x1, &(0x7f0000002e80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000002f80), 0x6e, &(0x7f0000003400)=[{&(0x7f0000003000)=""/46, 0x2e}, {&(0x7f0000003040)=""/99, 0x63}, {&(0x7f00000030c0)=""/89, 0x59}, {&(0x7f0000003140)=""/190, 0xbe}, {&(0x7f0000003200)=""/105, 0x69}, {&(0x7f0000003280)=""/217, 0xd9}, {&(0x7f0000003380)=""/121, 0x79}], 0x7, &(0x7f0000003480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003540)=@abs, 0x6e, &(0x7f0000003900)=[{&(0x7f00000035c0)=""/132, 0x84}, {&(0x7f0000003680)=""/53, 0x35}, {&(0x7f00000036c0)=""/118, 0x76}, {&(0x7f0000003740)}, {&(0x7f0000003780)=""/161, 0xa1}, {&(0x7f0000003840)=""/56, 0x38}, {&(0x7f0000003880)=""/28, 0x1c}, {&(0x7f00000038c0)}], 0x8, &(0x7f0000003980)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000003a00), 0x6e, &(0x7f0000004c00)=[{&(0x7f0000003a80)=""/186, 0xba}, {&(0x7f0000003b40)=""/113, 0x71}, {&(0x7f0000003bc0)=""/46, 0x2e}, {&(0x7f0000003c00)=""/4096, 0x1000}], 0x4, &(0x7f0000004c40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}], 0x8, 0x40010020, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000380)={@mcast1={0xf}, 0x0, r3}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005000)={'erspan0\x00', &(0x7f0000004fc0)={'ip_vti0\x00', r3, 0x20, 0x8, 0xffffffff, 0x3, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @private=0xa010102}}}}) [ 234.548420] EXT4-fs (loop7): Unrecognized mount option "T l*>y/{5]h" or missing value 15:08:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = pidfd_getfd(r0, r1, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x5, 0xff7f, 0x101}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='r', 0x1}], 0x1) truncate(&(0x7f0000000180)='./file1\x00', 0x2) 15:08:51 executing program 2: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_io_uring_setup(0x5fd5, &(0x7f0000001940)={0x0, 0x0, 0x20, 0xfffffffc}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f00000000c0)) r0 = open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x80) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0x7}) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x10000, 0x7, 0x6, 0x2, 0x1a, "76058faf3881a1f6d27ce24922ffe244fd670c"}) [ 234.587675] audit: type=1400 audit(1639062531.334:9): avc: denied { map } for pid=4595 comm="syz-executor.1" path="/proc/4595/task/4597/environ" dev="proc" ino=15635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 234.593020] audit: type=1400 audit(1639062531.334:10): avc: denied { execute } for pid=4595 comm="syz-executor.1" path="/proc/4595/task/4597/environ" dev="proc" ino=15635 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 15:08:51 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000009ac0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000002640)=[{&(0x7f0000000380)=""/75, 0x4b}, {&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/135, 0x87}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/16, 0x10}, {&(0x7f0000002600)=""/10, 0xa}], 0x7, &(0x7f00000026c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000002780)=""/254, 0xfe}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/208, 0xd0}, {&(0x7f0000002a00)=""/237, 0xed}, {&(0x7f0000002b00)=""/118, 0x76}, {&(0x7f0000002b80)=""/4096, 0x1000}], 0x6, &(0x7f0000003c00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000003c80)=""/180, 0xb4}, {&(0x7f0000003d40)=""/30, 0x1e}, {&(0x7f0000003d80)=""/252, 0xfc}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/200, 0xc8}, {&(0x7f0000004f80)=""/171, 0xab}, {&(0x7f0000005040)=""/51, 0x33}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/208, 0xd0}, {&(0x7f0000006180)=""/143, 0x8f}], 0xa, &(0x7f0000006300)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f00000063c0), 0x6e, &(0x7f000000acc0)=[{&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/75, 0x4b}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/159, 0x9f}, {&(0x7f0000009580)=""/210, 0xd2}, {&(0x7f0000009680)=""/225, 0xe1}, {&(0x7f0000009780)=""/145, 0x91}, {&(0x7f0000009840)=""/50, 0x32}, {&(0x7f0000009bc0)=""/32, 0x20}, {&(0x7f0000009c00)=""/161, 0xa1}, {&(0x7f0000009cc0)=""/4096, 0x1000}], 0xc, &(0x7f0000009940)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x180}}], 0x4, 0x8020, 0x0) syz_io_uring_setup(0x66c0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) syz_io_uring_submit(r1, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r7, &(0x7f0000000040)={0x800, 0x0, 0x2}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x3a9) syz_io_uring_setup(0x1525, &(0x7f0000000080), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r8, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) sendmmsg$sock(r8, &(0x7f000000d080)=[{{&(0x7f0000009880)=@x25, 0x80, &(0x7f000000cfc0)=[{&(0x7f000000ad80)="179a9347a2bff078ee91a8b48f8ce276ebb8e8ea080e6e32fa65d5ae308e01ba4dfc64c1073ca870dcbd056496144fc0180089ad225a8ecceb39aebc2a92696b6689407d064a96195227396a51119dc1dacafc3f96730d0719e9efed275a4ee89420d75e355475c94bf28f6350232a3110c6143f38e5b6b92892b14cafb43d79df69ebd24d9a27d484443653eb1bf40bcc950198f8823371b9bc52e09856b40a18fc553fba76fc24b424c31db262e9fc05d724dfde1367a0ae6722341f7b71b7060cbf6a17b6c3670013", 0xca}, {&(0x7f000000ae80)="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", 0x1000}, {&(0x7f000000be80)="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", 0x1000}, {&(0x7f000000ce80)="b25d52696b26c75489284bad37b576bd7973be1e6fd1cec0e270657ed22ede3cbb67af7d855496cd95d49c7583e87577f20b6d8243a282ffa05799828ae2ef20f68692db01df347182d64ea8", 0x4c}, {&(0x7f0000009900)="e2b42b54abbdfed266e3c1bed574106661d81a59eafb001fe1d44be6a1e9b987a42b7905f00039", 0x27}, {&(0x7f000000cf00)="0722909a5bb10b3f27aebd30c930d382538c62a5db9858f3367633f52822ca5fb34e719ae0db606c799474427e222ccb4873e57c406c15604e61eeefbf5c447f8d2ffb1029a3757f088db27e171ddfb00a57e8acb004d1fc31fcec6cbab6e868ba6d1a3805661940a88f98332bde064ca1dc6d02846427180b4ca72d18ab70ba0460c51dd40e", 0x86}], 0x6, &(0x7f000000d040)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffe}}], 0x30}}], 0x1, 0x4810) r9 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r9}], 0x1, 0x0) pwrite64(r9, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f000000d0c0)={{0x1, 0x1, 0x18, r10, {r3}}, './file0\x00'}) syz_io_uring_submit(r1, r5, &(0x7f000000d100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0x4, 0x2, 0x0, 0xff, 0x7}, 0x4) 15:08:51 executing program 6: syz_io_uring_setup(0x5965, &(0x7f0000000080)={0x0, 0x49bb, 0x10, 0x0, 0x311}, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000800000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {0x0}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010", 0x3d, 0x4100}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00634346074510fe16963275302cc0244c77dde5fb08ee85e2aa9a44f51455d900d9607ec1ab3c"]) [ 234.725457] loop6: detected capacity change from 0 to 65 [ 234.782054] EXT4-fs error (device loop6): ext4_ext_check_inode:497: inode #2: comm syz-executor.6: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 234.786529] EXT4-fs (loop6): get root inode failed [ 234.787634] EXT4-fs (loop6): mount failed 15:09:04 executing program 2: r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x6c2f, &(0x7f0000000dc0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000e40), &(0x7f0000000e80)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x2, 0x0, 0x200, 0x2, "d190f510b9ebb2b5e0cd5ea365acbf04e9929d788c7d7b9ac7052271a6c57f93"}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x4010, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x28) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, r1, 0x10000000) r4 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x6000, @fd=r1, 0x71, &(0x7f0000000080), 0x0, 0x16, 0x1, {0x0, r8}}, 0x5) 15:09:04 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x128000, 0xe2, &(0x7f0000000200)=[{&(0x7f0000010000)="00000000000000000000000000000000000000000000000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000000ffffff00ffffff000000000000000055aa", 0x60, 0x1a0}, {&(0x7f0000010100)="4244db8cf0c2db8cf0c2818000060003003501b800000800000020000004000000180000054344524f4d000000000000000000000000000000000000000000000000000000000000006b000060000000c00000010000000700000001000000000000000000000000000000000000000000000000000000000000000000000000000000006000018f000c00000000000000000000c000019b0018000000000000", 0xa0, 0x400}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x200, 0x600}, {&(0x7f0000010400)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c100100000000000000000112000000002200160100000000011600080000000008007809140b2a3a08020000010000010100002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000730079007a006b0061006c006c006500720020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000200020002000470045004e00490053004f0049004d004100470045002000490053004f00200039003600360030005f004800460053002000460049004c004500530059005300540045004d002000430052004500410054004f005200200028004300290020003100390039003300200045002e0059004f0055004e004700440041004c004500660069006c0065003300200020002000200020002000200020002000200020002000200000660069006c0065003100200020002000200020002000200020002000200020002000200000660069006c0065003200200020002000200020002000200020002000200020002000200032303230303932303131343235383030083230323030393230313134323538303008303030303030303030303030303030300032303230303932303131343235383030080100202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202000"/1408, 0x580, 0x8800}, {&(0x7f0000011000)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000011100)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000011200)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000011300)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011400)="0100020019000000ac59f001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134364200000000000000", 0x60, 0x10000}, {&(0x7f0000011500)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011600)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011700)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011800)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011900)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011a00)="050002006d0000005003f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011b00)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011c00)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011d00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011e00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011f00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000012000)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000012100)="01000200eb000000c007f001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303134394300000000000000", 0x60, 0x18000}, {&(0x7f0000012200)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012400)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012500)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012600)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012700)="050002007d0000005003f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012800)="0000000000000000000000000000000000000000000000000100000001010000b9000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012900)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012a00)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012b00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012c00)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012d00)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012e00)="09000200fe00000092ab7600400000007810e40709140b2a3a0000000100000000000000000000000c01000000000000000000000000000000000000000000000000000000000000010000002e00000000000000b9000000002a67656e69736f696d61676500000000000000000000000000000000000000050000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012f00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000013000)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000013100)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000013200)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000013300)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013400)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013500)="050102004c000000f4a6a800020000000000000004000000010000040000000000003002ffffffffffffffffa51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013600)="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"/288, 0x120, 0x82000}, {&(0x7f0000013800)="05010200280000000173a800040000000000000004000000010000040000000000003002ffffffffffffffffa51400000100000000000000540000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000540000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013900)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c653000"/96, 0x60, 0x83000}, {&(0x7f0000013a00)="050102001300000097c6a800060000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001700"/192, 0xc0, 0x83800}, {&(0x7f0000013b00)="0501020061000000a406a800070000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001800"/192, 0xc0, 0x84000}, {&(0x7f0000013c00)="050102008c000000c50fa800080000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001900"/192, 0xc0, 0x84800}, {&(0x7f0000013d00)="05010200ad000000ed07a800090000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001e00"/192, 0xc0, 0x85000}, {&(0x7f0000013e00)="05010200f80000004cf2a8000a0000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400002300"/192, 0xc0, 0x85800}, {&(0x7f0000013f00)="01001401000001000000050015010000010046494c4530000000000000000000", 0x20, 0x86000}, {&(0x7f0000014000)="01000000011400010000050000000115000146494c4530000000000000000000", 0x20, 0x87000}, {&(0x7f0000014100)="010016010000010000000a0017010000010000660069006c0065003000000000", 0x20, 0x88000}, {&(0x7f0000014200)="010000000116000100000a0000000117000100660069006c0065003000000000", 0x20, 0x89000}, {&(0x7f0000014300)="2200140100000000011400080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012c00180100000000011864000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600150100000000011500080000000008007809140b2a3a08020000010000010546494c45302a0019010000000001190a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001f0100000000011f28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0x8a000}, {&(0x7f0000014500)="2200150100000000011500080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012a0024010000000001241a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x8a800}, {&(0x7f0000014600)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0019010000000001190a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001f0100000000011f28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b000}, {&(0x7f0000014800)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101012c0024010000000001241a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0x8b800}, {&(0x7f0000014900)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8c000}, {&(0x7f0000014a00)='syzkallers\x00'/32, 0x20, 0x8c800}, {&(0x7f0000014b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x92000}, {&(0x7f0000015000)="000000000000000001000003000000000000000000000000000000000000000002000007000000300000002f00"/64, 0x40, 0xc8000}, {&(0x7f0000015100)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xc80e0}, {&(0x7f0000015200)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xc81e0}, {&(0x7f0000015300)="00000000000000000100000300000002000000030000000b000000010000000402000025000000600000005b00"/64, 0x40, 0xce000}, {&(0x7f0000015400)="000000000000000000000000000000000000000000000000f800000000000000", 0x20, 0xce0e0}, {&(0x7f0000015500)="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"/1216, 0x4c0, 0xce1e0}, {&(0x7f0000015a00)="000000000000000000000000000000000000000000000000008c00620038000e0000000000000002ff01000400000b00000000020566696c65320200000054455854756e69780000000000000000000000120119000023280000280000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011900050000000000000000000000000000000000000000000000000b00000000020566696c65330200000054455854756e6978000000000000000000000013011e000023280000280000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011e0005000000000000000000000000000000000000000000000000070000000014000003000000000000000000000000020566696c653000000000000000000000000000000000000000000000000000000b00000000140566696c65300200000054455854756e697800000000000000000000001501230000041a0000080000000000000000000000db8cf0c2db8cf0c27c25cca000000000000000000000000000000000000001230001000000000000000000000000000000000000000000000000000000000000db8cf0c2db8cf0c27c25cca0000000000000000000000000000000000000011e0005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0019a012800f20080000e", 0x220, 0xce7e0}, {&(0x7f0000015d00)="00000000000000000000000000000000000000000000000041e1000000000000", 0x20, 0xcfbc0}, {&(0x7f0000015e00)="000000000000000001000003000000000000000000000000000000000000000002000025000000100000000f00000000200000ff00"/64, 0x40, 0xda000}, {&(0x7f0000015f00)="000000000000000000000000000000000000000000000000020a010000000000", 0x20, 0xda060}, {&(0x7f0000016000)="0000000000000000000000000000000000000000000000008000000000000000", 0x20, 0xda0e0}, {&(0x7f0000016100)="00000000000000000000000000000000000000000000000001f800f80078000e", 0x20, 0xda1e0}, {&(0x7f0000016200)="4244db8cf0c2db8cf0c2010000000003002401b800000800000020000004000000100194054344524f4d0000000000000000000000000000000000000000000000000000000000000005000060000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000c00000000000000000000c000000c0018000000000000", 0xa0, 0xdc000}, {&(0x7f0000016300)="020002008700000001d7f001b901000000800000200000000080000030000000", 0x20, 0xdc800}, {&(0x7f0000016400)="020002008800000001d7f001ba01000000800000200000000080000030000000", 0x20, 0xdd000}, {&(0x7f0000016500)="020002008900000001d7f001bb01000000800000200000000080000030000000", 0x20, 0xdd800}, {&(0x7f0000016600)="020002008a00000001d7f001bc01000000800000200000000080000030000000", 0x20, 0xde000}, {&(0x7f0000016700)="020002008b00000001d7f001bd01000000800000200000000080000030000000", 0x20, 0xde800}, {&(0x7f0000016800)="020002008c00000001d7f001be01000000800000200000000080000030000000", 0x20, 0xdf000}, {&(0x7f0000016900)="020002008d00000001d7f001bf01000000800000200000000080000030000000", 0x20, 0xdf800}, {&(0x7f0000016a00)="020002008e00000001d7f001c001000000800000200000000080000030000000", 0x20, 0xe0000}, {&(0x7f0000016b00)="020002008f00000001d7f001c101000000800000200000000080000030000000", 0x20, 0xe0800}, {&(0x7f0000016c00)="020002009000000001d7f001c201000000800000200000000080000030000000", 0x20, 0xe1000}, {&(0x7f0000016d00)="020002009100000001d7f001c301000000800000200000000080000030000000", 0x20, 0xe1800}, {&(0x7f0000016e00)="020002009200000001d7f001c401000000800000200000000080000030000000", 0x20, 0xe2000}, {&(0x7f0000016f00)="020002009300000001d7f001c501000000800000200000000080000030000000", 0x20, 0xe2800}, {&(0x7f0000017000)="020002009400000001d7f001c601000000800000200000000080000030000000", 0x20, 0xe3000}, {&(0x7f0000017100)="020002009500000001d7f001c701000000800000200000000080000030000000", 0x20, 0xe3800}, {&(0x7f0000017200)="020002009600000001d7f001c801000000800000200000000080000030000000", 0x20, 0xe4000}, {&(0x7f0000017300)="020002009700000001d7f001c901000000800000200000000080000030000000", 0x20, 0xe4800}, {&(0x7f0000017400)="020002009800000001d7f001ca01000000800000200000000080000030000000", 0x20, 0xe5000}, {&(0x7f0000017500)="020002009900000001d7f001cb01000000800000200000000080000030000000", 0x20, 0xe5800}, {&(0x7f0000017600)="020002009a00000001d7f001cc01000000800000200000000080000030000000", 0x20, 0xe6000}, {&(0x7f0000017700)="020002009b00000001d7f001cd01000000800000200000000080000030000000", 0x20, 0xe6800}, {&(0x7f0000017800)="020002009c00000001d7f001ce01000000800000200000000080000030000000", 0x20, 0xe7000}, {&(0x7f0000017900)="020002009d00000001d7f001cf01000000800000200000000080000030000000", 0x20, 0xe7800}, {&(0x7f0000017a00)="020002009e00000001d7f001d001000000800000200000000080000030000000", 0x20, 0xe8000}, {&(0x7f0000017b00)="020002009f00000001d7f001d101000000800000200000000080000030000000", 0x20, 0xe8800}, {&(0x7f0000017c00)="02000200a000000001d7f001d201000000800000200000000080000030000000", 0x20, 0xe9000}, {&(0x7f0000017d00)="02000200a100000001d7f001d301000000800000200000000080000030000000", 0x20, 0xe9800}, {&(0x7f0000017e00)="02000200a200000001d7f001d401000000800000200000000080000030000000", 0x20, 0xea000}, {&(0x7f0000017f00)="02000200a300000001d7f001d501000000800000200000000080000030000000", 0x20, 0xea800}, {&(0x7f0000018000)="02000200a400000001d7f001d601000000800000200000000080000030000000", 0x20, 0xeb000}, {&(0x7f0000018100)="02000200a500000001d7f001d701000000800000200000000080000030000000", 0x20, 0xeb800}, {&(0x7f0000018200)="02000200a600000001d7f001d801000000800000200000000080000030000000", 0x20, 0xec000}, {&(0x7f0000018300)="02000200a700000001d7f001d901000000800000200000000080000030000000", 0x20, 0xec800}, {&(0x7f0000018400)="02000200a800000001d7f001da01000000800000200000000080000030000000", 0x20, 0xed000}, {&(0x7f0000018500)="02000200a900000001d7f001db01000000800000200000000080000030000000", 0x20, 0xed800}, {&(0x7f0000018600)="02000200aa00000001d7f001dc01000000800000200000000080000030000000", 0x20, 0xee000}, {&(0x7f0000018700)="02000200ab00000001d7f001dd01000000800000200000000080000030000000", 0x20, 0xee800}, {&(0x7f0000018800)="02000200ac00000001d7f001de01000000800000200000000080000030000000", 0x20, 0xef000}, {&(0x7f0000018900)="02000200ad00000001d7f001df01000000800000200000000080000030000000", 0x20, 0xef800}, {&(0x7f0000018a00)="02000200ae00000001d7f001e001000000800000200000000080000030000000", 0x20, 0xf0000}, {&(0x7f0000018b00)="02000200af00000001d7f001e101000000800000200000000080000030000000", 0x20, 0xf0800}, {&(0x7f0000018c00)="02000200b000000001d7f001e201000000800000200000000080000030000000", 0x20, 0xf1000}, {&(0x7f0000018d00)="02000200b100000001d7f001e301000000800000200000000080000030000000", 0x20, 0xf1800}, {&(0x7f0000018e00)="02000200b200000001d7f001e401000000800000200000000080000030000000", 0x20, 0xf2000}, {&(0x7f0000018f00)="02000200b300000001d7f001e501000000800000200000000080000030000000", 0x20, 0xf2800}, {&(0x7f0000019000)="02000200b400000001d7f001e601000000800000200000000080000030000000", 0x20, 0xf3000}, {&(0x7f0000019100)="02000200b500000001d7f001e701000000800000200000000080000030000000", 0x20, 0xf3800}, {&(0x7f0000019200)="02000200b600000001d7f001e801000000800000200000000080000030000000", 0x20, 0xf4000}, {&(0x7f0000019300)="02000200b700000001d7f001e901000000800000200000000080000030000000", 0x20, 0xf4800}, {&(0x7f0000019400)="02000200b800000001d7f001ea01000000800000200000000080000030000000", 0x20, 0xf5000}, {&(0x7f0000019500)="02000200b900000001d7f001eb01000000800000200000000080000030000000", 0x20, 0xf5800}, {&(0x7f0000019600)="02000200ba00000001d7f001ec01000000800000200000000080000030000000", 0x20, 0xf6000}, {&(0x7f0000019700)="02000200bb00000001d7f001ed01000000800000200000000080000030000000", 0x20, 0xf6800}, {&(0x7f0000019800)="02000200bc00000001d7f001ee01000000800000200000000080000030000000", 0x20, 0xf7000}, {&(0x7f0000019900)="02000200bd00000001d7f001ef01000000800000200000000080000030000000", 0x20, 0xf7800}, {&(0x7f0000019a00)="02000200be00000001d7f001f001000000800000200000000080000030000000", 0x20, 0xf8000}, {&(0x7f0000019b00)="02000200bf00000001d7f001f101000000800000200000000080000030000000", 0x20, 0xf8800}, {&(0x7f0000019c00)="02000200c000000001d7f001f201000000800000200000000080000030000000", 0x20, 0xf9000}, {&(0x7f0000019d00)="02000200c100000001d7f001f301000000800000200000000080000030000000", 0x20, 0xf9800}, {&(0x7f0000019e00)="02000200c200000001d7f001f401000000800000200000000080000030000000", 0x20, 0xfa000}, {&(0x7f0000019f00)="02000200c300000001d7f001f501000000800000200000000080000030000000", 0x20, 0xfa800}, {&(0x7f000001a000)="02000200c400000001d7f001f601000000800000200000000080000030000000", 0x20, 0xfb000}, {&(0x7f000001a100)="02000200c500000001d7f001f701000000800000200000000080000030000000", 0x20, 0xfb800}, {&(0x7f000001a200)="02000200c600000001d7f001f801000000800000200000000080000030000000", 0x20, 0xfc000}, {&(0x7f000001a300)="02000200c700000001d7f001f901000000800000200000000080000030000000", 0x20, 0xfc800}, {&(0x7f000001a400)="02000200c800000001d7f001fa01000000800000200000000080000030000000", 0x20, 0xfd000}, {&(0x7f000001a500)="02000200c900000001d7f001fb01000000800000200000000080000030000000", 0x20, 0xfd800}, {&(0x7f000001a600)="02000200ca00000001d7f001fc01000000800000200000000080000030000000", 0x20, 0xfe000}, {&(0x7f000001a700)="02000200cb00000001d7f001fd01000000800000200000000080000030000000", 0x20, 0xfe800}, {&(0x7f000001a800)="02000200cc00000001d7f001fe01000000800000200000000080000030000000", 0x20, 0xff000}, {&(0x7f000001a900)="02000200cd00000001d7f001ff01000000800000200000000080000030000000", 0x20, 0xff800}, {&(0x7f000001aa00)="02000200cf00000001d7f0010002000000800000200000000080000030000000", 0x20, 0x100000}, {&(0x7f000001ab00)="02000200d000000001d7f0010102000000800000200000000080000030000000", 0x20, 0x100800}, {&(0x7f000001ac00)="02000200d100000001d7f0010202000000800000200000000080000030000000", 0x20, 0x101000}, {&(0x7f000001ad00)="02000200d200000001d7f0010302000000800000200000000080000030000000", 0x20, 0x101800}, {&(0x7f000001ae00)="02000200d300000001d7f0010402000000800000200000000080000030000000", 0x20, 0x102000}, {&(0x7f000001af00)="02000200d400000001d7f0010502000000800000200000000080000030000000", 0x20, 0x102800}, {&(0x7f000001b000)="02000200d500000001d7f0010602000000800000200000000080000030000000", 0x20, 0x103000}, {&(0x7f000001b100)="02000200d600000001d7f0010702000000800000200000000080000030000000", 0x20, 0x103800}, {&(0x7f000001b200)="02000200d700000001d7f0010802000000800000200000000080000030000000", 0x20, 0x104000}, {&(0x7f000001b300)="02000200d800000001d7f0010902000000800000200000000080000030000000", 0x20, 0x104800}, {&(0x7f000001b400)="02000200d900000001d7f0010a02000000800000200000000080000030000000", 0x20, 0x105000}, {&(0x7f000001b500)="02000200da00000001d7f0010b02000000800000200000000080000030000000", 0x20, 0x105800}, {&(0x7f000001b600)="02000200db00000001d7f0010c02000000800000200000000080000030000000", 0x20, 0x106000}, {&(0x7f000001b700)="02000200dc00000001d7f0010d02000000800000200000000080000030000000", 0x20, 0x106800}, {&(0x7f000001b800)="02000200dd00000001d7f0010e02000000800000200000000080000030000000", 0x20, 0x107000}, {&(0x7f000001b900)="02000200de00000001d7f0010f02000000800000200000000080000030000000", 0x20, 0x107800}, {&(0x7f000001ba00)="02000200df00000001d7f0011002000000800000200000000080000030000000", 0x20, 0x108000}, {&(0x7f000001bb00)="02000200e000000001d7f0011102000000800000200000000080000030000000", 0x20, 0x108800}, {&(0x7f000001bc00)="02000200e100000001d7f0011202000000800000200000000080000030000000", 0x20, 0x109000}, {&(0x7f000001bd00)="02000200e200000001d7f0011302000000800000200000000080000030000000", 0x20, 0x109800}, {&(0x7f000001be00)="02000200e300000001d7f0011402000000800000200000000080000030000000", 0x20, 0x10a000}, {&(0x7f000001bf00)="02000200e400000001d7f0011502000000800000200000000080000030000000", 0x20, 0x10a800}, {&(0x7f000001c000)="02000200e500000001d7f0011602000000800000200000000080000030000000", 0x20, 0x10b000}, {&(0x7f000001c100)="02000200e600000001d7f0011702000000800000200000000080000030000000", 0x20, 0x10b800}, {&(0x7f000001c200)="02000200e700000001d7f0011802000000800000200000000080000030000000", 0x20, 0x10c000}, {&(0x7f000001c300)="02000200e800000001d7f0011902000000800000200000000080000030000000", 0x20, 0x10c800}, {&(0x7f000001c400)="02000200e900000001d7f0011a02000000800000200000000080000030000000", 0x20, 0x10d000}, {&(0x7f000001c500)="02000200ea00000001d7f0011b02000000800000200000000080000030000000", 0x20, 0x10d800}, {&(0x7f000001c600)="02000200eb00000001d7f0011c02000000800000200000000080000030000000", 0x20, 0x10e000}, {&(0x7f000001c700)="02000200ec00000001d7f0011d02000000800000200000000080000030000000", 0x20, 0x10e800}, {&(0x7f000001c800)="02000200ed00000001d7f0011e02000000800000200000000080000030000000", 0x20, 0x10f000}, {&(0x7f000001c900)="02000200ee00000001d7f0011f02000000800000200000000080000030000000", 0x20, 0x10f800}, {&(0x7f000001ca00)="02000200ef00000001d7f0012002000000800000200000000080000030000000", 0x20, 0x110000}, {&(0x7f000001cb00)="02000200f000000001d7f0012102000000800000200000000080000030000000", 0x20, 