', 0x11d) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 838.550451][T16291] [EXFAT] No bh, device seems wrong or to be ejected. [ 838.591016][T16291] WARNING: CPU: 0 PID: 16291 at drivers/staging/exfat/exfat_blkdev.c:63 bdev_read+0x1ea/0x250 [ 838.601306][T16291] Kernel panic - not syncing: panic_on_warn set ... [ 838.608109][T16291] CPU: 0 PID: 16291 Comm: syz-executor.1 Not tainted 5.4.0-rc5+ #0 [ 838.616114][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 838.626190][T16291] Call Trace: [ 838.629498][T16291] dump_stack+0x1d8/0x2f8 [ 838.633842][T16291] panic+0x264/0x7a9 [ 838.637764][T16291] ? __warn+0x105/0x210 [ 838.641928][T16291] ? bdev_read+0x1ea/0x250 [ 838.646364][T16291] __warn+0x20e/0x210 [ 838.650357][T16291] ? bdev_read+0x1ea/0x250 [ 838.654775][T16291] report_bug+0x1b6/0x2f0 [ 838.659104][T16291] ? bdev_read+0x1ea/0x250 [ 838.663528][T16291] do_error_trap+0xd7/0x440 [ 838.668302][T16291] do_invalid_op+0x36/0x40 [ 838.672727][T16291] ? bdev_read+0x1ea/0x250 [ 838.674334][T16304] kobject: 'loop3' (000000000cbbeefa): kobject_uevent_env [ 838.677190][T16291] invalid_op+0x23/0x30 [ 838.677205][T16291] RIP: 0010:bdev_read+0x1ea/0x250 [ 838.677217][T16291] Code: 1f d4 fb b8 01 00 00 00 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 1f d4 fb 48 c7 c7 d0 c8 51 88 31 c0 e8 96 b8 a6 fb <0f> 0b eb d5 89 d9 80 e1 07 38 c1 0f 8c 7a fe ff ff 48 89 df e8 5d [ 838.677222][T16291] RSP: 0018:ffff88805c6a7780 EFLAGS: 00010246 [ 838.677231][T16291] RAX: 9defeec550492500 RBX: 0000000000000000 RCX: 0000000000040000 [ 838.677243][T16291] RDX: ffffc90014582000 RSI: 00000000000170f8 RDI: 00000000000170f9 [ 838.717757][T16300] Process accounting resumed [ 838.719190][T16291] RBP: ffff88805c6a77c0 R08: ffffffff815c8d24 R09: ffffed1015d46120 [ 838.719198][T16291] R10: ffffed1015d46120 R11: 0000000000000000 R12: ffff88801a060094 [ 838.719203][T16291] R13: ffff88801a068174 R14: ffff88805c6a7950 R15: 1ffff1100b8d4f2a [ 838.719228][T16291] ? vprintk_emit+0x2d4/0x3a0 [ 838.719251][T16291] sector_read+0x120/0x320 [ 838.719265][T16291] exfat_fill_super+0x11c3/0x27a0 [ 838.719294][T16291] ? __kasan_check_read+0x11/0x20 [ 838.719304][T16291] ? mark_lock+0x107/0x1650 [ 838.719318][T16291] ? __lock_acquire+0xc75/0x1be0 [ 838.719338][T16291] ? widen_string+0x40/0x390 [ 838.719354][T16291] ? string+0x2c7/0x2e0 [ 838.719367][T16291] ? bdev_name+0x2a6/0x3b0 [ 838.735104][T16304] kobject: 'loop3' (000000000cbbeefa): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 838.736092][T16291] ? pointer+0x1d3/0x9d0 [ 838.736113][T16291] ? vsnprintf+0x1b6e/0x1c00 [ 838.736137][T16291] ? snprintf+0x6f/0x90 [ 838.777284][ T3901] kobject: 'loop4' (000000007408b349): kobject_uevent_env [ 838.778836][T16291] ? __kasan_check_write+0x14/0x20 [ 838.805853][ T3901] kobject: 'loop4' (000000007408b349): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 838.806853][T16291] ? set_blocksize+0x15d/0x3a0 [ 838.806867][T16291] ? sb_set_blocksize+0xb7/0xf0 [ 838.806881][T16291] mount_bdev+0x27c/0x390 [ 838.806895][T16291] ? exfat_fs_mount+0x40/0x40 [ 838.806912][T16291] exfat_fs_mount+0x34/0x40 [ 838.818650][T16304] EXT4-fs (loop3): Unsupported filesystem blocksize 0 (1923657432 log_block_size) [ 838.821385][T16291] legacy_get_tree+0xf9/0x1a0 [ 838.821397][T16291] ? tm_current+0x550/0x550 [ 838.821409][T16291] vfs_get_tree+0x8b/0x2a0 [ 838.821421][T16291] do_mount+0x16c0/0x2510 [ 838.821437][T16291] ? copy_mount_options+0xdc/0x3c0 [ 838.821448][T16291] ksys_mount+0xcc/0x100 [ 838.821460][T16291] __x64_sys_mount+0xbf/0xd0 [ 838.821475][T16291] do_syscall_64+0xf7/0x1c0 [ 838.821489][T16291] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 838.821498][T16291] RIP: 0033:0x459f49 [ 838.821509][T16291] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 838.821514][T16291] RSP: 002b:00007f63786d5c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 838.821524][T16291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000459f49 [ 838.821528][T16291] RDX: 0000000020000200 RSI: 00000000200001c0 RDI: 0000000020000180 [ 838.821532][T16291] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 838.821537][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f63786d66d4 [ 838.821542][T16291] R13: 00000000004c69b2 R14: 00000000004dbe18 R15: 00000000ffffffff [ 838.827740][T16291] Kernel Offset: disabled [ 839.006051][T16291] Rebooting in 86400 seconds..