0x110800}, {&(0x7f000001cc00)="02000200f100000001d7f0012202000000800000200000000080000030000000", 0x20, 0x111000}, {&(0x7f000001cd00)="02000200f200000001d7f0012302000000800000200000000080000030000000", 0x20, 0x111800}, {&(0x7f000001ce00)="02000200f300000001d7f0012402000000800000200000000080000030000000", 0x20, 0x112000}, {&(0x7f000001cf00)="02000200f400000001d7f0012502000000800000200000000080000030000000", 0x20, 0x112800}, {&(0x7f000001d000)="02000200f500000001d7f0012602000000800000200000000080000030000000", 0x20, 0x113000}, {&(0x7f000001d100)="02000200f600000001d7f0012702000000800000200000000080000030000000", 0x20, 0x113800}, {&(0x7f000001d200)="02000200f700000001d7f0012802000000800000200000000080000030000000", 0x20, 0x114000}, {&(0x7f000001d300)="02000200f800000001d7f0012902000000800000200000000080000030000000", 0x20, 0x114800}, {&(0x7f000001d400)="02000200f900000001d7f0012a02000000800000200000000080000030000000", 0x20, 0x115000}, {&(0x7f000001d500)="02000200fa00000001d7f0012b02000000800000200000000080000030000000", 0x20, 0x115800}, {&(0x7f000001d600)="02000200fb00000001d7f0012c02000000800000200000000080000030000000", 0x20, 0x116000}, {&(0x7f000001d700)="02000200fc00000001d7f0012d02000000800000200000000080000030000000", 0x20, 0x116800}, {&(0x7f000001d800)="02000200fd00000001d7f0012e02000000800000200000000080000030000000", 0x20, 0x117000}, {&(0x7f000001d900)="02000200fe00000001d7f0012f02000000800000200000000080000030000000", 0x20, 0x117800}, {&(0x7f000001da00)="02000200ff00000001d7f0013002000000800000200000000080000030000000", 0x20, 0x118000}, {&(0x7f000001db00)="020002000000000001d7f0013102000000800000200000000080000030000000", 0x20, 0x118800}, {&(0x7f000001dc00)="020002000100000001d7f0013202000000800000200000000080000030000000", 0x20, 0x119000}, {&(0x7f000001dd00)="020002000200000001d7f0013302000000800000200000000080000030000000", 0x20, 0x119800}, {&(0x7f000001de00)="020002000300000001d7f0013402000000800000200000000080000030000000", 0x20, 0x11a000}, {&(0x7f000001df00)="020002000400000001d7f0013502000000800000200000000080000030000000", 0x20, 0x11a800}, {&(0x7f000001e000)="020002000500000001d7f0013602000000800000200000000080000030000000", 0x20, 0x11b000}, {&(0x7f000001e100)="020002000600000001d7f0013702000000800000200000000080000030000000", 0x20, 0x11b800}, {&(0x7f000001e200)="020002000700000001d7f0013802000000800000200000000080000030000000", 0x20, 0x11c000}, {&(0x7f000001e300)="020002000800000001d7f0013902000000800000200000000080000030000000", 0x20, 0x11c800}, {&(0x7f000001e400)="020002000900000001d7f0013a02000000800000200000000080000030000000", 0x20, 0x11d000}, {&(0x7f000001e500)="020002000a00000001d7f0013b02000000800000200000000080000030000000", 0x20, 0x11d800}, {&(0x7f000001e600)="020002000b00000001d7f0013c02000000800000200000000080000030000000", 0x20, 0x11e000}, {&(0x7f000001e700)="020002000c00000001d7f0013d02000000800000200000000080000030000000", 0x20, 0x11e800}, {&(0x7f000001e800)="020002000d00000001d7f0013e02000000800000200000000080000030000000", 0x20, 0x11f000}, {&(0x7f000001e900)="020002000e00000001d7f0013f02000000800000200000000080000030000000", 0x20, 0x11f800}, {&(0x7f000001ea00)="020002000f00000001d7f0014002000000800000200000000080000030000000", 0x20, 0x120000}, {&(0x7f000001eb00)="020002001000000001d7f0014102000000800000200000000080000030000000", 0x20, 0x120800}, {&(0x7f000001ec00)="020002001100000001d7f0014202000000800000200000000080000030000000", 0x20, 0x121000}, {&(0x7f000001ed00)="020002001200000001d7f0014302000000800000200000000080000030000000", 0x20, 0x121800}, {&(0x7f000001ee00)="020002001300000001d7f0014402000000800000200000000080000030000000", 0x20, 0x122000}, {&(0x7f000001ef00)="020002001400000001d7f0014502000000800000200000000080000030000000", 0x20, 0x122800}, {&(0x7f000001f000)="020002001500000001d7f0014602000000800000200000000080000030000000", 0x20, 0x123000}, {&(0x7f000001f100)="020002001600000001d7f0014702000000800000200000000080000030000000", 0x20, 0x123800}, {&(0x7f000001f200)="020002001700000001d7f0014802000000800000200000000080000030000000", 0x20, 0x124000}, {&(0x7f000001f300)="020002001800000001d7f0014902000000800000200000000080000030000000", 0x20, 0x124800}, {&(0x7f000001f400)="020002001900000001d7f0014a02000000800000200000000080000030000000", 0x20, 0x125000}, {&(0x7f000001f500)="020002001a00000001d7f0014b02000000800000200000000080000030000000", 0x20, 0x125800}, {&(0x7f000001f600)="020002001b00000001d7f0014c02000000800000200000000080000030000000", 0x20, 0x126000}, {&(0x7f000001f700)="020002001c00000001d7f0014d02000000800000200000000080000030000000", 0x20, 0x126800}, {&(0x7f000001f800)="020002001d00000001d7f0014e02000000800000200000000080000030000000", 0x20, 0x127000}, {&(0x7f000001f900)="020002001e00000001d7f0014f02000000800000200000000080000030000000", 0x20, 0x127800}], 0x0, &(0x7f000001fa00)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mknodat$null(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x103) 15:09:04 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r1 = epoll_create1(0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x2) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x16) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0xffffffe1}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x640, 0x0) 15:09:04 executing program 0: unshare(0x6c000000) unshare(0x44000000) unshare(0x200) 15:09:04 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15:09:04 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x306042) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x0, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xc1f}, @ETHTOOL_A_EEE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x4811) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040000000000fcdbdf250700000030000180060001000a0000000c0007000200000010000000060002003300000008000b0073697000060004004e2000000c000380050008000000000008000500000000000800040081000000"], 0x60}}, 0x20000000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x8c4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000180)={0x1f, @fixed}, 0x8) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x105000, 0x10) setsockopt$bt_BT_VOICE(r5, 0x112, 0x13, 0x0, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40200, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000340)=0x6, 0x4) 15:09:04 executing program 4: socket(0x0, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x6, 0x81, 0x38, @mcast2, @mcast2, 0x1, 0x10, 0x636, 0x2}}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x91900204}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250f00000008000300", @ANYRES32=r1, @ANYBLOB="08003b0003000000ecff370001000000080031000900000005002d000100000000002e0000ff000005002d0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x7b9a005a42101d5c}, 0x50) syz_io_uring_setup(0x7692, &(0x7f00000000c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 248.106199] loop7: detected capacity change from 0 to 4728 15:09:04 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r1 = epoll_create1(0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000080)=0x2) write$P9_RWALK(r0, &(0x7f0000000000)=ANY=[], 0x16) write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0xffffffe1}, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x640, 0x0) 15:09:04 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6f126db4c8837073bb246830af67c9015f0fdc05079bb42b73792c00"]) 15:09:04 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) write(r0, &(0x7f0000000000)="bc13eb57ffffe4713a13", 0xa) [ 248.280491] tmpfs: Unknown parameter 'omȃps$h0g_+sy' [ 248.303997] tmpfs: Unknown parameter 'omȃps$h0g_+sy' 15:09:17 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:17 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f8000020004000000000000000000001", 0x25}, {&(0x7f0000010100)='RRaA', 0x4, 0x800}, {&(0x7f0000000140)="0000000072724161010008", 0xb, 0x9e0}, {&(0x7f0000000440)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000011000)=ANY=[]) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@access_any}, {@version_L}, {@cache_none}, {@access_any}, {@uname={'uname', 0x3d, 'vfat\x00'}}, {@loose}], [{@subj_user={'subj_user', 0x3d, 'vfat\x00'}}, {@dont_hash}]}}) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) syz_io_uring_setup(0x2da5, &(0x7f0000000340)={0x0, 0xba9d, 0xaa5c640c25603daf, 0x3, 0x1b6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) syz_io_uring_submit(r4, r1, &(0x7f0000000480)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x9}, 0x3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd=r3, 0x9, 0x5, 0x9, 0x12, 0x1, {0x0, r5}}, 0x5) 15:09:17 executing program 6: stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000000080)="ed41000000100000dbf4655fdcf4655fdcf4655f0000000000000400087215c4596ed7ef37937f22076d", 0x2a, 0x4200}, {0x0, 0x0, 0x105a00}], 0x0, &(0x7f00000000c0)={[], [{@uid_lt={'uid<', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@obj_user={'obj_user', 0x3d, '$}}'}}, {@smackfshat={'smackfshat', 0x3d, ':'}}, {@appraise}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}, {@obj_user={'obj_user', 0x3d, '%\xe0\f\xf2N'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2200, 0x100) 15:09:17 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000380)={@mcast1={0xf}, 0x0, r4}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40010) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x3, 0x0, 0x0, {0xa, 0x4e22, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000003c0)="adb0d0b90b51d9ba3d8caacc64eea72971ac141d760b16d8363d8c469e6d2c5b11e18160f2831cc61fcde5bdd6384c68baff56ebcec2563109d3fe6261e77cd69cc13b95f7401701bae5f34182590e267185a39ad7ba22d27eb579c5238890164e14343fd861802b73faeaa1e0f122f48f49297f6873ce9c2c881fc8719de6f269e7357f620f023bf8b878548995340a764f0f98de9a36f640572db500c2016c7ec685f33f01a1644adcdd24013c2dfd0d4065fbad30a5755f2af1818dceaaca76bb49c6ab41c0d75365d7ca1202153a", 0xd0}, {&(0x7f00000004c0)="a9f101d0423efe726a884e809edd8badbc38cc926cea7a5e7e37af4bbd19aa673adea1baf7ff01a2eabede77da8b678aa01a93483a52d73270b254502042b162dee3864a07959efaa32c4b4ca4a26fb7f01833dcdff8061e5f6023020ee7df1af1fd21e6c00b2661a6c5842d474adc524cf97c5b161e9e9d3ce624e2a2e00db49d6913a7a43ab8c69b31ac438848ad2cb6effae724c3b4a7ba3e23414895a3c5524bf7236921c7e1ce27f80dda7455d634b420668de7d2c1121461d5cd989605d6fa140079eb597a8a3643d722b9a9b44dffe4f65ee264422f", 0xd9}], 0x2, &(0x7f00000005c0)=[{0x100, 0x0, 0x8, "5c8cd1f861bcd0bf61f4c699e6fa57b9b4eb4f9f656b727f9a92773281f88445d110dc09f9c2c88ea2a41a508e33784f8ad75da920a35e47bf6b6aacd0a0ec3ff04698f521fe42c732d92ac661f28bcff600f4f39135c8d605c46fe44082e5214988454d448f3513e727897d39203f4a7346ce8484ba5c2b41d1cf33e215c00f26006f7eac96c20b6d54d931866692c9f2bf2a37f23ff834be224e7329a89eccb9b37a931d37f2f58f52b1c7c0ee43cde431e5852b8ad9d5b5345dcba3c105d21d6150fa45286b7e53291703b7d567bd42360684b7067360c8daca40a4f60b527061e63423f99038718ed42bfc1612"}, {0x70, 0x107, 0x401, "438b0822b775145b2966b75c0e1292138cb5f686a162577772d953dec44eab1d45025ac8f4e53d0b1810035164e882c8f79490fbc03e8a8930928ff6d205f1b4b22f28696f90e20512aae2a5cac585f15debd141508acd23bdf65e2c"}, {0x108, 0x114, 0x33, "758160e0924dc00d36908242bc74af60105f46a56f0c7300336f3bf1828872b9380dd33afa09cd7f8c6baea82cfaa15eedb55ce27f2517bb140f27208ac9f46114f6d1b6d2bf26acef8dbcf1d81f90e6ea467187133740b48faa47384a62832b88b276d67d7725ec4de4d79ee5ca247faf5b682a796633440800d9bb27c96897ad493c34baaba42d1639215121710fff221b48dc33197e4371940fbdb75072257bcca927cdb3f6d4133386ef467a29bb166889f9a4a4b65765d7ac1aefc229384599d161b939a38151fa22c056dbb7fe1d2c72d81ffd7e879ef2a99075ac97041366d666188baea602b1131fc851f42435"}, {0x78, 0x107, 0x8, "c19edd5bc58579c71d8d349b0d2521cb4b4cec7ec057e0f3df7a25c5f28f2e15c814cc50b859d228d5471426c48f66e78a7b5ae51bd9dc6b1af96674794f2d57ee9972939680ebf723145950de1d069af7178abde8f34abea8bb972f0bed7173de"}, {0x50, 0x1, 0x3, "c0beeeb0ea91ac913007b0420ea2184f4758cf63a4e6c5e53aa22c451e7497ce3f64cb6e92a3aee6f3a089ec4171f3dcfa1856bed8ee0bd5eba2"}, {0x70, 0x111, 0x0, "d7dda2e835f85105a57edc0210c177d539580ca7ca24013ed3084dcebcb90e3b3e695c25c9aef04c0d32299403e42648057531b8c1ec2217bdaa4aadd1aa84b504bf4ad48b3201f7ab40b0c0e8f2310ad4cb95ddad1e8aed3ab1b9b5bb9e177e"}, {0xf8, 0x110, 0xf232, "0f7fe9bf3089f796d15a3258c8fdeebc871f2ad5069e56814ae9c9fada39c8d8f3b8d0571b5d60f8c5bb8135e07f58d265216ea8796696508dde1738f788977752af9d9b26387c3369542a51f57ba5669c6fb43053eac1743d7120eb91e23bf32d29a16d191e4a6914837d08ace6cfd3c37e0cd0e06644275888279e99af895373f38f1d6ca34808965ba314311a89e9a613b0b00d9bbbd6e88ee12174ac3a59f04b9922402614beaac7dc23f601ee5ea54e731e2330277a7f6a684d6e8012c4b9e8f76533c5bd77f72c81c7ddcec1191d479a27e640b7e4086af3f0c4c8f1423f"}, {0xb8, 0x10b, 0x363, "94fb25b8f91a45be98c38613e7de556f0c2176c498d9c64e2e9968703a12c50fbba3db32403f9be78815c34333515547858caf31af9f829ea369e8204fe28689dfca8a07d898a80f8195d66862a4def3e1df35c7e20d85d52c1bca55fca56c9295bd981dfaea87a4f9d3135d33a576bb6e3495b138c8fda4a21b47654667ffb7a7cb5a15b41cc7ff3a2345809e766f20601f011b6da54373fdc51350ab3cf7ea8da6590eeaa6a7"}], 0x560}}, {{&(0x7f0000000b40)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000240)="7279e6516413505c356b290adbdd45b3712d", 0x12}], 0x1, &(0x7f0000000c00)=[{0x70, 0x29, 0x400, "d354c09dde001bade4dd334c8ba54c26654764399d74a4d7e717d8f536a5fcd2e2d43d16a75f758e0ef5a3177116a445b54b0ca429fa7b04690cd05f1106c210e39a015a1b34ac11291a5cb42df4fe90fc1ee575a264a6c8f4e1ece0a7"}], 0x70}}], 0x2, 0x4000050) r6 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x4, 0xc27873ca47bb3df7}, 0x14}}, 0x0) 15:09:17 executing program 4: r0 = io_uring_setup(0x5766, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x0, 0x800000c9}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0xfffffeed) 15:09:17 executing program 2: r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x6c2f, &(0x7f0000000dc0)={0x0, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000e40), &(0x7f0000000e80)) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000180)={0x2, 0x0, 0x200, 0x2, "d190f510b9ebb2b5e0cd5ea365acbf04e9929d788c7d7b9ac7052271a6c57f93"}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x4010, r1, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000003c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x28) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001, 0x20010, r1, 0x10000000) r4 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r7 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x6000, @fd=r1, 0x71, &(0x7f0000000080), 0x0, 0x16, 0x1, {0x0, r8}}, 0x5) 15:09:17 executing program 7: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)={{0x108, 0xfd, 0xec, 0x113, 0x127, 0x10001, 0x2e3, 0x1}, "b67505c0b2b9b128030417aac71c0c2d3872e1124b8d8fa2b5817f1410b228a257739005ab5547357b29401e3c1f9f33770800d3d39362b5", ['\x00']}, 0x158) 15:09:17 executing program 3: r0 = syz_io_uring_complete(0x0) fcntl$setflags(r0, 0x2, 0x0) syz_io_uring_setup(0x46db, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x219, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) [ 260.659150] loop0: detected capacity change from 0 to 256 15:09:17 executing program 2: timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = openat$incfs(r0, &(0x7f0000000140)='.log\x00', 0x400, 0x111) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:getty_var_run_t:s0\x00', 0x25, 0x1) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100"/15, @ANYRES32=r2, @ANYBLOB="b3c900007f0000002e2f66696c653000"]) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) close(0xffffffffffffffff) 15:09:17 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) stat(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)) pwrite64(r0, &(0x7f0000000080), 0x0, 0x5) openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r1, 0x5396, &(0x7f0000000040)={0x3ffffd}) [ 260.688833] loop6: detected capacity change from 0 to 4186 [ 260.691794] 9pnet: p9_fd_create_tcp (4688): problem connecting socket to 127.0.0.1 [ 260.705788] EXT4-fs (loop6): Unrecognized mount option "uid<18446744073709551615" or missing value [ 260.706527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1025 sclass=netlink_tcpdiag_socket pid=4696 comm=syz-executor.1 [ 260.714554] 9pnet: p9_fd_create_tcp (4688): problem connecting socket to 127.0.0.1 15:09:17 executing program 7: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000200)={0x3, 'macvtap0\x00', {0x621b}, 0x6}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) r4 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x11}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x85c, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2c}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001380)={&(0x7f0000000000), 0xc, &(0x7f0000001340)={&(0x7f0000000040)={0x54, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x40, 0x0, {0x0, 0x0, [], [0x0, 0x56]}, 0x10001}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x54}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0xa25001, 0x0) [ 260.737692] loop6: detected capacity change from 0 to 4186 15:09:17 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x488200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000061}, 0x8810) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000005c0)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000180)={[{@grpjquota_path={'grpjquota', 0x3d, '.'}}]}) [ 260.773058] EXT4-fs (loop6): Unrecognized mount option "uid<18446744073709551615" or missing value 15:09:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) poll(&(0x7f0000000100)=[{r0, 0x400}, {r0, 0x2008}, {r1, 0x2106}], 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) getsockopt$netlink(r0, 0x10e, 0x6, &(0x7f0000000000)=""/129, &(0x7f00000000c0)=0x81) [ 260.826699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=4708 comm=syz-executor.7 [ 260.882794] loop2: detected capacity change from 0 to 4 [ 260.886654] EXT4-fs (loop2): journaled quota format not specified [ 260.927760] loop2: detected capacity change from 0 to 4 [ 260.935551] EXT4-fs (loop2): journaled quota format not specified [ 260.939079] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=770 sclass=netlink_tcpdiag_socket pid=4708 comm=syz-executor.7 15:09:32 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) rmdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(r0, &(0x7f0000000540)='./file0\x00', 0x0, 0x1) 15:09:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}, {0x0}, {0x0}], 0x0, &(0x7f0000011000)=ANY=[@ANYBLOB='\x00']) 15:09:32 executing program 4: r0 = syz_io_uring_complete(0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000000)={0xca, "b9554aba73d1d2431924ec3734538764c836b9684db18b7ac1043a8b155984e39a5e55c63912548c9b2ea113cc01860955596ea27053847aa3d716ef42520d23"}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x22001, 0x0) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x894, 0x0, 0x44c8}) syz_io_uring_setup(0x40046db, &(0x7f0000000140)={0x0, 0xdad9, 0x2, 0x1, 0x369}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000340)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd_index=0xa, 0x2}, 0x8) creat(0x0, 0x0) connect$unix(r0, &(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 15:09:32 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1f]}, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x80) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xc043, 0x77ad}) 15:09:32 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syncfs(r0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000040)) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="68a1072a", 0x4) [ 275.624353] loop3: detected capacity change from 0 to 256 15:09:32 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:32 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config', 0x24000, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0xa000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x258, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x3, 0x40}}]}, @NL80211_ATTR_REASON_CODE={0x0, 0x36, 0x7ff}, @NL80211_ATTR_IE={0x1d0, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @fast_bss_trans={0x37, 0xc4, {0x2, 0x5, "5c35cb94b91f978a65802d00b17897fd", "4913c2c34046eb223d2c112b834b452fdd11bc5688c0f44e2c0e05a051e4ec58", "60f91215bfc6f8464f6f4caab355538640b4bcabfe998210786a6a7111aefaff", [{0x4, 0x23, "b810ac5fa1332c94133dd3a3436347a2eec4b83dfdc111fe2b0347d2c7470664ea59e0"}, {0x2}, {0x3, 0x12, "5297848bba3788b76a505a26e6fd3e3f7e15"}, {0x4, 0x14, "d7cd3fd0d4e9cdaebf5e629c4ce52485702af833"}, {0x1, 0x1f, "309f7963e2851bfd78a2bfe4a7b0b3eeb38464c260647b3f4ec404e8c9a727"}]}}, @mic={0x8c, 0x18, {0x518, "321d675d6b41", @long="9a21d5bb66947ac6bc9f8b55b3901522"}}, @rann={0x7e, 0x0, {{0x0, 0x11}, 0x4c, 0xe7, @device_b, 0x76f9, 0x8001, 0x1f}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x1f, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d769f3c25e13"}, @NL80211_ATTR_IE={0x0, 0x2a, [@erp={0x2a, 0x0, {0x0, 0x0, 0x1}}, @channel_switch={0x25, 0x0, {0x1, 0x60}}, @ext_channel_switch={0x3c, 0x0, {0x0, 0x9, 0xb3}}, @challenge={0x10, 0x0, 0x3b}, @random={0xc6, 0x0, "c9dc88fd8241cebacb0801e70467cab8be173e090b464f5f05e8106471"}, @random={0x6d, 0x0, "005908e5f1915f6210d6e1c2e0e5bfddc008c195c908836250b580ee3d217ba9f2a570bab7f9e49f61953e7498fab5b70717b192f2b27c11ecc1deff339d7d0dcfaaeca6e65214299c7ada3037692bcf5544f8227d19aa14e9164d380429a5df5901c0348a2036dfce24faab5f4f0d41fba5cec0b612b74d1a817ceb756885a8b712c65e24302d9c46d318c03dc4f37a59a1c905b77123f274dbc553161aab31ea533a55f9e3038dbd9b6786f22b8865446ddf35ce4f6331c73faa0f8d0ec19bfb9d023f9c4497c9b33df3dbf8a80b8f"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="cba8d60269da"}]}, 0x258}, 0x1, 0x0, 0x0, 0x4040060}, 0x80) 15:09:32 executing program 6: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25060000004800018044000400200001000a004e2300008001ff010000000000000000000000000001ffff0000200002000a004e2000000000fe8000000000000000000000000000444000000098000180080003000800000014000280080003000100000008000400810000000800030009000000380004001400010002004e21ac14142b0000000000000000200002000a004e20000000002001000000000000000000000000000107000000380004001400010002004e23e00000020000000000000000200002000a004e2280000000ff020000000000000000000000000001018000002c00038008000200000000000800030066000000080002000400000008000200370b00000800030000000080080006800400020004000280"], 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x40014) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) r3 = getpid() ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000340)) pidfd_open(r3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xf8, r2, 0x200, 0x70bd28, 0x25dfdbfd}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040000) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r4 = getpid() pidfd_open(r4, 0x0) r5 = gettid() setpgid(r4, r5) [ 275.663019] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 275.668866] FAT-fs (loop3): Directory bread(block 64) failed [ 275.669577] FAT-fs (loop3): Directory bread(block 65) failed [ 275.670233] FAT-fs (loop3): Directory bread(block 66) failed [ 275.674310] FAT-fs (loop3): Directory bread(block 67) failed [ 275.675052] FAT-fs (loop3): Directory bread(block 68) failed [ 275.683351] FAT-fs (loop3): Directory bread(block 69) failed [ 275.683999] FAT-fs (loop3): Directory bread(block 70) failed [ 275.689038] FAT-fs (loop3): Directory bread(block 71) failed [ 275.692848] FAT-fs (loop3): Directory bread(block 72) failed [ 275.695821] FAT-fs (loop3): Directory bread(block 73) failed 15:09:32 executing program 1: unshare(0x40000080) unshare(0x40000) unshare(0x200) 15:09:32 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x66) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) futimesat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={{}, {0x77359400}}) pwrite64(r0, &(0x7f00000006c0)='y', 0x1, 0x1000000) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x2) 15:09:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x4, 0x4}, 0x43) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x3f, "623f02", 0x20, 0x1}) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'gretap0\x00', {0x2, 0x0, @loopback}}) 15:09:32 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_io_uring_setup(0x75a5, &(0x7f0000000400), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) 15:09:32 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) 15:09:32 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) close_range(r2, r3, 0x2) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) 15:09:32 executing program 1: unshare(0x40000080) unshare(0x40000) unshare(0x200) 15:09:32 executing program 2: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000400)={0x6, 0x8}) syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="6e725b626c6f63ef61eb960eb9"]) r0 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000140)="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", 0xfa, 0x9}, {&(0x7f0000000240)="3cc6801d8d20a50e4129213494a36d9d6f39024180892fffca52463d596fea910d2a01b148e93dbc2770cd613f11f172c7f8bf4e6c6fdd95a60e790df3b6fbac1a37", 0x42, 0x9}, {&(0x7f00000005c0)="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", 0x1000, 0x1268}, {&(0x7f00000015c0)="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", 0x1000, 0x7}], 0x4000, &(0x7f0000000340)={[{'(}+'}, {',\x16'}, {'tmpfs\x00'}, {'&$'}, {'%-&'}, {'tmpfs\x00'}, {')'}, {'tmpfs\x00'}, {'tmpfs\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'tmpfs\x00'}}, {@audit}, {@dont_appraise}, {@euid_gt={'euid>', 0xee00}}, {@uid_lt={'uid<', 0xee01}}]}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) 15:09:32 executing program 6: r0 = syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00') open$dir(&(0x7f0000000300)='./file0\x00', 0x8c01, 0x1ce) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d82d610464bad2fe082bcbbe1d712121ee204e7e47840f3", @ANYRESHEX, @ANYBLOB=',wvdno=', @ANYRESHEX, @ANYBLOB=',msize=0x0000000000000000,noextend,\x00']) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = openat$incfs(r0, &(0x7f0000000180)='.pending_reads\x00', 0x800240, 0x105) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r4 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x9, 0x0, &(0x7f0000000440), 0x2020800, &(0x7f0000000480)={[{@data_writeback}], [{@smackfshat={'smackfshat', 0x3d, 'syz_tun\x00'}}, {@dont_hash}]}) getdents64(r4, &(0x7f00000004c0)=""/148, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3, {0x758}}, './file0/file0\x00'}) perf_event_open$cgroup(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x80, 0x6, 0x1, 0x0, 0x2, 0x20300, 0xa, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0xf}, 0x4080, 0x2, 0xffff, 0x7, 0x9, 0x4, 0x3, 0x0, 0xfff, 0x0, 0x80000000}, r2, 0x7, 0xffffffffffffffff, 0x5) [ 275.980354] tmpfs: Unknown parameter 'nr[bloca' [ 275.984787] loop2: detected capacity change from 0 to 18 [ 275.988448] nfs: Unknown parameter '(}+' [ 276.014306] tmpfs: Unknown parameter 'nr[bloca' [ 276.014937] loop2: detected capacity change from 0 to 18 [ 276.016376] nfs: Unknown parameter '(}+' [ 277.824993] Bluetooth: hci0: command 0x0401 tx timeout [ 279.872993] Bluetooth: hci0: command 0x0401 tx timeout [ 288.062584] loop3: detected capacity change from 0 to 512 15:09:44 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x90, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8001}, {0xc, 0x90, 0x3e0ccfd4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f000300040000000000000000000f008ec4", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040008", 0x1d, 0x4200}, {&(0x7f0000000540)="200000bed4c49a2e17", 0x9, 0x4280}], 0x0, &(0x7f0000013a00)) 15:09:44 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x808d0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x400, &(0x7f0000000140)=ANY=[]) getdents(r0, &(0x7f00000002c0)=""/4096, 0x1000) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/94, 0x5e) 15:09:44 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = signalfd4(r0, &(0x7f0000000400)={[0x9]}, 0x8, 0x80800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40024000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r3, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040810}, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffb964, 0x6b}}}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x9, 0x6}, {0x7f, 0x6}, {0x9}, {0x5, 0x2}, {0x7, 0x7}, {0x7}, {0x0, 0x3}, {0x8, 0x5}], "1b9d842078754390"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0xac, 0x4}, {0x40, 0x1}, {0xf8}, {0x82}, {0x0, 0x4}, {0x4, 0x6}, {0x9, 0x7}, {0x3, 0x3}, {0x8, 0x5}, {}, {0x18}, {0xb4, 0x1}], "1de971e915460850"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x3, 0x7}, {0x1f, 0x3}, {0x80}, {0x81, 0x7}, {0x8, 0x3}, {0x5}, {0xff, 0x6}, {0x6, 0x2}, {0xf9, 0x2}, {0x40, 0x4}, {0x8, 0x2}, {0x80, 0x6}, {0x7, 0x4}, {0x7, 0x6}], "6ecbc1e84387eadd"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x1}, {0x3f}, {0x1, 0x4}, {0xe4, 0x4}, {0x1, 0x5}, {0x30, 0x6}, {0x45, 0x2}], "bf2d208beec5e4bc"}}, @NL80211_ATTR_QOS_MAP={0x10, 0xc7, {[{0x7f, 0x4}, {0x1f, 0x2}], "46fd38565874cabf"}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc8d0}, 0x40040) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r10, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$EXT4_IOC_SWAP_BOOT(r10, 0x6611) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r8, 0x5, 0x0, 0x0, {{0x7}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) 15:09:44 executing program 1: prctl$PR_CAPBSET_DROP(0x18, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) syz_io_uring_setup(0x3b38, &(0x7f0000000040)={0x0, 0x29e5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x48000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="04002bbd7000fddbdf2505000000140006006261746164765f736c6176655f31000008000500ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x20040848}, 0x800) 15:09:44 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736689254300080120000400004000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x10000}], 0x0, &(0x7f0000011200)=ANY=[]) getdents64(r0, &(0x7f0000000040)=""/167, 0xa7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) 15:09:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 15:09:44 executing program 0: openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) [ 288.106329] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.115158] loop2: detected capacity change from 0 to 256 15:09:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000fc8e0b4946704d25a0f18393550c433b010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e1f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4400}], 0x0, &(0x7f0000014a00)) [ 288.155297] loop1: detected capacity change from 0 to 4096 15:09:44 executing program 4: timer_create(0x5, &(0x7f00000000c0)={0x0, 0x16, 0x0, @thr={&(0x7f0000000140)="1b7d6efd2a0ca3c6afedb6df874b7d4259c14f2cbcfceae97134a141767e77ad1633f3e672d72199971ac59cefeb86b23c8927bbb0258bb11c1d2b0a45ca233f6d460562d6d5f04df6136672037f293f8c810a", &(0x7f00000001c0)="751af5631aab87bff7211f693f6ed2e7ad3c473cea19acacb06b62411b3c24d52180625922f32267183352c374b121a6204d3c9015fc2ec0222491cbdabbb0a2a389ae63193eeab2b06992167b5adba26b"}}, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r2, r3, r0) [ 288.178021] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:09:45 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000940)='./file0\x00', 0x800000000000, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="78d30500000052"]) rmdir(&(0x7f0000000000)='./file0\x00') [ 288.324615] EXT4-fs error (device loop1): ext4_quota_enable:6324: comm syz-executor.1: Bad quota inode # 3 15:09:45 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 15:09:45 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 288.369381] EXT4-fs warning (device loop1): ext4_enable_quotas:6361: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 288.422570] EXT4-fs (loop1): mount failed [ 288.482738] loop1: detected capacity change from 0 to 4096 [ 288.508693] cgroup: Unknown subsys name 'x' [ 288.539141] EXT4-fs error (device loop1): ext4_quota_enable:6324: comm syz-executor.1: Bad quota inode # 3 [ 288.541787] EXT4-fs warning (device loop1): ext4_enable_quotas:6361: Failed to enable quota tracking (type=0, err=-116). Please run e2fsck to fix. [ 288.549841] EXT4-fs (loop1): mount failed 15:09:57 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xbc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5681}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x240408d1}, 0x40088c0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0xc000) fcntl$setsig(r0, 0xa, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') pread64(r2, &(0x7f0000000180)=""/16, 0x10, 0x4) 15:09:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 15:09:57 executing program 3: io_setup(0xc0f, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000280)={0x0, r1+10000000}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r5 = syz_io_uring_complete(0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000840)='ns/cgroup\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000880)={0x0, 0x0, "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", "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"}) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x5) pwrite64(r6, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) io_submit(r0, 0x8, &(0x7f0000000800)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x89, 0xffffffffffffffff, &(0x7f0000000000)="f357a7b99d523122ecf65884f8f48032290558d134f6b6785252dcf40186991e5019b3daa0ea475bf9f120b7a178e71a8f137da490ee81b190d7db34dcfd4c69c40eb1cb4bf654ab9961576d02a7a36ad561e58f734dff8725960d6d43823503eee76919e86466d4b7319466c81ec42e4628ba7e", 0x74, 0x8, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="8d1a85321b6ec59aac0c6a2fad7579e2f89192305b15510fd30ab45d5c794559217658f53c7cdd4d8fe91812e1d1e596c03e5832fa0de09ab6dc79f058db0d04f23d3800129ff30aa7a8fa2ab508ab86d162a9140de79239812dcd38e2cfb7f4db5f26adfcdd7bcd4fd60b0ac607f62342708c917e730484645fcc2e84d785fe1a143901bb8bd066671220286c3f341c79a93025418fd3bafc451384b16871cc048595dcbffe59692de24b654549c9d56ddfeb1fc34adc2d", 0xb8, 0x2, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000000300)="eb5adebeba569ff9d0f652da3c66eb0ea1850bfb89a99aeb860bab3aff6c8217b6e5ab774cad0eb5598d9ace98e69bdcf179", 0x32, 0x100, 0x0, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x3000, r2, &(0x7f0000000380)="86def5af6a6b47b9167ee87d31566922e2cb4fc2a763ebbebb54f094e754496740009bc1dc122b2a9f82873804f1d16b430bfaf44350535725b1ed749c1e209c991403b1d6c37fd0b001ff6258b9579a8dffa8ee6b0e7f862ea93954f675b00110494572a75993d40381e11edf2ba83e627bad5885734014e35a002ab8ab601c4c957787aa3c5b116108ae4491d6c2870e2400a7cdf5b0dc3b51d6f670a2bd507d48900e921bd0454b60e9c40487769cc280ec930db075dbc00a4f4f3b5ba4040bafa61cc65fe703294397", 0xcb, 0x0, 0x0, 0x0, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2, 0x1000, r4, &(0x7f00000004c0)="14e532115c8ffc3c79e5108c052f6c12c5badd78cf73f5b9fcd0382909298cf55f24c68df5742ffd64a5ef579855428a22ff02f0ff337ac426f309ca14f97ac95f1197c1abf4201e81a88110c48b0fa6371719f0b74147a74e9bbb90b08fc63000ad08a69c599b387f1a8aa32df610bf0f8c2543898455b861577bad", 0x7c, 0x3f, 0x0, 0x1, r5}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000000580)="e5cfea52c444d020325ce053f0080d424a5ba27908ccf94d60370eb210ac8baccc00ffbfd5a470ce523d7987b63a24e90db6b2765351df1c4b0c03127ee5a92b679721072ce14850ff41627426c0109a63d95d9b5c83ea7f35434f42adf867922aa51505cdb7c2c1bbfa070f0676", 0x6e, 0xfffffffffffffffa, 0x0, 0x1}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x88e6, 0xffffffffffffffff, &(0x7f0000000640)="eed1e2ae1e2834e720df239a47f55a131192a8b65798ce83a270885fc3ff0ef33f6e607c10f383e28897044a739070b8c9ca89d0159b960ea7bc8b248c71dec848cbde20dcd6525540b623da2a6676164504efd150ac9be43bceec60cab1c860182e92dd8e01cd2622537a66ba541c670f67534f314efa57fc7af2d705d455cbcd07fa27d1a9fbaed146d17b6d1d4efaf6d12a64a0b0ef9700797ff51304b91d0bc8ef7913327dbf0d41326618f5462b4714d6d2e6e1654c33818ad8f15adc07e6761a37fe7251476e4ce8ce5eaf6ba819d54f104d046c38bc0c2c1ebedff53b08bba8a9a43b233ab387ea44138843c46aa6f619054f", 0xf6, 0x2fb7, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x6, 0xffffffffffffffff, &(0x7f0000000780)="b7a20dcf219b68", 0x7, 0x8, 0x0, 0x4, r6}]) 15:09:57 executing program 4: timer_create(0x5, &(0x7f00000000c0)={0x0, 0x16, 0x0, @thr={&(0x7f0000000140)="1b7d6efd2a0ca3c6afedb6df874b7d4259c14f2cbcfceae97134a141767e77ad1633f3e672d72199971ac59cefeb86b23c8927bbb0258bb11c1d2b0a45ca233f6d460562d6d5f04df6136672037f293f8c810a", &(0x7f00000001c0)="751af5631aab87bff7211f693f6ed2e7ad3c473cea19acacb06b62411b3c24d52180625922f32267183352c374b121a6204d3c9015fc2ec0222491cbdabbb0a2a389ae63193eeab2b06992167b5adba26b"}}, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x890b, &(0x7f0000000880)={'wg1\x00'}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r2, r3, r0) 15:09:57 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 15:09:57 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:57 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="19", 0x1}], 0x1, 0x8000000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r1, 0x0, 0x2) 15:09:57 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:57 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="3c000000000000000000000002f16ad16c00"/41]}) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x2) 15:09:57 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323937363736343400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="20000000100de17a100de17a00000000d0f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000000140)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000000040)="c041000000300000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d0f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000003f81d1a200000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000600000000000000000000000000000000000000000000000000000000000000000000000000000009caef32e00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332393736373634342f66696c65302f66696c6530000000000000000000000000000000000000000000000ae0cdf100000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="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", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000008880d39500000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000000080)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="07e631696ce1952093211bc692b0f01aad7b504027f0e8fcbb4d2a7d70af20c70ee94725d0f3e3e6c71342e7bc18079b5c4cffe84fd9ccfcc8d6273c18119862ab445b37ce69c958cb968078e09808d633d3aa715035b3986ef91ac369fb1754435dca2ddf078da8e1d48b380c63577c300c617e94fb31b20761ba0370215701ed165008000000000000000d20f0fa44bbdf51e91b45edd11016057cfb9024856b339e1b88981e99c7ff6704a8294aef5eafcaeb207f70d354a3ecb829d3278dddbd7ef78d010b455f2d8699a2f2ab7a62abf614659d8782216697a79af24883d0e03e4a78377a"]) 15:09:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f00000005c0)={0x20071026}, &(0x7f0000000580)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b40)=ANY=[@ANYBLOB="356fe17c1eaabc692a874fb5530d0f9e6cf759c6d02624247b41fcf1d50f5e8fe282e9191887464e893647dd0d6435065a103815819a75dd89eb96a53ad44be593f308aba8a36b0a07574e536cfd3749d1518588f9cec9a59b2ba61a1d0c14320a6b06a3480a46", @ANYRES16=r1, @ANYBLOB="020029bd7000fddbdf25890000000c009900ff0700007d0000000c041d804000008005000700d0000000050007000900000005000600000000000400040005000c0001000000050008009c00000005000a000100000005000600000000000c00008005000b00010000000c00008005000800b800000038000080050006000100000005000800eb000000050009000100000005000600010000000c000200000000000000000005000600000000001400008006000500d600000005000800150000003800008005000b00000000000c000300060000000000000005000700e5000000050006000000000005000a00010000000500090001000000040000802803008005000900000000000c010d803c0000801c000100482430121b03120c020102046c481b0001096c05046c60240500040000000000140003000200010002000100724a050000020700cc000080140003000400fd0705000000a10b0500991100001e00010060360512016004180c121230090b30030b601b0c1b36486c0c05000018000200070532514042184000173034560e262f1d361a4c3d000200384c0948073b1540062e24285040112c090c042207012c430b41220f34194228562018184d42371d45413420412f174b13564c2b2f3a3a2549000000140003000900ffff485d1f0081ff0300080000001400030001046066000401000300230c0600090014000300040000fe0400000800000500000065d305000a00010000000c000300d50200000000000005000700630000000500080039000000dc010d80a4000080400002002b32343405454607232245421d08381e414745011a48b1273a04043115162c2005400f51153f192f371010013b112813364f490d390132431331482605000400010000004400020021462f261945021e4d090a45381037480836113c3b2445164a13003913405731013f0402143d0b10311420034c38244c0048402423012f190354311a2005545514000300ea8210000600040000800400020003001400028005000400020000000500040000000000640000800500040000000000050004000100000005000400000000000f000100046c36031b366c0424601600360002001f242245281d0e4c3906103917541a223813303b311428354848273144342035482209082a18221443574a192a1a0948362300005800028005000400020000004c0002004a0101344f1a20554254452007104313233640470729522b220855492004562c24211240310d181e410027564c34353124472822400a4862242d3c52095327083e00222006210f38640001803e000200202e30362d044d3b27562a2a3b19423a571026491e3c143a1149535548402f203e4f4c25201b040c412e473319064d502d482149211632544d2a00001800010018600216241b451609041b0c0604780b24053624070001006c09010005000800a80000000500060000000000"], 0x42c}}, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000001000000008000300", @ANYRES32=0x0, @ANYBLOB="219afe571a2e5abf198f5913615c131d6f823f5fe03e8202fd5d2704ffe0235878dec375ee149e03ea85aca0af0107d2b6ed3668f7aa5ee6524c2fa5da7da80cc5a8"], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000800100000f000000000000000100000005000000000004000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000e0f4655f000000000000000001000000000000000b0000000004000008000000d2c201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000cf5621b2fc4343c4a394dcf8911d5966010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000018000f000300040000000000000000000f00c2b4", 0x20, 0x800}, {&(0x7f0000000600)="ed41000000080000f2f4655fe0f4655fe0f4655f00000000000004004000000000000800050000000af30100040000000000000000000000010000002000000022427bf6fa8a0032bf030c073fa5805c581cee019126cf5b0af1d1c8ed29ddcf4caf6fe412c72cfb74997e74aa6eeaad", 0x70, 0x2400}, {&(0x7f0000011700)=' \x00', 0x2, 0x2480}], 0x0, &(0x7f0000013e00)) [ 301.131307] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 301.143491] loop0: detected capacity change from 0 to 2048 [ 301.146796] loop7: detected capacity change from 0 to 1024 [ 301.162319] EXT4-fs (loop7): Unrecognized mount option "1il !ƒ{P@'M*}p G%B\LO'<bD[7iX˖x3ӪqP5niTC]-ԋ8 cW|0 a~1ap!WP" or missing value 15:09:57 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 15:09:57 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020820000200008000f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="806b2fc69a6d7f6e7269208708cb3c60471374c8310ecf89965cfc9d7c830a7dffeaac7d382b22611bcd38a2f4e24a2c8c"]) [ 301.194915] loop7: detected capacity change from 0 to 1024 15:09:57 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001", 0x4d, 0x400}], 0x0, &(0x7f0000000080)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) accept$unix(r0, 0x0, &(0x7f0000000140)) [ 301.219943] EXT4-fs (loop7): Unrecognized mount option "1il !ƒ{P@'M*}p G%B\LO'<bD[7iX˖x3ӪqP5niTC]-ԋ8 cW|0 a~1ap!WP" or missing value 15:09:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:09:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup2(r0, r0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@rand_addr=0x64010102, @loopback}, 0xc) [ 301.237692] loop2: detected capacity change from 0 to 3 [ 301.268467] loop1: detected capacity change from 0 to 4 [ 301.271760] FAT-fs (loop2): Unrecognized mount option "k/ƚmnri <`Gt1ω\| [ 301.271760] }}8+"a8J" or missing value [ 301.282827] loop2: detected capacity change from 0 to 3 [ 301.285211] FAT-fs (loop2): Unrecognized mount option "k/ƚmnri <`Gt1ω\| [ 301.285211] }}8+"a8J" or missing value [ 301.299588] EXT4-fs (loop1): invalid first ino: 0 [ 301.320142] loop1: detected capacity change from 0 to 4 [ 301.341102] EXT4-fs (loop1): invalid first ino: 0 15:10:11 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000d6f4655fd6f4655f0100ffff53ef010001000000d5f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000441356bbe0d347458781d90fbb6137b4010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x10000100001000}, {&(0x7f0000012600)="ed41000000100000d5f4655fd6f4655fd6f4655f000000000000040080", 0x1d, 0x4}], 0x0, &(0x7f0000014d00)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x181000, 0x110) 15:10:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) close_range(r1, r0, 0x2) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000400), 0x7, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0xffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000040)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="003a00dbd5"]) 15:10:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x3}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="1e67cb67a077751b50cf9b", 0xb}], 0x1) 15:10:11 executing program 7: ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0xc0185879) 15:10:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:11 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080), 0x4) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0fffffff0f", 0x10, 0x10000}, {&(0x7f0000010600)="53595a4b414c4c45522020080000e980325132510000e980325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020100079e970325132510000e970325103", 0x5b, 0x11000}, {&(0x7f0000010800)="2e20202020202020202020100079e970325132510000e97032510300000000002e2e20202020202020202010", 0x2c, 0x11800}], 0x0, &(0x7f0000011000)) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x100) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'lo\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x5, 0x80010}}) 15:10:11 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000001000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0xff, 0x80000001, 0x8030, "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"}) 15:10:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) socket$netlink(0x10, 0x3, 0x4) [ 314.465738] loop3: detected capacity change from 0 to 264192 [ 314.468345] loop0: detected capacity change from 0 to 280 [ 314.478239] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.521093] loop1: detected capacity change from 0 to 512 15:10:11 executing program 4: write(0xffffffffffffffff, &(0x7f0000000400)="f51078530b20161290dd8623a6eac7be23badfc5b97d9e5b657c16b2ee740e1c373b6691c8a48e9655e6bd5e1985d850a7", 0x31) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001500)={{}, 0x0, 0x12, @inherit={0x80, &(0x7f0000001480)={0x0, 0x7, 0x5, 0x9, {0x3c, 0x6f, 0x7, 0x7fff, 0x8cea}, [0x5, 0x1, 0x6, 0x4, 0x0, 0x10000, 0x1000]}}, @subvolid=0x8}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0xa, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000440008000f801002000400003000000000000008000293b8943f153595a4b414c4c4552202046415431322020200e1fbe5b7cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a00", 0xc0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aaf8ffff00f0ffffffff078000ffffff00"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x402}, {&(0x7f0000010300)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x5fc}, {&(0x7f0000010400)="f8ffff00f0ffffffff078000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010500)="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", 0x120, 0xa00}, {&(0x7f0000000080)="2e20202020202020202020100051e870325132510000e87032510300000000002e2e202020202020202020100051e870325132510000e870325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200051e870325132510000e870325104001a040000", 0x80, 0x2200}, {&(0x7f0000010800)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3200}, {&(0x7f0000010d00)="73797a6b616c6c6572730000000000000000000000000020369975f200000000", 0x20, 0x4200}, {&(0x7f0000010e00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8200}], 0x152003, &(0x7f0000000140)=ANY=[@ANYRESDEC]) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x1, 0xf9, 0xff, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x700, 0x7800, 0x8, 0x6}}) r2 = accept(r1, 0x0, &(0x7f0000000040)) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/4096, 0x1000) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000340)=""/99, &(0x7f00000003c0)=0x63) [ 314.534076] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 314.537163] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 314.538357] EXT4-fs (loop3): group descriptors corrupted! [ 314.563561] loop4: detected capacity change from 0 to 130 15:10:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x2d2e928210a34cbd, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:11 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x123f02, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="3c0000000000000000000000000000000000d70000000000000000000000006d00000000"]}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x202, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000180)={{r1}, {@void, @actul_num={@void, 0x2, 0x47}}}) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="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", 0x130, 0xb800}], 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00ddc2dd6f5ef1018d162b18ffcb26ed8183795f03148ddb3a65f12c1a2ab51d885941bd33d3102b5853dedae9dc045851618ad5e5e5e38b9da43df7013fa4ca05cbda50361781a34f3b84ab34681068ea41941eda446126b4bf6c8e809b00000000000000000000000000000000000000000000b97225c7d331679212c1640c0f2c265ed8621a9f859f5c0228697692f1f8a6edf0b0a72e710da4724faa273b6a4fcca458e81b55a8deab812f1f1cca1f56571cd6e044128d40bc623b03e6b30aabe60d5dde78772a7489f02eae52f0869412d62c97a4893ad41ce5098825f3e8e6381d23752817bd699ab6602f"]) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) 15:10:11 executing program 7: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008007809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809140b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c001f0000000000001f00080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0xf000}, {&(0x7f0000011a00)='\"', 0x1, 0xf800}], 0x0, &(0x7f0000013500)=ANY=[@ANYBLOB='@']) r0 = open(&(0x7f0000000040)='./file0/file0\x00', 0x8002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val, @max}}) [ 314.636862] loop4: detected capacity change from 0 to 130 15:10:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) readlinkat(r0, &(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)=""/107, 0x6b) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000001c0)="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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x30400, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x7c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0xf}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0xc5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x65}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x9}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff1a}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff11}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4008804) r5 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r5}], 0x1, 0x0) pwrite64(r5, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000001540)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001500)={&(0x7f0000001340)={0x1b4, r6, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x50}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xe4, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xe67}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x382f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x101}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x800}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x11, 0x1, @random="3371fe61c9f03c7b8d7b4797a4"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x98, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x93, 0x0, "587b0167f01a99c27e6912f1a0c924e007a7251cedff38b117b545c98e0ee81db3e1951324384db52a24088c028baf5b6f992bfe6ac45aff3a615dcae426409ebf626a0b7ea7fba1a0b4eb6aa422c370f7280377303978b5767990b1f91037740b2d8be6008d99655498602069396d58bd8871052814970474ba0dcfbdd3a30ab0f0c0929da9f66a897b445dbdca3c"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) [ 314.663682] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 15:10:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 314.746461] loop7: detected capacity change from 0 to 248 15:10:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x6, 0x4, 0x1, @empty, @empty, 0x8000, 0x700, 0x7}}) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:11 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$packet(r1, &(0x7f00000005c0)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x7fff, 0x0, &(0x7f0000000100), 0x800, &(0x7f0000000140)=ANY=[@ANYBLOB='huge=within_size,mpol=prefer=static,dont_hash,euid>', @ANYRESDEC=0x0, @ANYBLOB=',uid<', @ANYRESDEC, @ANYBLOB="2c6436e4f9a5bdc7d86f6e745f686173682c", @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) r3 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000240)='./cgroup/cgroup.procs\x00', 0x100, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000280)="9bc27b99464477ed2daa10c6dbbfb995fe4c7f51f5cb416711a58520545637", 0x1f, 0x3}, {&(0x7f00000002c0)="8cdd35a4258415730dec7f0514cbfad40d56412a08df5b15ff24cdb135e343ea9b5e95b565a81eb9a11e3af4b7fcfe9b4740d5974c6d4b58341cf696594f877dc30cf47aa3dcc6a3c474f0353b5fa2874db5a2204ac9ca9aa90a503c8df5d289c21d2a26816dc9acb0e21e338eb3fba95630e5cec4ac7fa0e34c2e7df64c0c11ff55b01b9b332589e4c85a828a8d6eece7aecd15d4390a6b0da143be55ab62802dbc35816091019334fae892994c958e9c940ca352c0aebaf275fcd4752855c145aee6cfaf2831891cc76fcc30d274c0d318a10dc4007d88a0bec0d9e923a6532e86281d", 0xe4, 0x5}], 0x4830, &(0x7f0000000400)={[{@nr_blocks={'nr_blocks', 0x3d, [0x7]}}, {@huge_always}, {@nr_inodes={'nr_inodes', 0x3d, [0x25, 0x39, 0x31, 0x6d, 0x35, 0x70]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x2d]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@dont_appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '}'}}, {@smackfshat={'smackfshat', 0x3d, 'dont_hash'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'dont_hash'}}, {@smackfsroot={'smackfsroot', 0x3d, '=static'}}]}) r4 = signalfd(r0, &(0x7f0000000500)={[0x6]}, 0x8) mount_setattr(r3, &(0x7f00000004c0)='./cgroup/cgroup.procs\x00', 0x1100, &(0x7f0000000540)={0x180002, 0x0, 0xc0000, {r4}}, 0x20) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000200)={@id={0x2, 0x0, @c}}) [ 314.889098] loop7: detected capacity change from 0 to 248 [ 314.893705] loop4: detected capacity change from 0 to 63 [ 314.896956] tmpfs: Unsupported parameter 'huge' [ 314.911676] loop4: detected capacity change from 0 to 63 [ 314.912674] tmpfs: Unsupported parameter 'huge' 15:10:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) sendmmsg$inet6(r1, &(0x7f0000004200), 0x0, 0x4040041) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x154) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r2, 0x89fb, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'sit0\x00', r3, 0x2f, 0x1, 0x2, 0x7fff, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x21}, 0x8000, 0x8000, 0x6, 0x10001}}) 15:10:11 executing program 1: io_setup(0xc0f, 0x0) io_setup(0x9, &(0x7f0000000000)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYBLOB="7c16a7d5376fb7144c1e049b2313c05e143c9c8749", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESDEC=r0]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xfb0, 0x50400) syz_open_dev$sg(&(0x7f00000000c0), 0x2019e2d2, 0x400002) 15:10:24 executing program 1: unshare(0x151e3834b0cac2cf) unshare(0x2000500) unshare(0x0) unshare(0x44000900) unshare(0x26010400) unshare(0x70020100) unshare(0x50000100) 15:10:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000440)=0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000f2ffffffffffffff000000000000000000"]}) r2 = dup2(0xffffffffffffffff, r1) syz_open_dev$tty20(0xc, 0x4, 0x1) fcntl$setown(r0, 0x8, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = open_tree(r2, &(0x7f0000000200)='./file0\x00', 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000280)="3e2d24b4ad9e84eb6a84fb3ac2048fea", 0x10) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000100)) write$P9_RGETATTR(r3, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x2288, {0x1, 0x3}, 0x4, r5, 0xee01, 0x10000, 0x0, 0xd5, 0xfffffffffffffffb, 0xd71, 0xfffffffffffffff9, 0x5, 0xee7, 0x92a7, 0x1, 0x519, 0x2, 0x9, 0x0, 0x2}}, 0xa0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) 15:10:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736676209600088020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}, {0x0}, {0x0}], 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0004c572d6f2d139d8794140d3e8245353dbb78c4c865748dcb095861fa377"]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000680)=0xe8) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000900)=@physical={0x0, 0x6, [{0x2, 0xe, 0x2, 0x2, 0x0, 0x0, 0x1, 0xe, 0xe, 0x0, 0x6, 0x5, 0x3}, {0x7, 0x4, 0x2, 0x5, 0x3, 0x0, 0x3, 0x3, 0x2, 0x1, 0x0, 0x5, 0xe88e}, {0xc, 0x9, 0x2, 0x8, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0xbcad, 0xce9, 0x1}, {0x0, 0x9, 0x8, 0x0, 0x8, 0x0, 0x3, 0x4, 0x2, 0x0, 0x2, 0x3ff, 0x10001}]}) setresuid(0x0, r1, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x4, 0x2, &(0x7f0000000540)=[{&(0x7f0000000440), 0x0, 0x730a}, {&(0x7f0000000480)="9b158bf5b2aa9b2e9b0d218b79bccfbf07a03d642f3abd7146eb816bb6ddef66cb81369ae3239a1ada331b19dbc3d68b3a791fb661954ed3a8567601af921de773b3105b65fb59483ee7d45b68d486289f0af9c4b1d182e5bced34c1d80a8e8e986544761a988132fadaa9ab7c7d3a0f03663a0a32e44390a4dca69de238db942742e605d8448df5ff7d5c8881366532e2b55683bfeb35bd9f36d0e9094c627affd0b9abae1df1415ab23b407039", 0xae, 0x10000}], 0x8000, &(0x7f00000006c0)={[{@fat=@time_offset={'time_offset', 0x3d, 0xab}}, {@fat=@check_normal}], [{@smackfsroot}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, 'tz=UTC'}}, {@audit}, {@dont_measure}, {@uid_lt={'uid<', r0}}, {@fowner_lt}, {@measure}, {@euid_gt={'euid>', r1}}]}) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) syz_io_uring_setup(0x65c2, &(0x7f00000007c0)={0x0, 0x3433, 0x0, 0x0, 0x85}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000440), &(0x7f0000000840)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000880)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}, 0x8) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x9, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="ed755bc7cf20cd8bbb5374bb98b584e102d81413793b2b43d2862bba11b2d28fe9be1bef8574545cad42893831d20898561f36df7a1b1f3a3b5e7829181aa6b17abd6f3c044478122b340e878e91df6ae2c08033e6e8cb09cf4f26f25bedb0d2f3f0a8b4e3ff73ad2027f0e5d89779a7ffec9cb65fcc8232fe4db4b240a25b1f4c97c5a8690b4df181a4505eaa0784d465f41569924d5886af7c4583f671b2d141cd96cdd76a7b6707655155e02e15d8", 0xb0, 0xe15fdec}, {&(0x7f0000000280)="215f645467c76f550538ae110b754b096383244a58b8e4580721fb9bc87c08ec9ce12902510ddd50d97c5f8ab8b0945c88a50c86dd8cc59592bd3aebcee7350fb93d85b0da026797612e71c5c9c4f9a1baac36721a386012a13e593c4135d2f0b2842df8e71dea28b89fbe6876f8e17f699ad4a927cde18abca53793438774077775ee77429aeb1ae3b38b54def862ebbe1546bc689a4747159bc24a2d0c8cf27830bd803f5c2d", 0xa7, 0x8000}], 0x2000, &(0x7f0000000340)=ANY=[@ANYBLOB='tz=xlate=0,uni_xlate=1,time_offset=0xfffffffffffffe0e,uni_xlate=1,mask=^MAY_READ,\x00'/97]) 15:10:24 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020801000270008000f801", 0x17}, {&(0x7f0000010300)="53595a4b414c4c45522020080000e680325132510000e680325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020", 0x4b, 0x600}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002e355727896d3a5238749f8b8ccd07a8432877803517670f2741a5fee3043fea041e7c6b41dc4781788e2b9384cee75af1194e7f47666fc38bef515536a12fafae6ab3570fd8d714eea412ab0d0c5da786008d963a375c1f488c1ff2b725a97d40183a9beffa46e6"]) getdents(r0, &(0x7f0000000480)=""/155, 0x9b) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/backlight', 0x101800, 0x0) 15:10:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:24 executing program 4: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 15:10:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:24 executing program 0: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x80000, 0xe, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa5252614100"/64, 0x40, 0x1e0}, {&(0x7f0000010200)="00000000727241610100000007000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001000000000000000200000001000600000000000000000000000000800029293ac6f153595a4b414c4c4552202046415433322020200e1fbe777cac22c0740b56b40ebb0700cd105eebf032e4cd16cd19ebfe54686973206973206e6f74206120626f6f7461626c65206469736b2e2020506c6561736520696e73657274206120626f6f7461626c6520666c6f70707920616e640d0a707265737320616e79206b657920746f2074727920616761696e202e2e2e200d0a0000000000", 0xe0, 0xc00}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4000}, {&(0x7f0000010600)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4200}, {&(0x7f0000010700)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4400}, {&(0x7f0000010800)="f8ffff0fffffff0ff8ffff0fffffff0fffffff0fffffff0fffffff0fffffff0f", 0x20, 0x4600}, {&(0x7f0000010900)="53595a4b414c4c45522020080000ec80325132510000ec80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202010004fec70325132510000ec70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c453120202020202020004fec70325132510000ec70325105000a00000041660069006c00650032000f00140000ffffffffffffffffffff0000ffffffff46494c453220202020202020004fec70325132510000ec70325106002823000041660069006c0065002e000f00d263006f006c0064000000ffff0000ffffffff46494c457e312020434f4c20004fec70325132510000ec703251070064000000", 0x120, 0x4800}, {&(0x7f0000010b00)="2e2020202020202020202010004eec70325132510000ec7032510300000000002e2e20202020202020202010004eec70325132510000ec70325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c453020202020202020004fec70325132510000ec70325104001a040000", 0x80, 0x14800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x24800}, {&(0x7f0000011100)='syzkallers\x00'/32, 0x20, 0x34800}, {&(0x7f0000011200)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x54800}], 0x0, &(0x7f0000011300)) getresgid(&(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)=0x0) setregid(r0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x5, 0x6, &(0x7f0000001440)=[{&(0x7f00000000c0)="df3887a092f5d81a3e0739c6a896e074d9606a09e342926b4c52d2159328a71b8ccecbcbef8cd5f911d8e6", 0x2b, 0x1}, {&(0x7f0000000140)="d73fc8c20309daedb3759f2fd999e13e578503777a0e5375c0fdbe51a03b068d7a9493e1240ed84c4eac2bbe18", 0x2d, 0x33b2}, {&(0x7f0000000180)="d8462416c4cf0bbdacb1f66483", 0xd, 0x272fbe5e}, {&(0x7f0000000380)="178109620a48b51fca507376137575c235e3f1842ff6f259719220d65e8520d88d7ad8eeee9736c1ffbb6c77911e9616290ff9177bbbee4b03eae40adb572da083732c9d2e8cf103e55065784a6d8caa8a9dc4da57b96985c779961f7c3e4199e849243fe3456dd97467a00521317e2112f2c3d3ef4209b81464dd0b1c2ae7b2a13af1", 0x83, 0x5}, {&(0x7f0000000440)="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", 0x1000, 0x8c3}, {&(0x7f00000001c0)="39306136969be1554fbab68b5c3d358f908a81996c92c2757fd8746a1aa4c3635ef6f806d159e63498a46d", 0x2b, 0x7}], 0x20a2000, &(0x7f0000001500)={[{@size={'size', 0x3d, [0x39, 0x38, 0x2a, 0x32, 0x67, 0x37, 0x25, 0x65, 0x36]}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@size={'size', 0x3d, [0x6d]}}, {@mode={'mode', 0x3d, 0x4}}, {@huge_never}, {@huge_always}, {@gid={'gid', 0x3d, r0}}, {@nr_blocks={'nr_blocks', 0x3d, [0x39, 0x78, 0x6d, 0x6d, 0x32, 0x67, 0x2d]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x65, 0x25]}}, {@uid={'uid', 0x3d, 0xee00}}], [{@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@obj_type={'obj_type', 0x3d, '.\''}}, {@dont_measure}, {@dont_appraise}, {@fowner_lt={'fowner<', 0xee01}}, {@smackfsfloor}, {@smackfsdef={'smackfsdef', 0x3d, 'vfat\x00'}}]}) [ 328.256714] loop3: detected capacity change from 0 to 256 [ 328.277518] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 328.283747] FAT-fs (loop3): Directory bread(block 64) failed [ 328.283766] FAT-fs (loop3): Directory bread(block 65) failed [ 328.283780] FAT-fs (loop3): Directory bread(block 66) failed [ 328.283794] FAT-fs (loop3): Directory bread(block 67) failed [ 328.283808] FAT-fs (loop3): Directory bread(block 68) failed 15:10:25 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2200000, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 328.283822] FAT-fs (loop3): Directory bread(block 69) failed syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x7f, 0x9, &(0x7f0000002500)=[{&(0x7f0000000100)="1a6535b0b7e34e4df240293b9e3c5fd5039345eeb02ed1c25b8635ee60", 0x1d, 0x101}, {&(0x7f0000000200)="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", 0x1000, 0x10001}, {&(0x7f0000001200)="2bcb41aaa44124a41aee19469b4650cf53a4a50516169a40968750ff248f6491d35e9b28f0ae4c6b64075004fdd2e802564252610febe7182ecee03c47caf49c54ea8c99d4934bf02433f2dbc2a947dc768a1a3aa0b70a4436a33fa5a7d489b66baa5ff9b1e22b7eaad57d44c89e3649fb93e0ac65b8677feee3e31d6b4d3976d2ee5592f4e31c2b3c65778125559c2e32f8b84a512b17e17dc2a5683d80dc22a9dadb9daca602e3c1695e52ff817e5ad38e185cf20eacbc9def0f50a4ae79b589f3c491af2593ad7149ea2db98736fd6ca39dbfb74aaf2ccf7f01fe5206e2ef7a7d7d48fe", 0xe5, 0x7}, {&(0x7f0000000140)="c3a7a9af5c886bc42932883285408cbfd8c39dc3d45fbbc85b6e1dc63eb7", 0x1e, 0x7}, {&(0x7f0000001300)="be6712825ec627fb39ee6d93573f6087df960c7872e430ab371a42030f3452b2f803d824e0a41cb910b2b242ce7274d2111db6d733d8eab2de50de688b905d046a016637e9ff77eb5128fc408a6d1c28c298f4002def57dc4598b8a38d3ff36cfd9e8834eb2f7b2961c0d81daf3ac04e40f72fb9084867e9fb5fb8836071177815", 0x81, 0x5}, {&(0x7f00000013c0)='z', 0x1, 0x7fff}, {&(0x7f0000001400)="f31517874ca3087a5c5388a8b6731cc26d61a339bcaf63fe5bc97e10d380b969092e052dd6b0931b0987217eecf9b75bd8c457078d7c362dfa6232304ac98854d7a11220b48a1971c1e874ba2bae884dcfe3d79879b3d158a70cacfdab457a6391b24d07f6419555a9f790dcfa56a81659ec1833f5e241f969f71ae6a72e298a5b61ee43197a191583bce80974e5c3761af1e130cb056e8864107f91dcbb2f9264f47b00722cb28cae46a1e3d635d81ad51387d31f8be227a7c10370bb284515a5a85c8e19650497c3439159c1c0cdc8ae0b9a6e86df2d44bc48071f125207268e37805694827a65bdab06b19102a1a2061ba1217735ca37a78277fdc60204aeaccda06a5c81f355a332092002c7253e37aa205bbef0e3ad2230dc3e1361d31573508d22e3912da7c6fa00c70b666165cfc296851cba93b18756c19850db4e494fbce08344f2f4b7534fff61634382d3a602b8f39d773082af41c59763068a25fa75e5bb59e2122357288a06d0395ed6559f5f0aa5e651e5fa57714666ee1a3ac57e80c6a43fcd6fb2f02d18524bcbe842a6111a13987c17678a9ed784f1620b75450a8115f2278d4c0cba2fed6527f4bc967dad86b3b9716472e465b835f0a17544314e11d78b0bc536f5f0f2798f5897046f83895254712a1b83f1e1a057d94121efcb19bef96f47cb7c59d10a55e04b6edb9c10a4342ca78b1d7a83a21f577a39f48cd35586a89f3212d40130036be695cc1756ada9f0962e9f2648c45f193e659a773803899b51b06fcfaa11ff5b4a5f7f084b445206c57635c0164c5d911ed80afd6e17194b34e7c8d91065b3879ec9f42e85bed37c7997db3c6b67da75e8bd890597a5f18cd537e97c0a80c8f7879eaea26bbde16dedd5385e878aa368055bcd35ba39015a6c1cd65d3f1d49f3fe1d860d43da6cc7d1e52078e1da9fa28a54c6c5a52c0a3d00dc45ca860d3f31ef4ddd8434e64bce9af809657567c8b8a6099e74ef1b096269f54edebb614c4a8d8e77263153d1f502df1c9d1e1b04ebb9854788fda367d82d1325f7d6a41771cb2252bad188465e80c75d5915019db9d4c66f4ec8c330e372496ff3b05cbdf56b010c1417b67d2e6aa3a3cefd4645a9144223e57d5a446d34288861e6168d0e24d9d32057664745e358cf8221b2378d93cab6138bc6aa10b1cb27c6c2b7ef64acbff98133384fc1cdabe48edb15145f553f3450af791476ae82b7de0490a61120091947f67a5314bcb176fddddd963c4714c092339965a867ed9d44c5e8ef732a9be0e9ef4dea88b12db426398d6798afdfa1cbff3792bf17d04684bb63ad46a54248633dd5aeb97ec673a8d1103339a7d5083767460aa2f625ffda9fd33e1d580613445a400003bada3bb5cdd69b12c90d551c65fec283e530f86ee8ea034691caa05a217abbcf62cceba9e839b08cb6d6a467adf815936a3af64abf3cf559505174f5018134955557af2829a0fd33399c501eeba3c14364609395488c9eddad83c5ad38d2cb6f89b71a6a023ef0ce2f14a5ecdf50d58f1160b2a08d779283fb6e67c7b8c0f2529cce46ab69e20f699da04bcdd7b9e1eef3e080e5bfde81fbf421568afd5969aba54ea800a363aae576ba80524a7f16a4c42c81200edc39e09cc71d0cd7859f2a1e9dadb391237a0e4c35994e0109981e6f7906c58cec150662a40d278ad3b40b56f30cb2eb95d996042e48e0082e6284f168427d299a08bad8567774f448b4f7782f838664433c4479253cce7d5c9b6d2090387bd216c99a304f1b99f6d2c6946906a9d949888d8d9b589045872bb7bcaba89771b6286ba0d9935ad94ef8c6af8b74a06cb287f59c62efc664100ae49e8aa4366a8a75eb8ac2b1c38171bd98c42380fdb2b04c785862f50bc3509faaf983aeaef10f1aafbbf182cf767425af56566ebac7a22a3167496bbd308ae8a4659b0bc2f60727d87a6baab4638355e84b9197ae7e2c0587953d1807d4e442c79ed32db08f163072cfbf4adbd8b892c5fafc93aea3d34669ccab52daa9d2829550f64564706b808726ce46b7cd8750cb66ca5408e2daa14b6a4597f4bda09e4a638e0ed1104292a7f99f1d763e5a5b431e3567661f5bbfd750ce99e8ab0e59f01ce41673486f53b767e0590e2c1b68e54d9bd5b771093aaf7979d11b1bd08991de64b08a653df7ce32d0e3bbce1b35e536821e506982ea621275e2cbc120589bbcd58a4e403ff1a54da2763320a5110e9f78c65903412588b49818cd297f34417df51befe69cb492092303502c3d0c6f0dc66e58972ac0a6669195e97d6e8ab81a904db97904978381b9be60beb2bf7df9bc4b34ec97045b1116bbc8a00645984cab252df60bcbe2351803c540a6b0b25055ed97b3cd06fea2e36437ba288e21d65aae343c1a66c9653b121a926ac5d4321f3df0cd527ae924c71a138f87683fbf474b39c7c05c9c408c9c21f2160a4aefb2360e7574ed771eb32070c1bd7100074bb78875fc94a07317eca5c030ad840eb991ca056be961049c7aa71036b48755c7a29a445e1e40111d86f9a5ee8594e8d1716276fa168ed36118c3c4fc7dbad79fc49c7a038aa43a69ed57bf09d44f14ec5811b3847c351e72de45b17d407e2e30b0412c1a0bc0b803b4b1c4fb46c8aa849ef5386e29422d62b448d758f4c81ab55ddf0fbf956080faec6e3876343a448e31b96c01fa33e6717f2270c8975d089ef3b6be62828f1dc3da3c3a5d9e0abbcca9d7de428323452a24c616e051a935fe03dfa6cd7dc2ef24b3daace0d8e478451576d6664ccd13d0f842a47b0e2a703de234f8f52bf455cf7b7d97e56fb4d156f5ca66cd48f1da5994700634dea81e1d62c624a5e7bc36688ff82853836bfc9af95a5cbc65614bc6f2957842c6fe7b541d023585f310304a54472f61011a52a9d08475e6aa8985a81144994438e822f6a382a508a2102ef1d7571e20409cef3e05e4f839dbdb73d351986519faf0342b5fa180063ce31678810b6019628e1a03e7214a66c984398a1ecf824d8d242d5b0f0332303d5c13111d82640d3d2b4a3906c661f921a8d662c5ad8e9011f10fcfdd72f95da748d65da4a0c782d736d5cef7f7f7e4ea3628359003bc6f9e1cffd7bc8f7492d58c47487a5103224f5e70a3579b096673e353850e30493699f275c6ff8e7b6de9ce86d130b6f563f907e7bb72ceccfc503c0b10971c84dd7dbb60f683ecd531af7d0add1fd417b7e62efd0cb415942aa489a09aa04a21b77559c5abcf3575c286cb9c5de085ff3d17f81eb945eb55af6f17d74a5ee4ce97a1c0619ee39744d182ea1622ca045ba48e279a590418f6927fc0c34f6198148f2047e7a6c77be08dda4ff35f7912c9139d09aac6f5640d6a68407f9020924114a0b756bc9d2c7f69a7dba2c083c4bd07e175f59ebd85fe49be11bd2bd4e27fe1c714ca0ed680caec9d5c11c3ba84b762e026dd68e090f77593c6bab4a2551d080105668510231102a4a23adce754fe023749a19eccf4fe9ed502effb9152a9f8ea6a14cd83665b9fc7f4dd40f346a67e71de80a7806b9075a1d03f06f4a17f8cc101a5da7130304f8c6e00e54dd17923e7398809ce612f5854f5a82fa335b568611b2c01eb5be211ec94ad53754c2af99bee9fdb22a69cc190999b95a085010e67873600ed3de080a4c4e652c7f6c93e4c7316576849658cc35d44ab92d138394cac44fd1f28bedd4fb62953488aec98fb1de2e101233746ee2515e5f5f2559012195dc8c82aea007a988bd4d74ff3422ff2612640131229f22d84b4041c08f5f0036b9820638ea159ec029582f303bf7db753d0f3cfbaa5c81130635b1f9eb25314513d0a61973358a93e3cc0026f7f971b094ea75a8adb87dd2c59ab69a18c2765a4b0a1fe243cfae8130c7ef55fe72334a41b94e45f7d489d57a3ed81d6b86f80ad5d197ac937be772de4a6bb2356c297d09dd269141a86b5a490e809401840e710449942f404e59c3d2280a75804c7d1bf839df5c256f54019bb83bf82c4ec10b49e699d14868f176bcc4c96e9fa164e43a9ceba3a31bdafd57e6f4cd347f9ac699a433d7a140ace3a637fa9881f674ab8f912b3536267ef51c99d694161f1c1c8b11777e6bd118b83f66bf5306c8930d2a2b31dda591851e3eab8a6e79502909044be85e59514094f4eb860c0961d8a5c6fb117f60e621d3b632d97832407655e1b4bd35c94f4bb70a97525333cbbfeda46a217ccff74d83a5ece01170f37edd7a77b26c431b6299eaf1d697182011c036236a048e34db814e8effdd627fbee437b9c5fd1fdd95a611128a5e4b7de4de98eed10f05dfd782ccf3ac4c4245c291ce0c1e36cb9bcc0918be4e70c7862e185dd3998e0ca07d497ce752a9f436fdb9e42eaf8948a4bd2800c01293df4a26cb7350af913b556cf1d606ecc22aafcbc29b5d9fe09c69fbd942250e96fbb8182b538fc7395cf0ab2fdde993511e93b944ca355f5c540f71443c615c863dc4f919cea57b3387657ad20247c6c0398f4bf30c0df949d7e1effa4aae082e4330819e7f88d2312a8f258b4e11ff0990d4362887c986ff546c48b7083ed19307e41e9465f3e82194aba0aa0669bcab5455518c6a3718c174798ffad12aec2434602981318ba8e50b65e3adda2cc265f61866cb524c6c441a1cf504d97dcf3bd54de4fbe364a5704990e09bdbd31c65738cc308af3f0844449073bb5ecd2a9435b406578c43b4bbff397e91a3df4867333de079127db5ed5dbb21be116c4d411c37813f733274a75dd27a2766e8ed8e1ac754fcad1afd431d12d84b3c41b9222e542cc59fb1eee198f7c434d7d2c9001afa291c74f7af1787a6b47d57e85f139d9bafa18e998184cba8010d0c685988c4fed043005886b39c88dc3796dba666719e73769fe7b19c55a2df37d13f6b4c9dedf72b42b3608371c762dbb348ba7100058fb5c9b30ebd25c3515550eed2f7b223f0a9b5dd624402ad53d010c5ccc373e7528bb7ac04be62f987be966b9955846d693ddd19d9f2365c0ad8995038dbc7dece3dc673bbcd2a3bf0bb37b2f5f18c4b93c6a090aa6ecf9547fb333e264021336a6762d0abc84b821419a84eee9b97b48170cf3ebff7d751c359838a765097550e269c7c724412393c704d1149bfb0db1bb8e9392f8474f3788b49e147390c0fa5edeb8e29f312f4a5954ed88dfb77f0e5eac1bdf8aa8d6500dce326539096491276e01e75bbb7f4f03164aa82534a8b4593c02e22da2988d011dd2f0c28c2ebca5393aff9b219097ab23e839dc1163d610ed43fd84e06518c216cdfd66704a6195aab19fcbd742ce730b54699c914b95a49fb190f52bc97178dc6bd6510ccab3dbf5f3100f9b97d8f6617d7860642bfea5e99b0e5eca042e3d26cae89dc96060be8c6bf4b04716bd748fa8869c9affdf746074d63002962f308fa1955fdd59ad009ca98c23f0a604f5e54efe97a9582bfd4ae8b922031db8cf5448473230bc145c30c6813bb6dcb0fad8655e06c790e206062f8c09c51173e15ee0c4d1f0da5c6ff2d9ea97925658f445e5646cab5cf08452cf3c26e8396a00462697cc3bf7e48722e8669e7e3fbf6a4bc3b9d96de76b224f4a60bc366e9a3019db1eb9e8acbcac8c644c570aca3a0370acabd26f027e8676e90f316d4e144a6f3e7b5cc1532f2f0c0c3217135ca96540435efe1612dc29e525a21746428aa3f19146a2754b45ad8e38caddb0acda413f620463a1f9cfe3e17e5e4ad7285a52631be3e07a4b6367a464b4d4b9f8f8ac51", 0x1000, 0x6}, {&(0x7f0000002400)="eac2732cccbe4479a81a50969df2fb3b0f9060a88d", 0x15, 0xffffffffffffffff}, {&(0x7f0000002440)="1d64495d73cecc4ec6e40501421b35d51e80e7770b33a0519c99a1350dde9f78074ff22dce66a5a0768a3990dbf21b83b373be6d42ec5ead851d275c8e40dc96aa16c779fc7fd691e7d50b282849667fe20367b25c8bc1df0a7a058434105047830ff07a0de8e4149b7458a3f329c24ebec9d4ea176ea2e0ca369f012d761ac69a", 0x81, 0x600000}], 0x81001, &(0x7f0000002600)={[{'!'}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x35, 0x37, 0x63, 0x35, 0x61, 0x61, 0x74], 0x2d, [0x30, 0x35, 0x39, 0x65], 0x2d, [0x61, 0x65, 0x37, 0x36], 0x2d, [0x39, 0x64, 0x61, 0x39], 0x2d, [0x33, 0x31, 0x32, 0x34, 0x62, 0x30, 0x64, 0x63]}}}]}) rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') rmdir(&(0x7f0000002680)='./file0/file0\x00') 15:10:25 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086607, &(0x7f0000000100)=ANY=[@ANYBLOB="00000001"]) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0xd6de, 0x2}) [ 328.283836] FAT-fs (loop3): Directory bread(block 70) failed [ 328.283850] FAT-fs (loop3): Directory bread(block 71) failed 15:10:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 328.283915] FAT-fs (loop3): Directory bread(block 72) failed [ 328.283929] FAT-fs (loop3): Directory bread(block 73) failed 15:10:25 executing program 7: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$bt_hci(r0, &(0x7f0000000000), 0x6) [ 328.295341] loop7: detected capacity change from 0 to 6 [ 328.296677] loop0: detected capacity change from 0 to 1352 [ 328.306190] FAT-fs (loop7): Directory bread(block 6) failed [ 328.306211] FAT-fs (loop7): Directory bread(block 7) failed [ 328.306350] FAT-fs (loop7): Directory bread(block 8) failed [ 328.306367] FAT-fs (loop7): Directory bread(block 9) failed [ 328.314351] FAT-fs (loop7): Directory bread(block 6) failed [ 328.314422] FAT-fs (loop7): Directory bread(block 7) failed [ 328.314460] FAT-fs (loop7): Directory bread(block 8) failed [ 328.314497] FAT-fs (loop7): Directory bread(block 9) failed [ 328.420318] EXT4-fs warning (device sda): ext4_group_extend:1813: need to use ext2online to resize further 15:10:38 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:10:38 executing program 2: sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20004004) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="6d70846c3d696e744a726c656176653d7374617469632c73697a653d252c00"]) 15:10:38 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000d4f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000001000028020000028400001b", 0x65, 0x400}, {&(0x7f0000010300)="02000000030000000400000032000f000300040000000000000000000f002f7c", 0x20, 0x1000}, {&(0x7f0000010400)="ff3f000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff01", 0x1003, 0x2000}, {&(0x7f0000012500)="ed41000000100000d4f4655fd4f4655fd4f4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f0000000680)=ANY=[]) openat(r0, &(0x7f0000000080)='./file1\x00', 0x140, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)=@orangefs={0x14, 0x1, {"9f811612a1d6fda84a33d7f44469d261", 0x7fffffff}}, &(0x7f0000000180), 0x1400) 15:10:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000010c0)={0x3, 0xee2, "d710cf", 0x0, 0x7f}) bind$bt_hci(r0, &(0x7f0000000000), 0x6) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) r3 = socket$inet(0x2, 0x800, 0x4) ioctl$SNAPSHOT_FREE(r2, 0x3305) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f00000000c0)={{r3}, 0x0, 0x8, @unused=[0x4, 0x3, 0x326], @subvolid=0x100}) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) bind$bt_hci(r4, &(0x7f0000001100)={0x1f, 0x4, 0x2}, 0x6) 15:10:38 executing program 0: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0xa2100, 0x0) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x101042, 0x8) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x94, 0x199a02) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000001e5000018000000", @ANYRESDEC, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file1\x00']) renameat2(r1, &(0x7f00000000c0)='./file1/file0\x00', r1, &(0x7f0000000140)='./file1\x00', 0x1) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="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"]}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000010000000000f6794baf52223cb6f4451f147f9099", @ANYRES32=r4, @ANYBLOB="ff010000000000002e2f66696c65312f66696c653000"]) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x488280, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r5) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r6, &(0x7f0000000000)='F', 0x1, 0x200000000003) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="3c00000000000000000000000001000000000000000000008000000000000c8107416e7d2e534206002563337289a42509ce6dda436241c419bb15d288a33327d19f495b6c14eee805a9f258b1000000000000000000"]}) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, &(0x7f00000001c0)) signalfd(r0, &(0x7f0000000200)={[0x9]}, 0x8) 15:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 342.176501] tmpfs: Unknown parameter 'mpl' [ 342.180414] loop7: detected capacity change from 0 to 512 15:10:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:38 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f000000b440)=[{{&(0x7f00000035c0)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000006dc0)=[@rthdrdstopts={{0x18}}, @dstopts={{0x18}}], 0x30}}, {{&(0x7f0000006e80)={0xa, 0x4e24, 0x0, @mcast1, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000070c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x28}}], 0x2, 0x4000000) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000280)={0x0, 0x40, 0x6, 0x0, 0x5}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x1f, 0x1, 0x6a, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x85737d782df10a9c, 0x1}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 15:10:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 342.274487] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. 15:10:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:39 executing program 2: getresuid(&(0x7f0000000080), 0x0, 0x0) geteuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ptp', 0xc002, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x7, 0x7, &(0x7f0000001900)=[{&(0x7f0000001500)="10a47b807cb9f9ebba210df6e6b736b5e194a378ff4396cd7e5e6b9c8430afa1e9ad5270dbb0bb45d45a9eb0fde8e1d21c88debc47e9e7f28de9604e6fd37bf782fc80749bef999be9554b34b4a7d8fdde33c27a3da1859fb77ebb261dab8c01bbb9ed07f8b69b369a6f3c0116fea059bf3eb1c1d04a7ab71301bdbfb059fa508fa87b4855a81b8c3096cfc9dc0b3f0c69a89183cf385a558ac49aaf7aff26bf1eb174fd77e58bfc68c11ef38745c0051986c358bcf3bc813e497f44e2d0397ac64361c57aed82acf5ce8d0d4c2b93efa708cd0e1cd5ee1feecdcf1f48e2169fa6e92c196624489e7c4638ee2ac32ceb7127f2fba07b4b87849201e63c", 0xfd, 0x7f}, {&(0x7f0000001600)="c67c1df3834f385d64c5d9a68514bc7c9aea5bd4e985c25d902c1e402bb370d689ce03bc63220c6c44039f6610112cc8e8afbc4fbf34089583ce04cad6f5611a87e394447f5ef7d1687f7267276038fa9849d5b5594f8c1cf0208c98d26f042376613ba939de5f7da3a9a77ca52ce11affbd", 0x72, 0xffff}, {&(0x7f0000001680)="2311ac799245c657716c7c58b14cdca1c3859af575a6553cd9382d071ad61d9a26db78bc2086a920744fd369313a9b0cc57243cafb1fcee921334ec7cc4cea1c559928c1497662123f29ae0470cefd75fe8c9d12fa4ef9da27fc6cfc787c85f1fb2d742a4c37e3b8ae5ae37e9199d226b7e2cb425205f69b7405e616fef78bd6cd8ed5f146148c0b70fb4ea5399a4e48be0943", 0x93, 0x401}, {&(0x7f0000001740)="6e4ea050cde254de92f3e5b8c35f9ed79e2e1b58d6283c33909ab677ac0830194084a7e012c2928a75d5df46eeea763a0abf6b2c30d29765195d70d7e1467acaa0ce7923ede8a31a31e6536be3ab4007c3d2d2b53010d2b39bf0f5c0a746bd0e0f1f8c56faed80dd9c5fd41794e4884ee9b9a50e72", 0x75, 0x1}, {&(0x7f00000017c0)="b7bfdc50d4a8ced9213821898f1190ab870eecd5e018b5515da0191a41bf3d27dc9a6c7ef532f654facd6afa6632b93e25224a4d67250b29cd176a733c008964cffed908fec05da6f147e1462e877f8fa9f0d9783c85e52d827efcad85a2c2a7535dd5e2a550b7849bb559b0ce4f6db8b9688d2bd70410129a254ac8adc752d68bb5dd1edeb46092a9838430267694e1e1413bea085ef6a81ddcff29cdb2e1b287e3a780ed3ed50584ef8f617c2e16", 0xaf, 0x7}, {&(0x7f0000001880)="f6cfd20e620dd6fd5a7147d526e891abde4b180734092b967b635b317ed72e65a71fa901a520b51c422754", 0x2b, 0x9}, {&(0x7f00000018c0)="e0e381a93d69f4b123c952295313bef3670b", 0x12, 0x8}], 0x28040, &(0x7f0000001a80)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {}, {@huge_never}, {}, {@gid={'gid', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'posixacl'}}, {@appraise_type}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002f00)={'wg0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000003200), r0) 15:10:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:39 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:10:39 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:10:39 executing program 7: r0 = syz_io_uring_setup(0x554, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 342.510403] loop2: detected capacity change from 0 to 255 [ 342.559934] loop2: detected capacity change from 0 to 255 [ 353.803417] loop2: detected capacity change from 0 to 256 15:10:50 executing program 4: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000080)={0x17e}) unlink(&(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x2000c0, 0x10, 0x1b}, 0x18) 15:10:50 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:10:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:50 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0xa, &(0x7f0000002700)=[{&(0x7f00000001c0)="7a79c404841ee0bd25ee9fed4e56b0a0e7a8a2dcb05635b99e439b9421e0e9f030dbf016ec51b16439a72b97ef2fabbd9b1f308d589e82e8a8f4d2c2774f2bd4a5ee819e5515011eb8a943ca68b47e072145d639c2b5b5f2a60ece5a9ada05f322d3089560fe55898d0fb75b1f28204342c59a5066638a6f5b20f41048b2a9cffd1ef59267906d520a465ced15d3f6805d1a7f9fc9f55d56c3cbdbc43179fa5b467e116e4efea9c28b67cc8e86", 0xad, 0x5}, {&(0x7f0000000280)="61beaa4fae5bd8af49eed8cfb16895d4b58091d974767e4f8690f445faac7f70cae9efc4420307a7a9a79e12794d35117eb412e0baecf19e9990bc9c32f94b47a5b6d37833a204dd5365d97b9c55418ee796814ecdb5753e3c8e5e25770a74c74824ed7a13305863", 0x68, 0xcac}, {&(0x7f0000000300)="ad8e97e716a6cfc16a16a5c5db634692a549a8d71c6df2bb646b5b7f2c3bf997cca69c569256aee1d4260f67f21188b54e46b6f68d6083d67cf30aea99fb1d4f04200dc20d264a4ca1185c19adbac5327f8976df4570ef7c1ad1e0a42887b521799277", 0x63, 0xd0}, {&(0x7f0000000600)="ffc65f6e086775e6177e57d9d89db702d2fdf344db59f7c5baa9b6222994ddb55d9dc51ee66820e36f2d14976535c5fe34e076be7439f37b0462e095db0f602b68bfcb87d206d6f395b8c9975ee89a98f016b62b7370038d4cdcb88b602446401228e33f19efe85e0d68caf3bf73aaa6c914dfbbd318ab954c8942508bd5a95e2f2da06944d4331bee17414de727b9cce26079d26bfb1ad919b0cc88dc4099d4c7a710f59b2628f34ff42e3fd0f6485f5f95d031d781f95f63c2e441ac", 0xbd, 0x5}, {&(0x7f0000000440)="dbda4794fbd010b08e4ea0d36c772f6972743555e4dcb63376649cadc64a515208a263a8572f07343cd2f34d2f990b7797b831a27634a09b39b6f1113280263709228649bec208c6fbec6d435b55dc618cc1", 0x52, 0x4}, {&(0x7f0000003800)="fae28e3c95b3a8378168c6205483bc154c68e64bbe9c1ba87477d73e8e5634dba8fb5f4f9a44002dd059e78c4d158964d92d55bdcf4f39dadd4c33e0ab8bbf18bc021a38ba0b1381373cdf527d56b2e7a6a258ae61268d01a456b5ed94a1dc298ffbac0e2ad38a0a8273844596771a203d3d3f32e5ad3243b94ab26a75a73593e1d4393dad496997adff2181c3576b9b568ecee5465b23d556131a92e884ebdc03f093a6044ba3aa0b24fe3cb727bebc48687360294f98a1a990bdd3385e6ed60659149ab49b1ce486a48db9ef788f24e75198dc7aaeffe1a08a794e26f0714ae297ceb0762cb1c040904d1069f0040695361d4c2b18f3dea67919a06ca3dded0a536055e40a2aa843b89d193457afc9ebe47c8959e4b8c8444475ed6aa025d4726515a010f11ca51f54bd482d0b7006bb4c23e704bbbe92a4cba4a028745c0927962d1c1d3e58a04fc463b13884645cd0bed5182bfee76c79fcf688089f8047c45c00f6747f0df52287c6e2012b0611ee8e2f8c84e948c3fefe78e7252b532a8168a6fefe6d803919ace06a340d061e2d7ac450f3d8bdda9a3b4bfe394fb790e296a1f7c9857512bdb521835ddb435e87a9baa886c01fbb56a071877f08b39366a698a00192946cd5c47fd4148546958fd23b7514860618ff60be3d867854cfbdbb1940ec6f49260a94d96e7d66c1689341f66380a70332b99ff40ff4aa9c16376777d6637ef3cd263b74e9b01c322c8dddc0d7844e7d9ede989d79d068ce136599abc6dbaced5b2bed9ba5f49eddf7c7bf95afab8788d5d6c1cbf2e8c84427f7cc7fa40d3cc5e118ee8a67a8ee7048766af182f87fcb1ab00875e4e40d655e3f5efb6acbd43668d43f1c4a0cc4b5ccafaba7be938f27816dfac654383607ae0c4dddcad18516181de58bc5fdaf902c58d725754e37475d854d8d8bf5f325c22147b37f5c075af416798dc855ec365e333a45021d5787196972a2b6243905d35a33b7e57c10cba22edbe507ff9928f0d0a6d97d4e34d54db7872ff47c4a19286ac90fe9bf7d1eb41821e28295f114ab5e8ca1609b10449f392527c1f26842c45826e8fbaf24520e56b8dcab37b267e47fabc7a025fc209d5ee30eac481ff23885a2787473a13304436b528df25f8cb565fd752574db8d8de5a53cc19665e9c08f96700bdb5c47c96524d134e2eccfda5d1419abbc001a6c5a328ff60a86db7a9cd6c0d68d23270ed34e22aa3b93d65142bbe8544e839d7aac4a2c87eb31982832c54bb8afaf3447d52a42f460a93dc2fb3034e2868f17bbe4c185b33a59b9b7c385f343b4a7d79721e9fec5105a50f581f65fdf7d4373d3f10c029668d534fbba3331ba822b4ca9a12f55a4e22b4af3618ac03ccec4d4c9a1a6c20b3352c4a95877a4d8eace6deffa97f16302836846a32e1903c17d58b8ef641f1cd14d82f64200836ae6112202545ba8849d36c7ca6e12cf6ebccedfa8afc73f5bb3eb45ce8b174bc933b968f562ddb823328fb5820ac1178cfb79ba326502a9d806462f4a707e3e6294bd019722bf13ba2757cd7c0185f9f1b2de8f01695934c6de7e030741d4eb7d29b0ce41a8ce1b40133cb269585cae45240ac105a771c8f31209a63ceaee81c4013cdfc86848f02025c92960e7c774f73f38840b08a11c2abda5d0348f7ad4421e4b7030aa6e282ea1aaa12f22b507ecc27fc188a096cde2d376b88f547c612bb3b3ab48130d570e5a1ea2e4a662f2c449a9adbaa367848ddbe9da57413f5491c1e4dcf1af2c6cbfbbc47f1c817eedf210322bf23c8723e75728468a8e56ad750a1c716e327d2c750808abb6308802a1c16e2a8b75f611cdbda20922fe26f84b7f87710d8394cf3ef5dcdb1674659599fd0907207d91d2356d4bb71f4b1aabd60a192ed25347853eca1af28dd611dfda72d95d3bbc498006226a1c26a2e981a91505ede6b945056c78456382b2097510794a4d2c24b67b645f0674380bd0d121e6570f0571f9feba529fbe0c3a6013f59f8ec9c46ea40986860e89b8f658d24f538701ea2fdad5fe178c7f2d49a825904339b8ca62396533b47d253d06e28b940fe98d95d6c2400876a9c7fb4a48d1b0af512e58933f944340f346d4a9f11ba1747df083e4e55be43718acd6877521db20d9a0c1b235dfa719747b42a174c1a199e7c94ddc3b4c3341a81dc781ee362bb87eef637b3413954b3d0366e9624284cc0e17ccbaca9bf4f908966bacbe62c60f535112b446a00291b985348e183d80676af801b76ff5d4b8d5925a4e651e6c5362d21e367363578b4c10348d5a7cc6eb94dbb29665cd1e3cea358a3972573d77f4ad9cadf9a0b957be13ef9afed2a9cae240af09ddd9aef315887ff9225dcd9aa18a74081ad1040181e92e8b78c2a7b3a026eb83815e31de538b8a3ef049852ee3896b4464a0b47d1b94c10234264f41127a60997e79787067e67d9ab427b09fd0ef34069fb553121de6b2e9cc00d2ec8e1997a18360ba0c69532e9b1ee85adaf989f92401101989074d3b515cb84027910a4a2fdb648152baa49ef8a96083205b7069e3aa1d1fa9fa377144e21aeadf64c70271d3436eb3ed21a9c8dc268b2e7ac9bb343e5876ddd45fd7aa015024aaec44003e21065cc610d506b37b0b4eb2935d3588da564dfcff6021b1fcda2988c5d1049b63e96c5f370241bc90fc3e34162050a8a8338ac1450c33b031bdd7c5e80231317d37959533d587552f97d0b2d102bd41dc1247faab34d49aa4f967e7c873debc8d599b1ef30fc0406a52348111dbe3350488819cfb7a2e74bf995f8a1bc943b049d119f9e09d46ca78459f9a8e3e9f1714e3d97ee59ff24e6bd50e08afd6602d055908f2d0292012fdc19f61b653873baa0ae7c996224a866e6d3ce2dce3b9d3f90028a5083496e476edfb79df5b6c83940f18ff77f8aa80833e6f6dadf1472c24b394c971f682ae1593c93b0ebd5b4206178361fac1cb9be37d9a091ffdaea190238f8e8aaae74ccbdc71fd4badf7351ec81fd14253777b741ca5357be03a70d50e98f51ac7e10fe82793a878284c39aff934a9639deca3fe15c94d4be2db1a449c2d9357b1b9f213f7cd2a16fbb678d280c94f1b6863a093afff3babd3ba2c37b0cb1d8c068239b8114cc9b9e6aa521fe4e5e72f279d1abd313dc95cc372490223c46cd185b3a0ccfd115338b7773c510328d80dd037459d210f81da3e487df1c2d7ee07649914ab386fb09224de7bff0a5a8adbffb498d4a5754087a2d7099adce93b5421603ad0f39c1f6c47271d74ad7d433ac937cb0ac62e0df43ff5ebfd0d7f80e6f5935ea833de405de2f8e6e277c5b1af23e04eafe87f5755a55edfa3c024edb5285de9843e5894921921afb1a9ac96dbc5fb43040c03020895ddd299a01bda75e04b20dcf83c00a6e5c4e48ef4b8932c8c0bc429d207f86f7a9a207c1dac21ca0d66c8ca8943431607161a73ba7a01f32e5bba4337a2ba6e1639d87e2e47d924221bdeabe1619398e05b958384adca7dadb87f13e19a129abe820e3b8b441dea70e32e17fb6553eaad6c1b7c8de40a790536e55ea3c2fa5669e9f473e7985cae952567dd6dd3e1839780248f38bc8222dbfe3e0e121f382470e06bd59a294d999c401feb0926861c6bd7dc911c78e4b5839520d42f7db7e9aff771ee8da75ee18193af11aa60bd4c945609ced68b641fd843ff33b73c8d17be10fd3fea6a95dad036dd104f4935abdce109e98a8aba10ffafcb57c12134774bed1bb0da4fb4cb72aa72300086e35e741972e1b29f92d31f61cf5e4c66eaf2ed11e89722be298aae3a2157f30d15b5cbbda037007fa6e395a84a4665936340c4a8a63d024804abda7b2797b435ed68654c58a19eff892d9b9d90fb5017dd73d35131a31c79c7925ebda0a7a789123be7f832076f35a7bad714e243e049b136c6c8b0b8aa203bbb32f749dc2bcdd9f50ce2bb743c36b3c51136b816dca87fb43dc4b7d55b554988a514b74f5adcd91fcec2ff50bb82587537b7fd5028d383498fb4d9ff5688496a6923611ee683b66f60eb49741766b52e19c631d01f2b3bfb941147cca5c493c9b8edef37a367ceb1f53a0f079a7445958f680a82858fd1d782e67be6d3c5dfdb703a7fbff3e18e7b9f6961c82d1d897e023db5395e0e7a225360177f61328688677e0a033c8dc3cdead3f3605cd46e4c6afde90ad64b62ba14aa61615bee34cf407e2d899ef9257c62745a4fe99924caa71e80339bb73d834538e6f8bc79756a79bc79893751bdc338b7df265bb0a6539e22e772ae9ff98dd507754fb490ffb4219fde6b87235fb84ce03b6a33ab136916ed3b817ee63bef2fe561eabb165bd5e0f0e1997870416010d2483b8226d3f740252898ea6c7697a2dcfd8b95d86cc95865cef9b67cbd30b5aa3166e360014fa04e8104e1e0d92058545f300d74144a5480a39ea401afd27bb9a17f8928e76ec7f7fb0257db8b3f91610fa930e70ee2d5ae5314a90cac3cae5e78975eb77b6270910faf3caaca3d731157ef708cff0a12b24d5f9a1c5a0f795d2fed0bc5525fcc66b1c13fcaa481dde713decaf2af3e82480d38530cf63f9b1e94ebeb15fe347e0cd5eeabd27071697d24349f9e649675194e80b97e16b29cb81a98984e4d95cb481ac6ef2243abd4214f02e4843a558ebf79da80c455c44b753e75cf5b74955d6be643ffea642460f31e3db33856eee43e85efb76c4ea13c888600ea4544f77371eb32b056e414b1417665b44ab831b4e1cccf22fda75e8fd4e46dc03c9344dd3ba9ae4267b283f86663db871e1c3446ea2aadd1bad6e60214c99c67c13926800c96804624b5ed97328efdd5d2b08d837e4756de30fb5a0191b2cb2b885c4699d2ff7ce72c553bf1885dce1fa822e486d2aff532f31a2a29bc866f5525bb18d043826d8bd518ef20c129d5b29e8e0b4cbb9e55290e7b9abbedefad5210883ea78dca93c824e37826170467b1cbf16f6ffecbc9cf394e10dacb455252281c67d32a52ad8e34a16912b3377bcb1fd7b513d64c5753b2f02e7fc881abd752d1a45278ca5025e37f696facd69a64042ab4148bf5843c2467c699ba4308d7d702fd0c657120a6f5ef94d9228142795fafbdb3edfa23846d191ccc9167d1155b9d56549b547b6e1c8a7d65042498fdc0f1b4e3bba630d1a220ff6433d096879b883321816ca9930daa05cb63fe84b3c296191662a60ff08784c6bfe06e1123a8caf1b2ab1731c355c89d37ff1d47a49852b5ab67cbb5f9a55c0be623ef412e21f7c23207d690d50c13727f88ec93e36a700f9874e1276f3aa794a8c241b3fd9a0d560248bdf531b54d0dfccb961f9561f25dedfaa2749f746092d79eae631f2c2d61017ead08739977c12131bab6de51322e19218aeccae9431ac742a143411d7ea31bc5988b21f733cd1592a64c9e869154ec5fcc933e2aa9f78811de12b01d5c1b231b880398c2af6339a9c1ea79a057ad95d143beefe2a63b6d77175be52b9fbda78c4cf4bb1991c7f47b06ceb3e946c818ee3d1b944c564fb02c16ce76d43fc3e1d6f2a47af3f375554f20caffa61b35c680f3827183cedd896d71a7712315e1afe68d5263e8caf7ba0a8a02955665d49c36073645235bdcda7ed27f7a392e6bb358711b6cde8437dc2ff155150e1cac2954714afe765f4b553ead5db5a84babf21587482554541c90f01b2ff4284b24273fc737bf1686ae2790d5499f9c262c0f4f9fae96c2a8f2a78c30ec778aa0f4b0521a346cce0c4111b433b073e0fb8dc4a07da7a110db996a03719cc5a905aadc7ce2f64740d47fd971d04ff439df88f95373ae9ff80b63980211b0f98700b48b578161d96032496d25cd3c5dd0db11b52b007fd7af1d4c", 0x1046, 0x72de}, {&(0x7f00000014c0)="d029cb5eb91ac1999d92efbb0440f95d26c538e1b7f27941409449328d6b498da0d3a8a78cb349daa5bd709c8810410ac3a341a26a09745f4026ba40846f8639687c08515226079b36f697b6bfc76b9f28f303a4e01e9bb8be2d5082c93edff81d266ada164f3bca83fb603b368a485bd1db96d2e3c81818057689090e94dd4879b56df8852519c47ff068c86f075a7ef9332f1a27fae956b9e8195d96b36a9e76ecc0ea9886e7b03cab8d8842e08512e87e77c0190648b6f5b1be7885cdd816eb36a653c13ee4b0d0eae71f3548e3bf509fda3bec7a62f1eeca474ebdf63b5bfa", 0xe1, 0xe3}, {&(0x7f00000015c0)="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", 0x1000, 0x10000}, {&(0x7f00000025c0)="a662c88d9c3513dbbeaf2bcc8fa241a3651bdf8af5f0d077f4257dba42517299e3a55882bbb1b7c713d5a2e65948cde09de6dd72f98c49fc7d4485cc0cf65b732c3eca8821c35ac5ddac1c62d31c3a46aa530574cf65f49115fddd71a06dbc3e42ea1ba2cae08d5fbe4572b0", 0x6c, 0x8001}, {&(0x7f00000006c0)="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", 0x18c, 0x4}], 0x818800, &(0x7f0000000180)=ANY=[@ANYRESHEX]) mkdirat(r0, &(0x7f00000004c0)='./file1\x00', 0x28) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/dev/nd0\x00\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x40, &(0x7f0000000140)='%\xd9\x00') mount(&(0x7f0000000500)=@nullb, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x800, &(0x7f00000005c0)=']\xcf\x00') 15:10:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x2c9b000}}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:50 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000dc0000000f000000010000000000000000000000002000000020000020000000d8f4655fd8f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000001000028020000028401001b", 0x65, 0x400}, {&(0x7f0000010400)="030000000400000005000000dc000f000300040000000000000000000f004582", 0x20, 0x801}, {&(0x7f0000000800)="ffffffff07000000000000000000000000000000000000000000000000000080ffffffffffffffffff0100010000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffaf0601936cffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffcb215c580cb9db09ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0001000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa9228836fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff915a95dffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/1031, 0x4083c37c3d99ab1, 0xbdd}, {&(0x7f0000000040)="ed41000000040000d7f4655fffffff7f000000000000000004000200"/40, 0x1d, 0x1500}, {0x0, 0x0, 0x9}], 0x0, &(0x7f0000012800)) lsetxattr$trusted_overlay_redirect(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='system.posix_acl_access\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0x0, @ANYBLOB="04000000ddb1000008000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) 15:10:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000a51e5777703885fb0feecafba300", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000a000000000006000800000000000500070000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4d}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x4000810) syz_io_uring_setup(0x68c9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x146}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 15:10:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 353.840459] loop2: detected capacity change from 0 to 256 15:10:50 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x305502, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) dup(r3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x581501, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r4 = open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x3) close(r4) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:10:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:50 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000a51e5777703885fb0feecafba300", @ANYRES16=r2, @ANYBLOB="010000000000000000000100000006000a000000000006000800000000000500070000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb4, r4, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4d}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x91}, 0x4000810) syz_io_uring_setup(0x68c9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x146}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000340), &(0x7f0000000380)) 15:10:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:50 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:10:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:10:50 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x305502, 0x0) read(r0, &(0x7f0000000000), 0x2000) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x105000, 0x0) read(r1, &(0x7f0000000000), 0x2000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) dup(r3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x581501, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r4 = open_tree(r1, &(0x7f0000000140)='./file0\x00', 0x3) close(r4) munmap(&(0x7f0000000000/0x2000)=nil, 0x2000) 15:10:50 executing program 2: statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66736e616d653d7d169f8e2e40232c00"]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@orangefs={0x14, 0x1, {"d05e75a56cd8483d1a40f509a514359d", 0x4}}, &(0x7f0000000080), 0x400) 15:10:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:10:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 354.187777] loop3: detected capacity change from 0 to 32760 [ 354.194440] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 354.316466] loop3: detected capacity change from 0 to 32760 [ 354.321413] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:11:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@loopback, @rand_addr=0x64010101}, 0xc) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66733e66617400020200000200008000f80000200753071500000000000000004680", 0x27, 0xfffffffffffffffd}, {0x0, 0x0, 0x3e0}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6e6f6e756d74330a239d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c00c904f4c7215d161791e445fc97afc51af79507e4ead4bd8baf12344a9ee7574d22597df7e7a7a4a91a1eba21f3abe15f5395d4369fa1a8e0a0fbf5e9624210c31c3b63b482d3a5b648f7fc410ae2d7a31c08853db096104ac0a10c211fad195353443b75367f2dee70a2eaadf206"]) 15:11:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xa, &(0x7f0000000080)=0x7fffffff, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:02 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="3c00000000000000000000000000000000000000000000002faffdae645f064d42473e963e9fa432f0947baf1a48d47456d1d0727f25e2c5f1f6ca45101a3f5a71adb5831ec3932355bf11325ddca55d47c67e40abc792419036661cce0266841d51a0608839d1c3c2dfdcaa4ff1a3e18fd2fc10c6bc76e3863424d8297aebc79f5c470eaa70863f487840d29032"]}) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 15:11:02 executing program 2: statx(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$nfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)=[{0x0}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="66736e616d653d7d169f8e2e40232c00"]) name_to_handle_at(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@orangefs={0x14, 0x1, {"d05e75a56cd8483d1a40f509a514359d", 0x4}}, &(0x7f0000000080), 0x400) 15:11:02 executing program 4: unshare(0x0) unshare(0x0) unshare(0x0) unshare(0x68070000) semget$private(0x0, 0x0, 0x0) unshare(0x10000000) unshare(0x40000080) 15:11:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 365.876514] loop3: detected capacity change from 0 to 16383 [ 365.945044] FAT-fs (loop3): Unrecognized mount option "nnonumt3 [ 365.945044] #1" or missing value 15:11:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:02 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semctl$GETVAL(r0, 0x0, 0xc, 0x0) r1 = semget$private(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000012c0)) semtimedop(r0, &(0x7f0000001280)=[{0x0, 0x81}], 0x1, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, 0x0) r2 = semget(0x2, 0x2, 0x60) semctl$SEM_INFO(r2, 0x4, 0x13, 0x0) mknod$loop(&(0x7f0000001840)='./file0\x00', 0x1000, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x10000) semctl$GETVAL(r0, 0x0, 0xc, 0x0) semop(r1, &(0x7f0000000100)=[{0x1, 0x8000}], 0x1) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}], 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x7]}, 0x8) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 15:11:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = signalfd4(r0, &(0x7f00000000c0)={[0xfffffffffffffffc]}, 0x8, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TIOCSTI(r0, 0x5425, &(0x7f0000000780)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000140)=@ethtool_cmd={0x17, 0x68, 0x5, 0x800, 0xb8, 0x6, 0x7d, 0x76, 0x81, 0x2, 0x80000000, 0x0, 0x1, 0x0, 0x7f, 0x9, [0x7, 0x1]}}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000100)=0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xfffffffb}}, './file0\x00'}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) 15:11:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:11:15 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:15 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:15 executing program 4: unshare(0x0) unshare(0x0) unshare(0x0) unshare(0x68070000) semget$private(0x0, 0x0, 0x0) unshare(0x10000000) unshare(0x40000080) 15:11:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:15 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="701c6d6b646f736698fa1b00080801000240004000f801", 0x17}, {0x0, 0x0, 0x800}], 0x0, &(0x7f00000002c0)={[{@fat=@nfs_nostale_ro}]}) r1 = dup2(r0, r0) bind(r1, &(0x7f0000000040)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-neon\x00'}, 0x80) utimes(&(0x7f00000001c0)='./file0\x00', 0x0) 15:11:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) [ 378.786791] loop7: detected capacity change from 0 to 8 [ 378.810130] FAT-fs (loop7): Directory bread(block 3) failed 15:11:15 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736661e36600080820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00dc82834346bdb27479b354458866e12aef81fc49dd7f960690629f42a30a9516a86b5ccf44b104"]) syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x101, 0x2, &(0x7f0000000680)=[{&(0x7f0000000580)="d8f839d6bf7c927d5dd32a7ca700bfdd051d5e76a20b04735dd2149128cbbb781db8a2fb459d841311bb0aa45548bf073791f391829b686ca10e693a04f313b2776504ee7d801033867bc09eb3b19526d13f6cced1efd75a2b69d34327d7c984c4f6702f99f550dfb25a3c324b3df7f2c81e88bc1930d7ec8fb850e431ebb6acd156122efe015339", 0x88, 0x2}, {&(0x7f0000000640)="0d878cfe577ee8689da87c8980dfc9014d78720c88b10ed325d0a16799", 0x1d, 0x2}], 0x40, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x33]}}, {@huge_advise}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x6d, 0x2d, 0x6b, 0x65]}}], [{@smackfsdef={'smackfsdef', 0x3d, '/+'}}]}) stat(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000240)='./file1/file0\x00', 0xffffffffffffff81, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000280)="5e7b0ed79af6b24b3d422316faaf1449ad3ac49dcb03b08301eb08434b8ce729fd197e5835f26f15abb7285b8971f4ccab1ec98c91726958948d95d1fe4bab1059e3c5e6e30121dc1544a936eb5ee238ca101e38c2eb00167663cde8cfb45c1df890d550d2f6cd344d86de3bc15005ffbe7911feb98a3d4c0c2eff3fcb04e75be560f459c0dfd9f8", 0x88, 0x4}, {&(0x7f0000000340)="b862fcbabcf73b519bd690d8b58a91ed1841c18a704303ec6279cd0d13bdb155b9fd5fedd57217d7b3c0cc10edefbc7e3ab1cbf6ed7b2ba3490d28cda25d", 0x3e, 0x3}, {&(0x7f0000000380)="c2e79c49f3a063c8f5990f870b7197af64d792b2", 0x14, 0xfffffffffffffffe}], 0x4000, &(0x7f0000000440)={[{'vfat\x00'}, {'.)+],&.*}-,{/!,,'}, {'$('}], [{@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@appraise}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x82028, 0x0) rmdir(&(0x7f00000004c0)='./file1\x00') 15:11:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:11:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 378.909795] loop7: detected capacity change from 0 to 8 15:11:15 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000001200)='net/igmp6\x00') read(r0, &(0x7f0000000000)=""/80, 0x50) r1 = pidfd_getfd(r0, r0, 0x0) write$eventfd(r1, &(0x7f0000001080)=0x9f3, 0x8) read$hiddev(r0, &(0x7f0000000080)=""/4065, 0xfe1) [ 378.940439] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:11:15 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:15 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) 15:11:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736661e36600080820000400008000f8000020004000030000000000000001", 0x25}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00dc82834346bdb27479b354458866e12aef81fc49dd7f960690629f42a30a9516a86b5ccf44b104"]) syz_mount_image$tmpfs(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x101, 0x2, &(0x7f0000000680)=[{&(0x7f0000000580)="d8f839d6bf7c927d5dd32a7ca700bfdd051d5e76a20b04735dd2149128cbbb781db8a2fb459d841311bb0aa45548bf073791f391829b686ca10e693a04f313b2776504ee7d801033867bc09eb3b19526d13f6cced1efd75a2b69d34327d7c984c4f6702f99f550dfb25a3c324b3df7f2c81e88bc1930d7ec8fb850e431ebb6acd156122efe015339", 0x88, 0x2}, {&(0x7f0000000640)="0d878cfe577ee8689da87c8980dfc9014d78720c88b10ed325d0a16799", 0x1d, 0x2}], 0x40, &(0x7f00000006c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x33]}}, {@huge_advise}, {@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x39, 0x6d, 0x2d, 0x6b, 0x65]}}], [{@smackfsdef={'smackfsdef', 0x3d, '/+'}}]}) stat(&(0x7f0000000140)='./file1/file0\x00', &(0x7f0000000180)) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f0000000240)='./file1/file0\x00', 0xffffffffffffff81, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000280)="5e7b0ed79af6b24b3d422316faaf1449ad3ac49dcb03b08301eb08434b8ce729fd197e5835f26f15abb7285b8971f4ccab1ec98c91726958948d95d1fe4bab1059e3c5e6e30121dc1544a936eb5ee238ca101e38c2eb00167663cde8cfb45c1df890d550d2f6cd344d86de3bc15005ffbe7911feb98a3d4c0c2eff3fcb04e75be560f459c0dfd9f8", 0x88, 0x4}, {&(0x7f0000000340)="b862fcbabcf73b519bd690d8b58a91ed1841c18a704303ec6279cd0d13bdb155b9fd5fedd57217d7b3c0cc10edefbc7e3ab1cbf6ed7b2ba3490d28cda25d", 0x3e, 0x3}, {&(0x7f0000000380)="c2e79c49f3a063c8f5990f870b7197af64d792b2", 0x14, 0xfffffffffffffffe}], 0x4000, &(0x7f0000000440)={[{'vfat\x00'}, {'.)+],&.*}-,{/!,,'}, {'$('}], [{@smackfsdef={'smackfsdef', 0x3d, ':'}}, {@appraise}]}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x82028, 0x0) rmdir(&(0x7f00000004c0)='./file1\x00') 15:11:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:11:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000004) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000080)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffd}]}]}, 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}, 0x40004020) 15:11:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:30 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') getdents(r0, &(0x7f0000000280)=""/244, 0xf4) [ 393.561257] loop7: detected capacity change from 0 to 8 [ 393.596422] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 15:11:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:11:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000440)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 3: r0 = syz_io_uring_setup(0x1, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x18}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="5f1428a907e3fbc6dec5a23e0ed35902fac38d3c126cc450ac34daaf146f4b8d85393e62ec966712057f68c7"], 0x1c}}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1ef1, &(0x7f0000000280)={0x0, 0x9b04, 0x20, 0x1, 0xf8, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x7, 0x2000, @fd_index=0x6, 0xc4, 0x0, 0x0, 0xd, 0x1, {0x1}}, 0x40) 15:11:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) 15:11:30 executing program 7: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000003800)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000038c0)={0xffffffffffffffff, 0x8, 0x2, 0x401}) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000003900)={0x10000, 0x8, 0x100, 0x101, 0x20, "d652b0445f74033ff06538517b1578ad672534", 0x2, 0x8}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736602106c00080120000200004000f8000020004000000000000000000001", 0x25}, {&(0x7f0000010400)="f8ffff0fffffff0fffffff0f", 0xc, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0009b903561419439d79122d94ecc79a28daf8b499a0f5b5fd1acd21a00f0e06b35dce656a10c249f4f83e7e7e734a8e4a90d0733a2315ef4bf210864191209a6f648c0c7e1c761c0c43570f515dc839a49413c3ef93765485db5b48459a26792bd2ea01f02fc8012939784c8421525077683b2714ea812d594233db468ee2a1"]) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0/file0\x00', 0x1, 0x9, &(0x7f00000035c0)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="876a2e743fb4fa8aa2d41b356776faf5e887e35ab205c1a09aab402928a5890b832024f4af688aa148c6bfa860232a0746bd0b387d85c2e6e7479f3fcc4398c660f3a4da6d6c5b599f19ef59d61a632678e6d12dc1c71f08fdc88225888fe5838487a7373deec9b361dc02177cf2e54f62fabc47daa30ca37c19834000b107d872b3c81a3d795443caf31e2e488be5d943987f8933bc28189979b8e5fb83ab2520ecf8a6afdec232aac31d69e964cc31f57615b5240fc140f5441fd5278386b56260a29e0d", 0xc5}, {&(0x7f0000001340)="cb73bbf77d795cede6c7e48e1095ed5a6d1b21741ed8d6c832c7e0c38cfc8ca11b764ba12f2350e1a7c8f582786cb9648d0c8dc8d2f5406d1171d9e6b92a5d7a30b8c1bf3214800ad361be48f3a3f44374ba99b60df4a3409893ac2f7eacb65c0761e80408387eddd3f3e28917b5a888221696125bdeb71436abad19ac1b07f87c55fe1e76a6d4def54fe6f3094db32cacfb3f67fe832f26691cb8296185e6ed4dbcf206c9d440b1a77fe148cb7eeefa58e4d60e31e5c62a69b83c8f50ba8ead", 0xc0, 0x57}, {&(0x7f0000001400)="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", 0x1000, 0xffffffffffffffff}, {&(0x7f0000002400)="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", 0x1000, 0x5872}, {&(0x7f00000001c0)="d668a4a6a76b88dafa703a5e172083be5259f12e771060d7986e4074ee8ede0445ff88cca45ccbc0", 0x28, 0x1}, {&(0x7f0000003400)="bb4b89047bbc475aff9acd8d8143035a8b4fba47aa3ad47c4ad17c71c3aa3d672826ef", 0x23, 0x400}, {&(0x7f0000003440)="8209b125bab4ea45ecd2e6205aefacbba5d9b1322e96b0b1e011d41a548125a9116d2188be216e8a8662ae0c5c7246f6e485bf4f9fc86203e5499cb5a2d8ee62694a96a229368e839a842305dcce1b064038918f90a399f34176d5cc483dd3c54023280f6a2f915a1b4c75dcca96b860d3472e8ff75f5a43461130b1ed95ad4e32ead76eb22cdc968b30be0bcc92e5f0f917f56f96ae2331295bc58121b34edf2c106025", 0xa4, 0x9}, {&(0x7f0000003500)="7422fb4f6a41ac2125dc5b1fa3da894a221320d6ff4096bfe5b6eaaed583f183dd47de492389db6a7d168e30bc95577a88a37641b3fbe64665021a2329f5117654333e93f4213a89085af6011f6ab676f5a8dd0cb2460791c1ff93a52b447d5a08ba36475d50f03f4310b25d2bc80551d927e19c5c864b403d5d21b7a0ec4f5bdc1e6f2ab511636d6616049e1da034f22edb", 0x92, 0x1}], 0x2000000, &(0x7f00000036c0)={[{@huge_never}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@huge_within_size}, {@huge_never}, {@huge_advise}, {@huge_never}, {@huge_advise}, {@huge_within_size}, {@size={'size', 0x3d, [0x37, 0x34, 0x35, 0x65, 0x35, 0x6d, 0x6b, 0x39, 0x70]}}], [{@smackfshat={'smackfshat', 0x3d, '$'}}, {@fsmagic={'fsmagic', 0x3d, 0x7fffffff}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x64, 0x3d, 0x64, 0x37, 0x37, 0x61, 0x61], 0x2d, [0x38, 0x65, 0x38, 0x3a], 0x2d, [0x32, 0x36, 0x62, 0x61], 0x2d, [0x31, 0x62, 0x66, 0x34], 0x2d, [0x30, 0x63, 0x38, 0x66, 0x63, 0x5b, 0x39, 0x36]}}}, {@dont_hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) connect$unix(r1, &(0x7f0000003840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 15:11:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40400d0}, 0x4000004) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000080)={0x28, 0x9, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa3}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xfffd}]}]}, 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/141, 0x8d}, 0x40004020) 15:11:30 executing program 6: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:11:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) 15:11:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:42 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x3fffc, 0x4, &(0x7f0000000080)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000000240)="000000000000000000000030ee7fdbd1e0010000000c0000182e7b414a630f51b1", 0x21, 0x4e0}, {&(0x7f0000000180)="e428682600c0e288041e9acceb4f66fc1c699128e9749378cfd38100053ab0daef7c5a580dfe66ff", 0x28, 0x800}, {&(0x7f0000000040)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x50}], 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e0900000000000000080000821e18efb7c7d400ce6a581a0c0963f9c52ea1f76049ed0eaefc37d4203bbc82d4e85fb0e001a1ad289a7355194962d5da7c0813146b0d5eca772951a973313c9bde6d1dfdeaef8ee3060ce8d18e3057f422350e40610193e4315fe968fb63b843a66a221bf23259bc83ad49973a7317000000"]) 15:11:42 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x40b01, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$SG_IO(r0, 0x5329, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0\x00', 0x14) 15:11:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15:11:42 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 405.629703] loop7: detected capacity change from 0 to 511 [ 405.640564] EXT4-fs (loop7): Unrecognized mount option "n " or missing value [ 405.654253] loop7: detected capacity change from 0 to 511 [ 405.658660] EXT4-fs (loop7): Unrecognized mount option "n " or missing value 15:11:42 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) 15:11:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0xf69, 0x84db, 0x200, 0x4}, 0x10) 15:11:42 executing program 6: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:11:42 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 15:11:42 executing program 3: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="0000000000000000000000000000000000000000000000000000000020002000010000000000000000000000000000000000000004", 0x35, 0x540}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000000140)="ed41000000100000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af30100040000000000000000000000010000001000000003983fb364ae3b3b1b075b8a96ae70d774d3f2172b9467e937620624fcb41f5abf96ad294f5ee9085f", 0x69, 0x4400}], 0x0, &(0x7f0000000080)=ANY=[]) [ 405.776075] loop3: detected capacity change from 0 to 4096 [ 405.790467] EXT4-fs (loop3): Unrecognized mount option "" or missing value 15:11:54 executing program 6: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:11:54 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x80}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x0, 0x9}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) accept$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000380)=0x6e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 15:11:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) 15:11:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:11:54 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) 15:11:54 executing program 7: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 15:11:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:11:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) 15:11:54 executing program 7: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010400)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b9010000000001b90000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010a00)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000000080)="2200170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f0000000040)={[{@block={'block', 0x3d, 0x200}}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x80, 0xa3) getdents(r0, &(0x7f0000000140)=""/110, 0x6e) 15:11:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:11:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:11:54 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:11:54 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:54 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:11:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) [ 417.996973] loop7: detected capacity change from 0 to 184 15:12:06 executing program 3: mq_unlink(&(0x7f0000000040)='!\x90%\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) mq_unlink(&(0x7f0000000080)='/dev/snapshot\x00') 15:12:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:06 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:12:06 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:12:06 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:06 executing program 1: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:06 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x73, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000001180)={{r0}, r2, 0x4, @unused=[0x6, 0x3, 0xffffffffffffff82, 0xc3], @subvolid=0xfffffffffffffffd}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x12000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) 15:12:06 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:06 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:06 executing program 3: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x90800, 0x3c, &(0x7f0000000200)=[{&(0x7f0000010000)="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"/1408, 0x580, 0x8000}, {&(0x7f0000010600)="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"/1408, 0x580, 0x8800}, {&(0x7f0000010c00)="ff43443030310100"/32, 0x20, 0x9000}, {&(0x7f0000010d00)="0042454130310100"/32, 0x20, 0x9800}, {&(0x7f0000010e00)="004e535230320100"/32, 0x20, 0xa000}, {&(0x7f0000010f00)="0054454130310100"/32, 0x20, 0xa800}, {&(0x7f0000011000)="01000200af000000fd9ef001200000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303132423500000000000000", 0x60, 0x10000}, {&(0x7f0000011100)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x100c0}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x10160}, {&(0x7f0000011300)="04000200e60000001faff0012100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x10800}, {&(0x7f0000011400)="000000000000000000000000000000000000000600"/32, 0x20, 0x108e0}, {&(0x7f0000011500)='\x00*genisoimage\x00'/32, 0x20, 0x10960}, {&(0x7f0000011600)="050002002300000068a1f001220000000200000001000000022b4e5352303200", 0x20, 0x11000}, {&(0x7f0000011700)="00000000000000000000000000000000000000000000000001000000010100001f000000002a67656e69736f696d61676500"/64, 0x40, 0x110a0}, {&(0x7f0000011800)="060002004f0000006411ae012300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x11800}, {&(0x7f0000011900)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x118c0}, {&(0x7f0000011a00)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x119a0}, {&(0x7f0000011b00)="07000200b10000006d0f0800240000000400"/32, 0x20, 0x12000}, {&(0x7f0000011c00)="08000200200000000000f0012500"/32, 0x20, 0x12800}, {&(0x7f0000011d00)="010002007e0000009cbef001300000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000601000100020002000100000001000000083546363732343232303030303132453800000000000000", 0x60, 0x18000}, {&(0x7f0000011e00)="0000000000000011004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f6465", 0x60, 0x180c0}, {&(0x7f0000011f00)="0000000000000000000000000000000000000000000000007810e40709140b2a3a000000002a67656e69736f696d61676500"/64, 0x40, 0x18160}, {&(0x7f0000012000)="04000200f60000001faff0013100000001000000002a554446204c5620496e666f00000000000000000000000201000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x80, 0x18800}, {&(0x7f0000012100)="000000000000000000000000000000000000000600"/32, 0x20, 0x188e0}, {&(0x7f0000012200)='\x00*genisoimage\x00'/32, 0x20, 0x18960}, {&(0x7f0000012300)="050002003300000068a1f001320000000200000001000000022b4e5352303200", 0x20, 0x19000}, {&(0x7f0000012400)="00000000000000000000000000000000000000000000000001000000010100001f000000002a67656e69736f696d61676500"/64, 0x40, 0x190a0}, {&(0x7f0000012500)="060002005f0000006411ae013300000003000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000", 0x60, 0x19800}, {&(0x7f0000012600)="000000000000000000000000000000000000000600080000002a4f5354412055444620436f6d706c69616e74000000000201030000000000001000000000000000000000000000000600000001000000002a67656e69736f696d616765000000", 0x60, 0x198c0}, {&(0x7f0000012700)="0000000000000000000000000000000000100000400000000106010000000000", 0x20, 0x199a0}, {&(0x7f0000012800)="07000200c10000006d0f0800340000000400"/32, 0x20, 0x1a000}, {&(0x7f0000012900)="08000200300000000000f0013500"/32, 0x20, 0x1a800}, {&(0x7f0000012a00)="09000200d00000000d027600400000007810e40709140b2a3a0000000100000000000000000000000c01000000000000000000000000000000000000000000000000000000000000010000002e000000000000001f000000002a67656e69736f696d61676500000000000000000000000000000000000000050000000200000002010201020100"/160, 0xa0, 0x20000}, {&(0x7f0000012b00)="080002003c0000000000f0014100"/32, 0x20, 0x20800}, {&(0x7f0000012c00)="02000200ce00000001d7f0010001000000800000200000000080000030000000", 0x20, 0x80000}, {&(0x7f0000012d00)="0001020032000000e559f001000000007810e40709140b2a3a0000000300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d00"/128, 0x80, 0x80800}, {&(0x7f0000012e00)="00000000000000000000000000000006004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084344524f4d000000000000000000000000000000000000000000000000000600"/128, 0x80, 0x808e0}, {&(0x7f0000012f00)="0000000000000000000000000000000000080000020000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000201030000000000", 0x40, 0x80980}, {&(0x7f0000013000)="08000200fc0000000000f0010100"/32, 0x20, 0x81000}, {&(0x7f0000013100)="050102004c000000f4a6a800020000000000000004000000010000040000000000003002ffffffffffffffffa51400000200000000000000080100000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000000000000000000000000000008000000080100000300"/192, 0xc0, 0x81800}, {&(0x7f0000013200)="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"/288, 0x120, 0x82000}, {&(0x7f0000013400)="05010200280000000173a800040000000000000004000000010000040000000000003002ffffffffffffffffa51400000100000000000000540000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000005010000000000000000000008000000540000000500"/192, 0xc0, 0x82800}, {&(0x7f0000013500)="01010200ca000000476218000500000001000a00000800000200000000000000000000000000000001010200d2000000affe1c000500000001000006000800000a000000000000000b01000000000866696c653000"/96, 0x60, 0x83000}, {&(0x7f0000013600)="050102001300000097c6a800060000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000640000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000007010000000000000000000008000000640000001700"/192, 0xc0, 0x83800}, {&(0x7f0000013700)="0501020061000000a406a800070000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000000a0000000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d61676500000000000000000000000000000000000000080100000000000000000000080000000a0000001800"/192, 0xc0, 0x84000}, {&(0x7f0000013800)="050102008c000000c50fa800080000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d6167650000000000000000000000000000000000000009010000000000000000000008000000282300001900"/192, 0xc0, 0x84800}, {&(0x7f0000013900)="05010200cf000000c056a800090000000000000004000000010000050000000000003002ffffffffffffffff841000000100000000000000282300000000000005000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000a010000000000000000000008000000282300001900"/192, 0xc0, 0x85000}, {&(0x7f0000013a00)="05010200c400000023e7a8000a0000000000000004000000010000050000000000003002ffffffffffffffff8410000001000000000000001a0400000000000001000000000000007810e40709140b2a3a0000007810e40709140b2a3a0000007810e40709140b2a3a0000000100000000000000000000000000000000000000002a67656e69736f696d616765000000000000000000000000000000000000000b0100000000000000000000080000001a0400001e00"/192, 0xc0, 0x85800}, {&(0x7f0000013b00)="01001401000001000000050015010000010046494c4530000000000000000000", 0x20, 0x86000}, {&(0x7f0000013c00)="01000000011400010000050000000115000146494c4530000000000000000000", 0x20, 0x87000}, {&(0x7f0000013d00)="010016010000010000000a0017010000010000660069006c0065003000000000", 0x20, 0x88000}, {&(0x7f0000013e00)="010000000116000100000a0000000117000100660069006c0065003000000000", 0x20, 0x89000}, {&(0x7f0000013f00)="2200140100000000011400080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012c00180100000000011864000000000000647809140b2a3a08000000010000010a46494c452e434f4c3b31002600150100000000011500080000000008007809140b2a3a08020000010000010546494c45302a0019010000000001190a0000000000000a7809140b2a3a08000000010000010846494c45312e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45322e3b31002a001a0100000000011a28230000000023287809140b2a3a08000000010000010846494c45332e3b3100"/288, 0x120, 0x8a000}, {&(0x7f0000014100)="2200150100000000011500080000000008007809140b2a3a080200000100000101002200140100000000011400080000000008007809140b2a3a080200000100000101012a001f0100000000011f1a0400000000041a7809140b2a3a08000000010000010846494c45302e3b3100"/128, 0x80, 0x8a800}, {&(0x7f0000014200)="2200160100000000011600080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101013400180100000000011864000000000000647809140b2a3a08000000010000011200660069006c0065002e0063006f006c0064002c00170100000000011700080000000008007809140b2a3a08020000010000010a00660069006c00650030002c0019010000000001190a0000000000000a7809140b2a3a08000000010000010a00660069006c00650031002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c00650032002c001a0100000000011a28230000000023287809140b2a3a08000000010000010a00660069006c0065003300"/320, 0x140, 0x8b000}, {&(0x7f0000014400)="2200170100000000011700080000000008007809140b2a3a080200000100000101002200160100000000011600080000000008007809140b2a3a080200000100000101012c001f0100000000011f1a0400000000041a7809140b2a3a08000000010000010a00660069006c0065003000"/128, 0x80, 0x8b800}, {&(0x7f0000014500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x8c000}, {&(0x7f0000014600)='syzkallers\x00'/32, 0x20, 0x8c800}, {&(0x7f0000014700)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x8f800}, {&(0x7f0000014c00)="02000200ee00000001d7f0012001000000800000200000000080000030000000", 0x20, 0x90000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e90e9a9a7079ca2ab75be1698d05fd21e0481e024e77335126f0ff206861fb37f34bc09ae5866e13053b3eca7e75cce9d6831e56f315e6ce4b28752d12d9ba6acd065705000000000000007f1c71bcc634d3050c6cb992f438cadb8400c8854cf1852e946b"]) r1 = signalfd(r0, &(0x7f0000000040)={[0x4000]}, 0x8) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x800, 0x1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000000c0)) fchmod(0xffffffffffffffff, 0x92) 15:12:06 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:12:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:06 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 430.188863] loop3: detected capacity change from 0 to 2304 [ 430.239820] loop3: detected capacity change from 0 to 2304 15:12:20 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f00000000c0)) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:20 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:20 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:20 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:12:20 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:20 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:20 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 15:12:20 executing program 1: socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x945, @dev={0xfe, 0x80, '\x00', 0x36}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:20 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) 15:12:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:20 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) 15:12:20 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x110) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100), 0x211880, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000e7011ca90000001800", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./fkle1/file0/fileK\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, r1) 15:12:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:20 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 444.084294] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 15:12:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x110) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100), 0x211880, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000e7011ca90000001800", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./fkle1/file0/fileK\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, r1) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:34 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 444.377058] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 15:12:34 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:12:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) 15:12:34 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) 15:12:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x8001) 15:12:34 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 15:12:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) 15:12:34 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x110) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1/file0\x00', &(0x7f0000000100), 0x211880, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="010000e7011ca90000001800", @ANYRES32=r0, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='./fkle1/file0/fileK\x00']) lchown(&(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, r1) 15:12:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x0, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 457.460709] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 15:12:34 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) 15:12:34 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:34 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) 15:12:34 executing program 7: getresuid(&(0x7f0000000080), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/class/ptp', 0x200140, 0x80) r1 = syz_mount_image$tmpfs(0x0, &(0x7f00000014c0)='./file0\x00', 0x7, 0x7, &(0x7f0000001900)=[{&(0x7f0000001500)="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", 0xfa, 0x7f}, {&(0x7f0000001600)="c67c1df3834f385d64c5d9a68514bc7c9aea5bd4e985c25d902c1e402bb370d689ce03bc63220c6c44039f6610112cc8e8afbc4fbf34089583ce04cad6f5611a87e394447f5ef7d1687f7267276038fa9849d5b5594f8c1cf0208c98d26f042376613ba939de5f7da3a9a77ca52ce11affbd", 0x72, 0xffff}, {&(0x7f0000001680)="2311ac799245c657716c7c58b14cdca1c3859af575a6553cd9382d071ad61d9a26db78bc2086a920744fd369313a9b0cc57243cafb1fcee921334ec7cc4cea1c559928c1497662123f29ae0470cefd75fe8c9d12fa4ef9da27fc6cfc787c85f1fb2d742a4c37e3b8ae5ae37e9199d226b7e2cb425205f69b7405e616fef78bd6cd8ed5f146148c0b70fb4ea5399a4e48be0943", 0x93, 0x401}, {&(0x7f0000001740)="6e4ea050cde254de92f3e5b8c35f9ed79e2e1b58d6283c33909ab677ac0830194084a7e012c2928a75d5df46eeea763a0abf6b2c30d29765195d70", 0x3b, 0x1}, {&(0x7f00000017c0)="b7bfdc50d4a8ced9213821898f1190ab870eecd5e018b5515da0191a41bf3d27dc9a6c7ef532f654facd6afa6632b93e25224a4d67250b29cd176a733c008964cffed908fec05da6f147e1462e877f8fa9f0d9783c85e52d827efcad85a2c2a7535dd5e2a550b7849bb559b0ce4f6db8b9688d2bd70410129a254ac8adc752d68bb5dd1edeb46092a9838430267694e1e1413bea085ef6a81ddcff29cdb2e1b287e3a780ed3ed50584ef8f617c2e16", 0xaf, 0x7}, {0x0, 0x0, 0x9}, {&(0x7f00000018c0)="e0e381a93d69f4b123c952295313bef3670b", 0x12, 0x8}], 0x28040, &(0x7f0000001a80)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @void}}}, {}, {@mpol={'mpol', 0x3d, {'default', '=static', @void}}}, {}, {@gid={'gid', 0x3d, 0xee00}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_type={'obj_type', 0x3d, 'posixacl'}}, {@appraise_type}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002f00)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000011}, 0x2404c051) syz_genetlink_get_family_id$ethtool(&(0x7f0000003200), r0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) preadv2(r1, &(0x7f0000000780)=[{&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000280)=""/89, 0x59}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/30, 0x1e}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000000700)=""/102, 0x66}], 0xa, 0x25, 0x4, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) [ 457.773412] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 458.017566] loop7: detected capacity change from 0 to 255 15:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) [ 458.137330] loop7: detected capacity change from 0 to 255 [ 458.638051] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 472.444409] cgroup: No subsys list or none specified 15:12:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:49 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x14, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0, &(0x7f0000001840)={[{@clone_children}, {@name={'name', 0x3d, 'tmpfs\x00'}}]}) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:49 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) 15:12:49 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, r6, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:49 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) 15:12:49 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, r5, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:12:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}], 0x1, 0x8001) 15:12:49 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:12:49 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) 15:12:49 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f747b53cabcf353b1c6eaed06ad5af853ee8b4189828be6409395bb29646aa40d6b2527f55bc4d4d6ab2462a7bb5b70eca181e0ac46d7", 0x6d}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:12:49 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:12:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:12:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109242, 0xa4) write(r0, &(0x7f0000000080)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='F', 0x1, 0x10000) 15:12:49 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:02 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x109242, 0xa4) write(r0, &(0x7f0000000080)="01", 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000)='F', 0x1, 0x10000) 15:13:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 15:13:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) 15:13:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:02 executing program 3: getdents(0xffffffffffffff9c, &(0x7f0000000040)=""/82, 0x52) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f00000001000000000000000a000000002000000020000020000000ddf4655fddf4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) 15:13:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 15:13:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) [ 485.540225] loop3: detected capacity change from 0 to 4 [ 485.548912] EXT4-fs (loop3): fragment/cluster size (1048576) != block size (1024) 15:13:13 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x0, 0x80) write(r0, &(0x7f0000000080)="01", 0x1) openat(r0, &(0x7f00000000c0)='./file1/file0\x00', 0x80, 0x60) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4042, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x2000000}}, './file0\x00'}) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x8) creat(&(0x7f0000000040)='./file1\x00', 0x0) 15:13:13 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 15:13:13 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:13 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r3]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:13 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) 15:13:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:13 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:26 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) 15:13:26 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="000829bd7000ffdbdf25280000000c002d000201aaaaaaaaaaaa"], 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 15:13:26 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:26 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:26 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:26 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params]}, 0x1c}}, 0x0) 15:13:26 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:26 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 4: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:26 executing program 3: r0 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = getpid() pidfd_open(r3, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0xffffffffffffffff, r1, 0x0, r2, 0x102, 0x5}, 0x80000001, 0x55c, 0x7, 0x95, 0x0, r3}) syz_emit_ethernet(0x1e, &(0x7f0000002540)={@remote, @multicast, @void, {@generic={0x88ca, "4b7950172046e806d28c30366efc0549"}}}, 0x0) pidfd_open(r3, 0x0) 15:13:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 15:13:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 15:13:39 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:39 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:39 executing program 3: lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={'L-', 0x5}, 0x16, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@multicast2, @private}, 0xc) 15:13:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:39 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:39 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:39 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:39 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) 15:13:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:39 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 1) 15:13:50 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 533.825633] FAULT_INJECTION: forcing a failure. [ 533.825633] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 533.827041] CPU: 1 PID: 5788 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 533.827929] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 533.829114] Call Trace: [ 533.829384] [ 533.829617] dump_stack_lvl+0x8b/0xb3 [ 533.830036] should_fail.cold+0x5/0xa [ 533.830447] _copy_from_user+0x2e/0x170 [ 533.830873] __copy_msghdr_from_user+0x91/0x4b0 [ 533.831386] ? __ia32_sys_shutdown+0x70/0x70 [ 533.831862] ? __lock_acquire+0xbac/0x5b70 [ 533.832320] sendmsg_copy_msghdr+0xa1/0x160 [ 533.832795] ? __ia32_sys_recvmmsg+0x260/0x260 [ 533.833283] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 533.833848] ? lock_release+0x3b2/0x6f0 [ 533.834270] ? __might_fault+0xd1/0x170 [ 533.834695] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 533.835250] ___sys_sendmsg+0xc6/0x170 [ 533.835665] ? sendmsg_copy_msghdr+0x160/0x160 [ 533.836145] ? lock_release+0x3b2/0x6f0 [ 533.836566] ? __fget_files+0x2cd/0x4c0 [ 533.836995] ? lock_downgrade+0x6d0/0x6d0 [ 533.837443] ? lock_release+0x3b2/0x6f0 [ 533.837873] ? ksys_write+0x212/0x250 [ 533.838296] ? __fget_files+0x2ef/0x4c0 [ 533.838732] ? __fget_light+0xea/0x280 [ 533.839154] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 533.839752] __sys_sendmsg+0xe5/0x1b0 [ 533.840169] ? __sys_sendmsg_sock+0x30/0x30 [ 533.840638] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 533.841228] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 533.841819] ? fput+0x2a/0x50 [ 533.842164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 533.842724] do_syscall_64+0x3b/0x90 [ 533.843128] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 533.843696] RIP: 0033:0x7f71b6669b19 [ 533.844090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 533.846075] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.846906] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 533.847666] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 533.848443] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 533.849216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.849986] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 533.850762] 15:13:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f", 0x37}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:13:50 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:13:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:13:50 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:06 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 4: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 2) 15:14:06 executing program 3: ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x28, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000001000008000000d2420100128300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e32353936313432303000"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000457900aa5f634b37b3eeb32debc4d834010040000c00000000000000dbf4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000006100000000000000", 0x40, 0x540}, {&(0x7f0000010300)="0300000004000000000000000000000000000000010400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000dbf4655fdbf4655fdbf4655f00"/8224, 0x2020, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x4100}, {&(0x7f0000012700)="2000000024b304b624b304b600000000dbf4655f00"/32, 0x20, 0x4180}, {&(0x7f0000012800)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030000000", 0x40, 0x4200}, {&(0x7f0000012900)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4280}, {&(0x7f0000012a00)="8081000000180000dbf4655fdbf4655fdbf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000040000000", 0x40, 0x4300}, {&(0x7f0000012b00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4380}, {&(0x7f0000012c00)="c041000000400000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800000000000af301000400000000000000000000000400000020000000", 0x40, 0x4a00}, {&(0x7f0000012d00)="20000000000000000000000000000000dbf4655f00"/32, 0x20, 0x4a80}, {&(0x7f0000012e00)="ed41000000100000dbf4655fdbf4655fdbf4655f00000000000002008000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005c7bc8b50000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4b00}, {&(0x7f0000012f00)="ed8100001a040000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000060000000000000000000000000000000000000000000000000000000000000000000000000000000477b71930000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4c00}, {&(0x7f0000013000)="ffa1000026000000dbf4655fdbf4655fdbf4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3235393631343230302f66696c65302f66696c653000000000000000000000000000000000000000000000517c97ec0000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x4d00}, {&(0x7f0000013100)="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", 0x1a0, 0x4e00}, {&(0x7f0000013300)="ed81000064000000dbf4655fdbf4655fdbf4655f00000000000001008000000000000800010000000af301000400000000000000000000000100000090000000000000000000000000000000000000000000000000000000000000000000000000000000733234d20000000000000000000000000000000000000000000000002000000024b304b624b304b624b304b6dbf4655f24b304b60000000000000000", 0xa0, 0x5000}, {&(0x7f0000013400)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c653300000011000000940f090166696c652e636f6c64000000", 0x80, 0x10000}, {&(0x7f0000013500)="0b0000000c0001022e00000002000000f40f02022e2e00"/32, 0x20, 0x20000}, {&(0x7f0000013600)="00000000001000"/32, 0x20, 0x21000}, {&(0x7f0000013700)="00000000001000"/32, 0x20, 0x22000}, {&(0x7f0000013800)="00000000001000"/32, 0x20, 0x23000}, {&(0x7f0000013900)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x30000}, {&(0x7f0000013a00)="0200"/32, 0x20, 0x30400}, {&(0x7f0000013b00)="0300"/32, 0x20, 0x30800}, {&(0x7f0000013c00)="0400"/32, 0x20, 0x30c00}, {&(0x7f0000013d00)="0500"/32, 0x20, 0x31000}, {&(0x7f0000013e00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x31400}, {&(0x7f0000013f00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x40000}, {&(0x7f0000014000)="0200"/32, 0x20, 0x40400}, {&(0x7f0000014100)="0300"/32, 0x20, 0x40800}, {&(0x7f0000014200)="0400"/32, 0x20, 0x40c00}, {&(0x7f0000014300)="0500"/32, 0x20, 0x41000}, {&(0x7f0000014400)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000700"/96, 0x60, 0x41400}, {&(0x7f0000014500)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d80f050766696c653100"/64, 0x40, 0x50000}, {&(0x7f0000014600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x60000}, {&(0x7f0000014b00)='syzkallers\x00'/32, 0x20, 0x70000}, {&(0x7f0000014c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x90000}], 0x0, &(0x7f0000014d00)) 15:14:06 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:14:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:06 executing program 2: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 549.642666] FAULT_INJECTION: forcing a failure. [ 549.642666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.645057] CPU: 0 PID: 5823 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 549.646695] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 549.648929] Call Trace: [ 549.649444] [ 549.649886] dump_stack_lvl+0x8b/0xb3 [ 549.650668] should_fail.cold+0x5/0xa [ 549.651444] _copy_from_user+0x2e/0x170 [ 549.652246] iovec_from_user+0x242/0x3c0 [ 549.653093] __import_iovec+0x67/0x5d0 [ 549.653875] ? __ia32_sys_shutdown+0x70/0x70 [ 549.654767] import_iovec+0x83/0xb0 [ 549.655505] sendmsg_copy_msghdr+0x12d/0x160 [ 549.656382] ? __ia32_sys_recvmmsg+0x260/0x260 [ 549.657306] ? lock_release+0x3b2/0x6f0 15:14:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="22a402ff5d38917e4276253a719144f86fe9c43c07c15d45ffcf9034a556587f403cca01cfa60d58c8cb0a29bb75e9794272a21568116f", 0x37}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 549.658097] ? __might_fault+0xd1/0x170 [ 549.658987] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 549.660046] ___sys_sendmsg+0xc6/0x170 [ 549.660834] ? sendmsg_copy_msghdr+0x160/0x160 [ 549.661789] ? lock_release+0x3b2/0x6f0 15:14:06 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 549.662588] ? __fget_files+0x2cd/0x4c0 [ 549.663399] ? lock_downgrade+0x6d0/0x6d0 [ 549.664229] ? lock_release+0x3b2/0x6f0 [ 549.665034] ? ksys_write+0x212/0x250 [ 549.665815] ? __fget_files+0x2ef/0x4c0 [ 549.666616] ? __fget_light+0xea/0x280 [ 549.667391] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 549.668502] __sys_sendmsg+0xe5/0x1b0 [ 549.669277] ? __sys_sendmsg_sock+0x30/0x30 [ 549.670137] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 549.671234] ? fput+0x2a/0x50 [ 549.671931] ? syscall_enter_from_user_mode+0x1d/0x50 [ 549.673108] do_syscall_64+0x3b/0x90 [ 549.673954] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 549.675094] RIP: 0033:0x7f71b6669b19 [ 549.675915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 549.679988] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.681683] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 549.683255] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 549.684818] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 549.686395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.687950] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 549.689540] [ 549.700507] loop3: detected capacity change from 0 to 4096 15:14:06 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 2: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 549.749091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 15:14:06 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:06 executing program 3: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000340)={0xd, 0x435077c4}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/168, 0xa8}], 0x1, 0x22, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) preadv2(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f0000000280)=""/88, 0x58}], 0x4, 0x0, 0xdbe9, 0x1a) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) 15:14:20 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:14:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 3) 15:14:20 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:20 executing program 7: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:20 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:20 executing program 3: sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300), 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1c, 0x30d, 0x4b3, 0x5, 0x0, 0xfff}, ["", "", "", "", ""]}, 0x38}}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r2, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c090}, 0x0) 15:14:20 executing program 2: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:20 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 564.254337] FAULT_INJECTION: forcing a failure. [ 564.254337] name failslab, interval 1, probability 0, space 0, times 1 [ 564.257551] CPU: 0 PID: 5867 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 564.259305] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 564.261694] Call Trace: [ 564.262229] [ 564.262697] dump_stack_lvl+0x8b/0xb3 [ 564.263513] should_fail.cold+0x5/0xa [ 564.264318] ? __alloc_skb+0x211/0x340 [ 564.265132] should_failslab+0x5/0x10 [ 564.265958] kmem_cache_alloc_node+0x55/0x490 [ 564.266899] __alloc_skb+0x211/0x340 [ 564.267673] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 564.268848] netlink_sendmsg+0x98d/0xdf0 [ 564.269720] ? netlink_unicast+0x7e0/0x7e0 [ 564.270615] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 564.271762] ? netlink_unicast+0x7e0/0x7e0 [ 564.272639] sock_sendmsg+0x150/0x190 [ 564.273444] ____sys_sendmsg+0x709/0x870 [ 564.274293] ? kernel_sendmsg+0x50/0x50 [ 564.275112] ? __ia32_sys_recvmmsg+0x260/0x260 [ 564.276075] ? lock_release+0x3b2/0x6f0 [ 564.276903] ? __might_fault+0xd1/0x170 [ 564.277746] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 564.278838] ___sys_sendmsg+0xf3/0x170 [ 564.279653] ? sendmsg_copy_msghdr+0x160/0x160 [ 564.280608] ? __fget_files+0x2cd/0x4c0 [ 564.281451] ? lock_downgrade+0x6d0/0x6d0 [ 564.282314] ? lock_release+0x3b2/0x6f0 [ 564.283138] ? ksys_write+0x212/0x250 [ 564.283948] ? __fget_files+0x2ef/0x4c0 [ 564.284782] ? __fget_light+0xea/0x280 [ 564.285722] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 564.286948] __sys_sendmsg+0xe5/0x1b0 [ 564.287773] ? __sys_sendmsg_sock+0x30/0x30 [ 564.288894] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 564.290181] ? syscall_enter_from_user_mode+0x1d/0x50 [ 564.291521] do_syscall_64+0x3b/0x90 [ 564.292498] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 564.293834] RIP: 0033:0x7f71b6669b19 [ 564.294786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 564.298941] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.300518] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 564.302005] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 564.303475] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 564.304943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.306425] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 564.307914] 15:14:21 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:21 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:14:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:21 executing program 7: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:21 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x6f86532d}}, './file0\x00'}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000012200)) openat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x20200, 0xa0, 0x18}, 0x18) 15:14:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:14:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) [ 564.412476] loop3: detected capacity change from 0 to 224 15:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 4) 15:14:33 executing program 3: syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x2f9a, &(0x7f0000001480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff4000/0x7000)=nil, &(0x7f0000001500), &(0x7f0000001540)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00') syz_io_uring_setup(0x4d40, &(0x7f0000000080)={0x0, 0xfba4, 0x0, 0x0, 0x1e9, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 15:14:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)}], 0x1, &(0x7f0000000240)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x3a, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0xe87}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffffe}}], 0x48}}], 0x2, 0x8001) 15:14:33 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:14:33 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 7: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) 15:14:33 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 576.338654] FAULT_INJECTION: forcing a failure. [ 576.338654] name failslab, interval 1, probability 0, space 0, times 0 [ 576.340348] CPU: 0 PID: 5916 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 576.341328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 576.342649] Call Trace: [ 576.342927] [ 576.343185] dump_stack_lvl+0x8b/0xb3 [ 576.343644] should_fail.cold+0x5/0xa [ 576.344086] ? create_object.isra.0+0x3a/0xa20 [ 576.344619] should_failslab+0x5/0x10 [ 576.345069] kmem_cache_alloc+0x5b/0x480 [ 576.345557] create_object.isra.0+0x3a/0xa20 [ 576.346061] ? kasan_unpoison+0x23/0x50 [ 576.346530] kmem_cache_alloc_node+0x248/0x490 [ 576.347065] __alloc_skb+0x211/0x340 [ 576.347493] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 576.348148] netlink_sendmsg+0x98d/0xdf0 [ 576.348597] ? netlink_unicast+0x7e0/0x7e0 [ 576.349094] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 576.349726] ? netlink_unicast+0x7e0/0x7e0 [ 576.350214] sock_sendmsg+0x150/0x190 [ 576.350656] ____sys_sendmsg+0x709/0x870 [ 576.351138] ? kernel_sendmsg+0x50/0x50 [ 576.351602] ? __ia32_sys_recvmmsg+0x260/0x260 [ 576.352145] ? lock_release+0x3b2/0x6f0 [ 576.352621] ? __might_fault+0xd1/0x170 [ 576.353096] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 576.353727] ___sys_sendmsg+0xf3/0x170 [ 576.354173] ? sendmsg_copy_msghdr+0x160/0x160 [ 576.354707] ? __fget_files+0x2cd/0x4c0 [ 576.355177] ? lock_downgrade+0x6d0/0x6d0 [ 576.355662] ? lock_release+0x3b2/0x6f0 [ 576.356127] ? ksys_write+0x212/0x250 [ 576.356575] ? __fget_files+0x2ef/0x4c0 [ 576.357052] ? __fget_light+0xea/0x280 [ 576.357494] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 576.358073] __sys_sendmsg+0xe5/0x1b0 [ 576.358474] ? __sys_sendmsg_sock+0x30/0x30 [ 576.358928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 576.359526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 576.360094] do_syscall_64+0x3b/0x90 [ 576.360489] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 576.361045] RIP: 0033:0x7f71b6669b19 [ 576.361436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 576.363380] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.364161] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 576.364895] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 576.365667] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 576.366402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.367131] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 576.367886] 15:14:33 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:14:33 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = dup(r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x3, 0x0, &(0x7f0000000540)) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) 15:14:33 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:14:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) 15:14:33 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:33 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:46 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:46 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 5) 15:14:46 executing program 3: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), &(0x7f0000001000), 0x2, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000001040)={{r0}, "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"}) r1 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) pwrite64(r1, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) mknodat$null(r1, &(0x7f0000000000)='./file1\x00', 0x24, 0x103) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x7fff, @status={[0x8000, 0xfff, 0x5, 0x0, 0x401]}, [0x3, 0x7, 0x7fffffff, 0x8a7, 0x7, 0x4, 0x3, 0x2, 0x4, 0x9, 0x4, 0x8, 0x101, 0x4, 0x2, 0x9, 0x9, 0x200, 0x5, 0xfffffffffffffc47, 0x7fff, 0x0, 0x245, 0x1794, 0x3, 0xac7, 0x9, 0x80000000, 0xf0e5, 0xa8d, 0x8, 0x5, 0x6, 0xfffffffffffff001, 0x3ff, 0x1, 0x100000001, 0x0, 0x8, 0x9, 0x70bf, 0xffffffffffffff80, 0x4, 0x5, 0x4, 0x4, 0x40, 0x100000000, 0x7, 0x1, 0x101, 0x200, 0x7fff, 0x7f, 0x9, 0x1, 0x2, 0x3ff, 0xb0, 0x7, 0x8, 0xffff, 0x101, 0xe48e]}) 15:14:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) 15:14:46 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) 15:14:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 590.027818] FAULT_INJECTION: forcing a failure. [ 590.027818] name failslab, interval 1, probability 0, space 0, times 0 [ 590.030299] CPU: 0 PID: 5956 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 590.030327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 590.030341] Call Trace: [ 590.030348] [ 590.030357] dump_stack_lvl+0x8b/0xb3 [ 590.030405] should_fail.cold+0x5/0xa [ 590.030447] should_failslab+0x5/0x10 [ 590.030486] __kmalloc_node_track_caller+0x7e/0x330 [ 590.030514] ? netlink_sendmsg+0x98d/0xdf0 [ 590.030552] __alloc_skb+0xe3/0x340 15:14:46 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 590.030583] netlink_sendmsg+0x98d/0xdf0 [ 590.030619] ? netlink_unicast+0x7e0/0x7e0 [ 590.030655] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.030688] ? netlink_unicast+0x7e0/0x7e0 15:14:46 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 590.030715] sock_sendmsg+0x150/0x190 15:14:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) [ 590.030743] ____sys_sendmsg+0x709/0x870 15:14:46 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:14:46 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 590.030776] ? kernel_sendmsg+0x50/0x50 15:14:46 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 590.030799] ? __ia32_sys_recvmmsg+0x260/0x260 [ 590.030836] ? lock_release+0x3b2/0x6f0 [ 590.030862] ? __might_fault+0xd1/0x170 [ 590.030894] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 590.030932] ___sys_sendmsg+0xf3/0x170 [ 590.030965] ? sendmsg_copy_msghdr+0x160/0x160 [ 590.031002] ? __fget_files+0x2cd/0x4c0 [ 590.031025] ? lock_downgrade+0x6d0/0x6d0 15:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 6) [ 590.031053] ? lock_release+0x3b2/0x6f0 [ 590.031079] ? ksys_write+0x212/0x250 [ 590.031121] ? __fget_files+0x2ef/0x4c0 [ 590.031153] ? __fget_light+0xea/0x280 [ 590.031175] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 590.031212] __sys_sendmsg+0xe5/0x1b0 [ 590.031242] ? __sys_sendmsg_sock+0x30/0x30 [ 590.031270] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.031318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 590.031353] do_syscall_64+0x3b/0x90 [ 590.031390] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 590.031413] RIP: 0033:0x7f71b6669b19 [ 590.031430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 590.031452] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.031477] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 590.031492] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 590.031506] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 15:14:46 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 590.031520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.031533] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 590.031571] [ 590.229042] FAULT_INJECTION: forcing a failure. [ 590.229042] name failslab, interval 1, probability 0, space 0, times 0 [ 590.229105] CPU: 0 PID: 5976 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 590.229133] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 590.229148] Call Trace: [ 590.229154] [ 590.229164] dump_stack_lvl+0x8b/0xb3 [ 590.229212] should_fail.cold+0x5/0xa [ 590.229249] ? create_object.isra.0+0x3a/0xa20 [ 590.229288] should_failslab+0x5/0x10 [ 590.229324] kmem_cache_alloc+0x5b/0x480 [ 590.229356] create_object.isra.0+0x3a/0xa20 [ 590.229389] ? kasan_unpoison+0x23/0x50 [ 590.229427] __kmalloc_node_track_caller+0x1fb/0x330 [ 590.229453] ? netlink_sendmsg+0x98d/0xdf0 [ 590.229488] __alloc_skb+0xe3/0x340 [ 590.229519] netlink_sendmsg+0x98d/0xdf0 [ 590.229554] ? netlink_unicast+0x7e0/0x7e0 [ 590.229590] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.229633] ? netlink_unicast+0x7e0/0x7e0 [ 590.229660] sock_sendmsg+0x150/0x190 [ 590.229687] ____sys_sendmsg+0x709/0x870 [ 590.229716] ? kernel_sendmsg+0x50/0x50 [ 590.229739] ? __ia32_sys_recvmmsg+0x260/0x260 [ 590.229778] ? lock_release+0x3b2/0x6f0 [ 590.229804] ? __might_fault+0xd1/0x170 [ 590.229836] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 590.229872] ___sys_sendmsg+0xf3/0x170 [ 590.229902] ? sendmsg_copy_msghdr+0x160/0x160 [ 590.229937] ? __fget_files+0x2cd/0x4c0 [ 590.229959] ? lock_downgrade+0x6d0/0x6d0 [ 590.229986] ? lock_release+0x3b2/0x6f0 [ 590.230010] ? ksys_write+0x212/0x250 [ 590.230051] ? __fget_files+0x2ef/0x4c0 [ 590.230083] ? __fget_light+0xea/0x280 [ 590.230106] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 590.230141] __sys_sendmsg+0xe5/0x1b0 [ 590.230169] ? __sys_sendmsg_sock+0x30/0x30 [ 590.230195] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 590.230244] ? syscall_enter_from_user_mode+0x1d/0x50 [ 590.230279] do_syscall_64+0x3b/0x90 [ 590.230312] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 590.230335] RIP: 0033:0x7f71b6669b19 [ 590.230352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 590.230373] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.230397] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 590.230413] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 590.230428] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 590.230443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.230457] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 590.230496] 15:15:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x1, 0x8001) 15:15:02 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x1030c0, 0x0) acct(&(0x7f0000000040)='./file0\x00') execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=[&(0x7f00000000c0)=':[\xe9\x00', &(0x7f0000000100)='!/(\x00', &(0x7f0000000140)='%-\x00', &(0x7f0000000180)='[$\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='.)&]+)}\x00', &(0x7f0000000240)=')\'#-#!}[&**#}\\*,[!*/\'+{&\x00', &(0x7f0000000280)=' \x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)=')\x00', &(0x7f0000000340)=')}@[![\x00']) 15:15:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 7) 15:15:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 605.539587] FAULT_INJECTION: forcing a failure. [ 605.539587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.540859] CPU: 1 PID: 6000 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 605.541701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 605.542890] Call Trace: [ 605.543162] [ 605.543394] dump_stack_lvl+0x8b/0xb3 [ 605.543805] should_fail.cold+0x5/0xa [ 605.544213] _copy_from_iter+0x37d/0x1250 [ 605.544658] ? hash_and_copy_to_iter+0x210/0x210 [ 605.545159] ? rcu_read_lock_sched_held+0x3a/0x70 [ 605.545666] ? memset+0x20/0x40 [ 605.546042] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 605.546608] ? __virt_addr_valid+0xe9/0x310 [ 605.547064] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 605.547631] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 605.548152] ? __check_object_size+0x1b5/0x4e0 [ 605.548649] netlink_sendmsg+0x86b/0xdf0 [ 605.549076] ? netlink_unicast+0x7e0/0x7e0 [ 605.549522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.550110] ? netlink_unicast+0x7e0/0x7e0 [ 605.550549] sock_sendmsg+0x150/0x190 [ 605.550948] ____sys_sendmsg+0x709/0x870 [ 605.551375] ? kernel_sendmsg+0x50/0x50 [ 605.551785] ? __ia32_sys_recvmmsg+0x260/0x260 [ 605.552263] ? lock_release+0x3b2/0x6f0 [ 605.552681] ? __might_fault+0xd1/0x170 [ 605.553099] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 605.553647] ___sys_sendmsg+0xf3/0x170 [ 605.554066] ? sendmsg_copy_msghdr+0x160/0x160 [ 605.554546] ? __fget_files+0x2cd/0x4c0 [ 605.554964] ? lock_downgrade+0x6d0/0x6d0 [ 605.555398] ? lock_release+0x3b2/0x6f0 [ 605.555823] ? ksys_write+0x212/0x250 [ 605.556232] ? __fget_files+0x2ef/0x4c0 [ 605.556649] ? __fget_light+0xea/0x280 [ 605.557053] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 605.557629] __sys_sendmsg+0xe5/0x1b0 [ 605.558045] ? __sys_sendmsg_sock+0x30/0x30 [ 605.558496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.559076] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.559616] do_syscall_64+0x3b/0x90 [ 605.560015] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 605.560555] RIP: 0033:0x7f71b6669b19 [ 605.560950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.562872] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.563664] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 605.564406] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 605.565143] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.565909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.566651] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 605.567399] [ 605.571649] Process accounting resumed 15:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 605.681586] Process accounting resumed 15:15:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 8) 15:15:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 605.757343] FAULT_INJECTION: forcing a failure. [ 605.757343] name failslab, interval 1, probability 0, space 0, times 0 [ 605.758893] CPU: 1 PID: 6026 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 605.759750] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 605.760927] Call Trace: [ 605.761197] [ 605.761430] dump_stack_lvl+0x8b/0xb3 [ 605.761859] should_fail.cold+0x5/0xa [ 605.762274] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 605.762958] should_failslab+0x5/0x10 [ 605.763368] __kmalloc+0x72/0x330 [ 605.763727] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.764313] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 605.764981] genl_family_rcv_msg_doit+0xda/0x330 [ 605.765482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 605.766178] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.766753] ? cap_capable+0x1eb/0x250 [ 605.767170] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.767740] ? security_capable+0x95/0xc0 [ 605.768176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.768750] ? ns_capable+0xd9/0x100 [ 605.769154] genl_rcv_msg+0x33c/0x5a0 [ 605.769559] ? genl_get_cmd+0x480/0x480 [ 605.769998] ? nl80211_set_channel+0x70/0x70 [ 605.770472] ? lock_release+0x6f0/0x6f0 [ 605.770892] netlink_rcv_skb+0x14b/0x430 [ 605.771321] ? genl_get_cmd+0x480/0x480 [ 605.771739] ? netlink_ack+0xa60/0xa60 [ 605.772148] ? netlink_deliver_tap+0x1b2/0xc30 [ 605.772625] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 605.773141] ? is_vmalloc_addr+0x7b/0xb0 [ 605.773575] genl_rcv+0x24/0x40 [ 605.773928] netlink_unicast+0x53a/0x7e0 [ 605.774361] ? netlink_attachskb+0x870/0x870 [ 605.774826] ? __virt_addr_valid+0xe9/0x310 [ 605.775290] netlink_sendmsg+0x904/0xdf0 [ 605.775721] ? netlink_unicast+0x7e0/0x7e0 [ 605.776171] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.776744] ? netlink_unicast+0x7e0/0x7e0 [ 605.777185] sock_sendmsg+0x150/0x190 [ 605.777591] ____sys_sendmsg+0x709/0x870 [ 605.778033] ? kernel_sendmsg+0x50/0x50 [ 605.778451] ? __ia32_sys_recvmmsg+0x260/0x260 [ 605.778936] ? lock_release+0x3b2/0x6f0 [ 605.779350] ? __might_fault+0xd1/0x170 [ 605.779771] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 605.780324] ___sys_sendmsg+0xf3/0x170 [ 605.780735] ? sendmsg_copy_msghdr+0x160/0x160 [ 605.781224] ? __fget_files+0x2cd/0x4c0 [ 605.781639] ? lock_downgrade+0x6d0/0x6d0 [ 605.782097] ? lock_release+0x3b2/0x6f0 [ 605.782514] ? ksys_write+0x212/0x250 [ 605.782922] ? __fget_files+0x2ef/0x4c0 [ 605.783339] ? __fget_light+0xea/0x280 [ 605.783744] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 605.784316] __sys_sendmsg+0xe5/0x1b0 [ 605.784723] ? __sys_sendmsg_sock+0x30/0x30 [ 605.785176] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 605.785763] ? syscall_enter_from_user_mode+0x1d/0x50 [ 605.786324] do_syscall_64+0x3b/0x90 [ 605.786722] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 605.787266] RIP: 0033:0x7f71b6669b19 [ 605.787652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 605.789555] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.790365] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 605.791115] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 605.791861] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 605.792605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.793356] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 605.794122] 15:15:13 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:13 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:13 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:13 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 9) 15:15:13 executing program 3: r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x6, &(0x7f0000000880)=[{&(0x7f0000000540)="50b1f5727ada76495303bbfea134989c06bd5110fdeec72d3b38194a68c44da47bb7a51f7b31c271e715fac9142c7bd1f2417f9e0e4a08aeca7f9472ec8cf58da72818173176a972250959a12b4c87ba232337525c99c05393a842450d9cd8696a96d215534219b33d4c84bce70358d2a51508b85cd653cc3848f66766492c7751bee4de158e", 0x86, 0x1}, {&(0x7f0000000600)="51d9ec11e8b2fa4280a0abe3e6828385aaf84e8e58134d7b8bcc2b4359736cdb46d86a1fa61f7aef3b9d9900464dce8ecaac95b6bb06de9ced10fd14d526708a10efc46cdda3b48f09a6ba56e5dc359331c88855", 0x54, 0x7fff}, {&(0x7f0000000940)="261e5f8dd895651b402bcc299dbb523f4cc75f6067214ecb", 0x18, 0x2}, {&(0x7f00000006c0)="d1debb7d", 0x4}, {&(0x7f0000000700)="3e53bc2ff67767914a69b95499c681716f949647a303bfa2a09f69c2ef0de782fe1a6aeca5e48ddfa1b7293ee02fb72d588e0110cab829d2ba610216e6a7e378c0b0a5e6c25666521899f784ff5883cb1a90793a08424ff9e274d14748e893a7edc677f73d559d7b11f1b66859cfb8104939c0c242e803d3698ac23893767d9143edfa1531481ac5b460ac12682a0c78e76bea0fc97a42cc45514f3e7f26e9e31f81ba3c622ce99edf7e94af99c5", 0xae, 0xc3d0}, {&(0x7f00000007c0)="4ca896e99fed4727ed85ff2c93e86411b2510471e4070ddcacbbd93308c964e6480ac02a1694b085c797aeaafef5a708a30ce7e706031cb3a7206ce4ef0d0851665988be77d0fce8c5833004fcac9fe92ab766035d1d1fd087737a96df51d92847667bf4478bb691b3de7308284211f575d06b3ace0a2011559c61f923a8a92280ea5d3b34d89f0df2c90203738cfe0dafa5b9e2cc8c0ffe10", 0x99}], 0x0, &(0x7f0000000100)={[], [{@fowner_gt}, {@obj_role={'obj_role', 0x3d, 'nfs\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "1e72251008c1fdab246c33fe298e8d00a5ea68d9e217859f899e54333776a1660869ef2b267d447014af336ff0b81830089cb9297cabffe1356ef01f54140816"}, 0x48, 0xfffffffffffffffb) keyctl$describe(0x11, r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = syz_io_uring_complete(0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x3}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2005}, 0x4001) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000980)={@desc={0x1, 0x0, @desc3}, 0x4, r1, '\x00', @auto=[0x2d, 0x32, 0x3a, 0x29]}) syz_mount_image$nfs(&(0x7f0000001ec0), &(0x7f0000001f00)='./file1\x00', 0x0, 0x2, &(0x7f0000002340)=[{&(0x7f0000001f40)="05", 0x1, 0x61}, {0x0}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="cb6dfcac8350bf23eea2c21d306f226e4ef678cba9da2b94591c4ff47b8752b6a812507a7e01dba814d1849dd3085df72acd57affef93a39b52db9531ca93b22a3e55e1b661b622a8e3ff8df7f40d66fa81552bfad6bf72764c107b51882f8aa3185e1c8d1aeac16f357a69c426e12173f551de10ca9aa1481eb1cba32f9eb9c54f5c6bb14f4f036c16b3a7eaa32519bc70ea392e359813dfb8fcd8c22187edd6a1fb83935b61f86a76ca0ab701586ffb1036eb3a0fe5008b06b79cd091c91f907bbd0566f058628ee2f6ed4a75b5fd42db78abfed6000"/225]) openat2(r2, &(0x7f0000000b40)='./file2\x00', &(0x7f0000000b80)={0x200000, 0x0, 0x4}, 0x18) r4 = syz_open_dev$vcsu(&(0x7f0000000140), 0x3, 0x80000) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x1c0, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_MODES_OURS={0x1a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x100, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')+{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'smackfshat'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'obj_role'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xf0,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@\\-$.-#-#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '**\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe01}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'vfat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6b4cba2f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "91fefde0c8488ac4b0a45a98a3665d75896bae0a189b2253b2686b3f5277f56ced895754bc62a95eaf0f95a3521fb85c41f049708d0ac723a153f09cbd9783ccbdf66d566414d5dda24f6944395f1d54ff0f58ba85279eadf91be0d4a776441e42042cb922e36b95141a3bf61770b4c2ee932a2af7dac12dad75385639db0f214920be66e9d97197edfcc1a0aec535204349dcc085"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x801}, 0x41) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$instantiate(0xc, r1, &(0x7f0000000bc0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', ':%', 0x20, 0x2}, 0x2c, r1) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) read(r5, &(0x7f0000000240)=""/157, 0x9d) [ 617.136673] loop3: detected capacity change from 0 to 195 [ 617.145940] FAT-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value 15:15:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:13 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 617.180135] FAULT_INJECTION: forcing a failure. [ 617.180135] name failslab, interval 1, probability 0, space 0, times 0 [ 617.181335] CPU: 0 PID: 6053 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 617.182259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 617.183478] Call Trace: [ 617.183742] [ 617.183981] dump_stack_lvl+0x8b/0xb3 [ 617.184402] should_fail.cold+0x5/0xa [ 617.184824] ? create_object.isra.0+0x3a/0xa20 [ 617.185338] should_failslab+0x5/0x10 [ 617.185769] kmem_cache_alloc+0x5b/0x480 [ 617.186232] create_object.isra.0+0x3a/0xa20 [ 617.186730] ? kasan_unpoison+0x23/0x50 [ 617.187176] __kmalloc+0x1ed/0x330 [ 617.187571] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 617.188269] genl_family_rcv_msg_doit+0xda/0x330 [ 617.188798] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 617.189518] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.190142] ? cap_capable+0x1eb/0x250 [ 617.190571] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.191163] ? security_capable+0x95/0xc0 [ 617.191566] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.192175] ? ns_capable+0xd9/0x100 [ 617.192601] genl_rcv_msg+0x33c/0x5a0 [ 617.193021] ? genl_get_cmd+0x480/0x480 [ 617.193456] ? nl80211_set_channel+0x70/0x70 [ 617.193945] ? lock_release+0x6f0/0x6f0 [ 617.194405] netlink_rcv_skb+0x14b/0x430 [ 617.194844] ? genl_get_cmd+0x480/0x480 [ 617.195287] ? netlink_ack+0xa60/0xa60 [ 617.195722] ? netlink_deliver_tap+0x1b2/0xc30 [ 617.196219] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 617.196757] ? is_vmalloc_addr+0x7b/0xb0 [ 617.197206] genl_rcv+0x24/0x40 [ 617.197565] netlink_unicast+0x53a/0x7e0 [ 617.198028] ? netlink_attachskb+0x870/0x870 [ 617.198517] ? __virt_addr_valid+0xe9/0x310 [ 617.198998] netlink_sendmsg+0x904/0xdf0 [ 617.199398] ? netlink_unicast+0x7e0/0x7e0 [ 617.199877] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.200478] ? netlink_unicast+0x7e0/0x7e0 [ 617.200941] sock_sendmsg+0x150/0x190 [ 617.201362] ____sys_sendmsg+0x709/0x870 [ 617.201811] ? kernel_sendmsg+0x50/0x50 [ 617.202255] ? __ia32_sys_recvmmsg+0x260/0x260 [ 617.202763] ? lock_release+0x3b2/0x6f0 [ 617.203199] ? __might_fault+0xd1/0x170 [ 617.203642] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 617.204213] ___sys_sendmsg+0xf3/0x170 [ 617.204650] ? sendmsg_copy_msghdr+0x160/0x160 [ 617.205154] ? __fget_files+0x2cd/0x4c0 [ 617.205589] ? lock_downgrade+0x6d0/0x6d0 [ 617.205999] ? lock_release+0x3b2/0x6f0 [ 617.206437] ? ksys_write+0x212/0x250 [ 617.206822] ? __fget_files+0x2ef/0x4c0 [ 617.207255] ? __fget_light+0xea/0x280 [ 617.207689] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 617.208299] __sys_sendmsg+0xe5/0x1b0 [ 617.208724] ? __sys_sendmsg_sock+0x30/0x30 [ 617.209199] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 617.209801] ? syscall_enter_from_user_mode+0x1d/0x50 [ 617.210386] do_syscall_64+0x3b/0x90 [ 617.210791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 617.211340] RIP: 0033:0x7f71b6669b19 [ 617.211729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 617.213684] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.214526] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 617.215312] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 617.215999] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 617.216778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.217556] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 617.218371] [ 617.223106] nfs: Unknown parameter 'mP#0o"nNx˩+YO{RPz~ۨф]*W:9-S;"^fb*?@oRk'd1ѮWBn?U 2Tƻ6k:~2QY' 15:15:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:14 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 617.970572] loop3: detected capacity change from 0 to 195 [ 617.975649] FAT-fs (loop3): Unrecognized mount option "fowner>00000000000000000000" or missing value 15:15:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendfile(r0, r2, &(0x7f0000000180)=0x401, 0x8) write(r1, &(0x7f0000000040)="d5e6dc2aa197baa4e54cb7a0c0e44e3409da60a7ac734e074147042dbf695c7c6dc972974d32bdb7d16c762d60488ce8c339bc7600c241909df57f230122c008e1c3c2e8300ca7f02881be529638f10a38c63bc2486ab377529a872fe62681537bc31fa1cd964383a2c81f2c15fad60abf9fd11c4b00"/132, 0x84) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000100)={0xba, 0x20, 0x3, 0x401}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x3ff) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000340)="1e67cb67a077751b5a", 0x9}], 0x1) r3 = syz_io_uring_complete(0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000200)) fcntl$setstatus(r3, 0x4, 0x40000) r4 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r4}], 0x1, 0x0) pwrite64(r4, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000001c0)) 15:15:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:30 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 10) 15:15:30 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 633.540251] FAULT_INJECTION: forcing a failure. [ 633.540251] name failslab, interval 1, probability 0, space 0, times 0 [ 633.542801] CPU: 1 PID: 6089 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 633.544516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 633.546893] Call Trace: [ 633.547447] [ 633.547926] dump_stack_lvl+0x8b/0xb3 [ 633.548755] should_fail.cold+0x5/0xa [ 633.549578] ? __alloc_skb+0x211/0x340 [ 633.550415] should_failslab+0x5/0x10 [ 633.551238] kmem_cache_alloc_node+0x55/0x490 [ 633.552184] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 633.553613] __alloc_skb+0x211/0x340 [ 633.554432] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 633.555601] netlink_ack+0x1f0/0xa60 [ 633.556395] ? nl80211_set_channel+0x70/0x70 [ 633.557341] ? netlink_sendmsg+0xdf0/0xdf0 [ 633.558240] ? lock_release+0x6f0/0x6f0 [ 633.559112] netlink_rcv_skb+0x348/0x430 [ 633.559972] ? genl_get_cmd+0x480/0x480 [ 633.560826] ? netlink_ack+0xa60/0xa60 [ 633.561664] ? netlink_deliver_tap+0x1b2/0xc30 [ 633.562645] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 633.563713] ? is_vmalloc_addr+0x7b/0xb0 [ 633.564609] genl_rcv+0x24/0x40 [ 633.565317] netlink_unicast+0x53a/0x7e0 [ 633.566193] ? netlink_attachskb+0x870/0x870 [ 633.567134] ? __virt_addr_valid+0xe9/0x310 [ 633.568274] netlink_sendmsg+0x904/0xdf0 [ 633.569159] ? netlink_unicast+0x7e0/0x7e0 [ 633.570285] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 633.571466] ? netlink_unicast+0x7e0/0x7e0 [ 633.572368] sock_sendmsg+0x150/0x190 [ 633.573182] ____sys_sendmsg+0x709/0x870 [ 633.574222] ? kernel_sendmsg+0x50/0x50 [ 633.575074] ? __ia32_sys_recvmmsg+0x260/0x260 [ 633.576057] ? lock_release+0x3b2/0x6f0 [ 633.576900] ? __might_fault+0xd1/0x170 [ 633.577763] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 633.578896] ___sys_sendmsg+0xf3/0x170 [ 633.579746] ? sendmsg_copy_msghdr+0x160/0x160 [ 633.580935] ? __fget_files+0x2cd/0x4c0 [ 633.581786] ? lock_downgrade+0x6d0/0x6d0 [ 633.582742] ? lock_release+0x3b2/0x6f0 [ 633.583592] ? ksys_write+0x212/0x250 [ 633.584424] ? __fget_files+0x2ef/0x4c0 [ 633.585280] ? __fget_light+0xea/0x280 [ 633.586108] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 633.587293] __sys_sendmsg+0xe5/0x1b0 [ 633.588107] ? __sys_sendmsg_sock+0x30/0x30 [ 633.589017] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 633.590202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 633.591309] do_syscall_64+0x3b/0x90 [ 633.592110] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 633.593193] RIP: 0033:0x7f71b6669b19 [ 633.593973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.597810] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 633.599408] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 633.600896] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 633.602404] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.603894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 633.605373] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 633.606900] 15:15:30 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:30 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:30 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000380)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:43 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:43 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:43 executing program 3: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '#\x00\b', 0x14, 0x3c, 0x0, @empty, @local, {[@srh={0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 15:15:43 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) 15:15:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 11) 15:15:43 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) [ 646.623507] FAULT_INJECTION: forcing a failure. [ 646.623507] name failslab, interval 1, probability 0, space 0, times 0 [ 646.624831] CPU: 1 PID: 6143 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 646.625716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 646.626930] Call Trace: [ 646.627210] [ 646.627456] dump_stack_lvl+0x8b/0xb3 [ 646.627865] should_fail.cold+0x5/0xa [ 646.628266] ? create_object.isra.0+0x3a/0xa20 [ 646.628747] should_failslab+0x5/0x10 [ 646.629144] kmem_cache_alloc+0x5b/0x480 [ 646.629583] create_object.isra.0+0x3a/0xa20 [ 646.630037] ? kasan_unpoison+0x23/0x50 [ 646.630465] kmem_cache_alloc_node+0x248/0x490 [ 646.630939] __alloc_skb+0x211/0x340 [ 646.631326] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 646.631898] netlink_ack+0x1f0/0xa60 [ 646.632291] ? nl80211_set_channel+0x70/0x70 [ 646.632749] ? netlink_sendmsg+0xdf0/0xdf0 [ 646.633181] ? lock_release+0x6f0/0x6f0 [ 646.633594] netlink_rcv_skb+0x348/0x430 [ 646.634015] ? genl_get_cmd+0x480/0x480 [ 646.634421] ? netlink_ack+0xa60/0xa60 [ 646.634845] ? netlink_deliver_tap+0x1b2/0xc30 [ 646.635310] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 646.635831] ? is_vmalloc_addr+0x7b/0xb0 [ 646.636267] genl_rcv+0x24/0x40 [ 646.636610] netlink_unicast+0x53a/0x7e0 [ 646.637033] ? netlink_attachskb+0x870/0x870 [ 646.637484] ? __virt_addr_valid+0xe9/0x310 [ 646.637942] netlink_sendmsg+0x904/0xdf0 [ 646.638361] ? netlink_unicast+0x7e0/0x7e0 [ 646.638816] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 646.639380] ? netlink_unicast+0x7e0/0x7e0 [ 646.639815] sock_sendmsg+0x150/0x190 [ 646.640208] ____sys_sendmsg+0x709/0x870 [ 646.640626] ? kernel_sendmsg+0x50/0x50 [ 646.641034] ? __ia32_sys_recvmmsg+0x260/0x260 [ 646.641515] ? lock_release+0x3b2/0x6f0 [ 646.641928] ? __might_fault+0xd1/0x170 [ 646.642338] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 646.642899] ___sys_sendmsg+0xf3/0x170 [ 646.643307] ? sendmsg_copy_msghdr+0x160/0x160 [ 646.643797] ? __fget_files+0x2cd/0x4c0 [ 646.644200] ? lock_downgrade+0x6d0/0x6d0 [ 646.644624] ? lock_release+0x3b2/0x6f0 [ 646.645030] ? ksys_write+0x212/0x250 [ 646.645441] ? __fget_files+0x2ef/0x4c0 [ 646.645855] ? __fget_light+0xea/0x280 [ 646.646272] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 646.646856] __sys_sendmsg+0xe5/0x1b0 [ 646.647253] ? __sys_sendmsg_sock+0x30/0x30 [ 646.647699] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 646.648275] ? syscall_enter_from_user_mode+0x1d/0x50 [ 646.648809] do_syscall_64+0x3b/0x90 [ 646.649199] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 646.649730] RIP: 0033:0x7f71b6669b19 [ 646.650109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.651986] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.652755] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 646.653486] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 646.654208] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.654945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.655666] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 646.656401] 15:15:43 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:15:54 executing program 3: syz_mount_image$tmpfs(&(0x7f00000002c0), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x200200c, &(0x7f0000000000)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, 'defcontext'}, 0x22}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) 15:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 12) 15:15:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:54 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) 15:15:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 657.889267] FAULT_INJECTION: forcing a failure. [ 657.889267] name failslab, interval 1, probability 0, space 0, times 0 [ 657.891975] CPU: 0 PID: 6163 Comm: syz-executor.5 Not tainted 5.16.0-rc4-next-20211208 #1 [ 657.893807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 657.896311] Call Trace: [ 657.896891] [ 657.897380] dump_stack_lvl+0x8b/0xb3 [ 657.898267] should_fail.cold+0x5/0xa [ 657.899147] should_failslab+0x5/0x10 [ 657.900017] __kmalloc_node_track_caller+0x7e/0x330 [ 657.901121] ? netlink_ack+0x1f0/0xa60 [ 657.901999] __alloc_skb+0xe3/0x340 [ 657.902852] netlink_ack+0x1f0/0xa60 [ 657.903680] ? nl80211_set_channel+0x70/0x70 [ 657.904672] ? netlink_sendmsg+0xdf0/0xdf0 [ 657.905623] ? lock_release+0x6f0/0x6f0 [ 657.906534] netlink_rcv_skb+0x348/0x430 [ 657.907459] ? genl_get_cmd+0x480/0x480 [ 657.908364] ? netlink_ack+0xa60/0xa60 [ 657.909252] ? netlink_deliver_tap+0x1b2/0xc30 [ 657.910266] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 657.911399] ? is_vmalloc_addr+0x7b/0xb0 [ 657.912319] genl_rcv+0x24/0x40 [ 657.913067] netlink_unicast+0x53a/0x7e0 [ 657.913968] ? netlink_attachskb+0x870/0x870 [ 657.914970] ? __virt_addr_valid+0xe9/0x310 [ 657.915959] netlink_sendmsg+0x904/0xdf0 [ 657.916880] ? netlink_unicast+0x7e0/0x7e0 [ 657.917834] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 657.919067] ? netlink_unicast+0x7e0/0x7e0 [ 657.920018] sock_sendmsg+0x150/0x190 [ 657.920874] ____sys_sendmsg+0x709/0x870 [ 657.921787] ? kernel_sendmsg+0x50/0x50 [ 657.922684] ? __ia32_sys_recvmmsg+0x260/0x260 [ 657.923712] ? lock_release+0x3b2/0x6f0 [ 657.924605] ? __might_fault+0xd1/0x170 [ 657.925495] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 657.926696] ___sys_sendmsg+0xf3/0x170 [ 657.927589] ? sendmsg_copy_msghdr+0x160/0x160 [ 657.928616] ? __fget_files+0x2cd/0x4c0 [ 657.929504] ? lock_downgrade+0x6d0/0x6d0 [ 657.930426] ? lock_release+0x3b2/0x6f0 [ 657.931328] ? ksys_write+0x212/0x250 [ 657.932204] ? __fget_files+0x2ef/0x4c0 [ 657.933104] ? __fget_light+0xea/0x280 [ 657.933971] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 657.935225] __sys_sendmsg+0xe5/0x1b0 [ 657.936089] ? __sys_sendmsg_sock+0x30/0x30 [ 657.937050] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 657.938301] ? syscall_enter_from_user_mode+0x1d/0x50 [ 657.939467] do_syscall_64+0x3b/0x90 [ 657.940320] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 657.941457] RIP: 0033:0x7f71b6669b19 [ 657.942292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.946366] RSP: 002b:00007f71b3bdf188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.948062] RAX: ffffffffffffffda RBX: 00007f71b677cf60 RCX: 00007f71b6669b19 [ 657.949634] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 657.951241] RBP: 00007f71b3bdf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.952817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.954392] R13: 00007ffe085fdbcf R14: 00007f71b3bdf300 R15: 0000000000022000 [ 657.955999] 15:15:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x200900, 0x100}, 0x18) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00') 15:15:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:54 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 3: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) 15:15:54 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:15:54 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 1) 15:15:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 658.045855] FAULT_INJECTION: forcing a failure. [ 658.045855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.048498] CPU: 0 PID: 6182 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 658.050310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 658.052819] Call Trace: [ 658.053387] [ 658.053889] dump_stack_lvl+0x8b/0xb3 [ 658.054761] should_fail.cold+0x5/0xa [ 658.055620] _copy_from_user+0x2e/0x170 [ 658.056505] __copy_msghdr_from_user+0x91/0x4b0 [ 658.057535] ? __ia32_sys_shutdown+0x70/0x70 [ 658.058502] ? lock_chain_count+0x20/0x20 [ 658.059432] ? __lock_acquire+0xbac/0x5b70 [ 658.060371] sendmsg_copy_msghdr+0xa1/0x160 [ 658.061324] ? __ia32_sys_recvmmsg+0x260/0x260 [ 658.062334] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 658.063532] ___sys_sendmsg+0xc6/0x170 [ 658.064395] ? sendmsg_copy_msghdr+0x160/0x160 [ 658.065399] ? lock_release+0x3b2/0x6f0 [ 658.066275] ? __fget_files+0x2cd/0x4c0 [ 658.067160] ? lock_downgrade+0x6d0/0x6d0 [ 658.068090] ? __fget_files+0x2ef/0x4c0 [ 658.068986] ? __fget_light+0xea/0x280 [ 658.069846] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 658.071083] __sys_sendmmsg+0x195/0x470 [ 658.071975] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 658.072918] ? lock_is_held_type+0xd7/0x130 [ 658.073884] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 658.074997] ? wait_for_completion_io+0x270/0x270 [ 658.076067] ? lock_is_held_type+0xd7/0x130 [ 658.077018] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 658.078226] ? vfs_write+0x188/0xae0 [ 658.079069] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 658.080292] ? fput+0x2a/0x50 [ 658.081015] __x64_sys_sendmmsg+0x99/0x100 [ 658.081952] ? syscall_enter_from_user_mode+0x1d/0x50 [ 658.083163] do_syscall_64+0x3b/0x90 [ 658.084008] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 658.085145] RIP: 0033:0x7f6eeb626b19 [ 658.085961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.090011] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 658.091698] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 658.093262] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 658.094843] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 658.096424] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 658.097992] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 658.099599] 15:15:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) (fail_nth: 13) 15:15:54 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:15:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) 15:15:54 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) 15:16:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 2) 15:16:07 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:07 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}]]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x400800, 0xa) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)={0x3a8, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf2, 0x3, "b119ae71ba8b356a67b25337bfa38668581fc18886631a27fc90131492ac80077ad5256e155d78d7e9a49ee91376b38d4bf977e8acec57245811d8bcf0a98a82d76866182ac8c6cb555bfb016c3dcea3ddfba031d3b40f63f6368dfbd12a251f13ac160d35f625e742d00dd812688c1395d2f0d2c41ddba1c1817ee0e5cd96e6edd5295e0eebb8883617175072c6045d2ed4834c01066538096c6aa962e68d2fa1f85483906cd805f4cca12fae7080ab1564c221a5d11312f3637a649a31b71634370dcdc8a5c3f37baba7b742c3e7ce50093e4d88fbdfd44e2fe2b50f743ca450c189891f55f9651ac344c92384"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xff, @local, 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8, @private1, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd2e0b1ae}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffff80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet6_opts(r3, 0x29, 0x0, 0x0, &(0x7f0000000080)) 15:16:07 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 670.669066] FAULT_INJECTION: forcing a failure. [ 670.669066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.671626] CPU: 0 PID: 6219 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 670.673336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 670.675719] Call Trace: [ 670.676260] [ 670.676736] dump_stack_lvl+0x8b/0xb3 [ 670.677553] should_fail.cold+0x5/0xa [ 670.678366] _copy_from_user+0x2e/0x170 [ 670.679220] move_addr_to_kernel.part.0+0x31/0x110 [ 670.680252] __copy_msghdr_from_user+0x3dd/0x4b0 [ 670.681270] ? __ia32_sys_shutdown+0x70/0x70 [ 670.682220] ? __lock_acquire+0xbac/0x5b70 [ 670.683151] sendmsg_copy_msghdr+0xa1/0x160 [ 670.684065] ? __ia32_sys_recvmmsg+0x260/0x260 [ 670.685037] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 670.686165] ___sys_sendmsg+0xc6/0x170 [ 670.687000] ? sendmsg_copy_msghdr+0x160/0x160 [ 670.687972] ? lock_release+0x3b2/0x6f0 [ 670.688811] ? __fget_files+0x2cd/0x4c0 [ 670.689652] ? lock_downgrade+0x6d0/0x6d0 [ 670.690539] ? __fget_files+0x2ef/0x4c0 [ 670.691404] ? __fget_light+0xea/0x280 [ 670.692220] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 670.693402] __sys_sendmmsg+0x195/0x470 [ 670.694419] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 670.695363] ? lock_is_held_type+0xd7/0x130 [ 670.696461] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 670.697694] ? wait_for_completion_io+0x270/0x270 [ 670.698705] ? lock_is_held_type+0xd7/0x130 [ 670.699627] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 670.700760] ? vfs_write+0x188/0xae0 [ 670.701528] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 670.702662] ? fput+0x2a/0x50 [ 670.703343] __x64_sys_sendmmsg+0x99/0x100 [ 670.704220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 670.705278] do_syscall_64+0x3b/0x90 [ 670.706053] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 670.707102] RIP: 0033:0x7f6eeb626b19 [ 670.707852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 670.711560] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 670.713095] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 670.714546] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 670.716010] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 670.717444] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 670.718902] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 670.720373] 15:16:07 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:07 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x0) 15:16:07 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 1) 15:16:22 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 3) 15:16:22 executing program 3: syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000003b80)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) 15:16:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:22 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:22 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:22 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) [ 686.196163] FAULT_INJECTION: forcing a failure. [ 686.196163] name failslab, interval 1, probability 0, space 0, times 0 [ 686.197800] CPU: 0 PID: 6263 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 686.198689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 686.199911] Call Trace: [ 686.200199] [ 686.200437] dump_stack_lvl+0x8b/0xb3 [ 686.200859] should_fail.cold+0x5/0xa [ 686.201279] ? __alloc_skb+0x211/0x340 [ 686.201702] should_failslab+0x5/0x10 [ 686.202120] kmem_cache_alloc_node+0x55/0x490 [ 686.202609] __alloc_skb+0x211/0x340 [ 686.203013] alloc_skb_with_frags+0x92/0x690 [ 686.203499] sock_alloc_send_pskb+0x7ab/0x930 [ 686.203994] ? proto_register+0x990/0x990 [ 686.204439] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.204999] ? __lock_acquire+0x164e/0x5b70 [ 686.205466] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 686.206022] ? ip6_mtu+0x189/0x340 [ 686.206403] ? lock_downgrade+0x6d0/0x6d0 [ 686.206848] ? ip_frag_init+0x350/0x350 [ 686.207312] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 686.207811] ? ip6_mtu+0x1b0/0x340 [ 686.208186] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 686.208781] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.209366] ? ip6_setup_cork+0xfcb/0x1810 [ 686.209831] ip6_append_data+0x1e7/0x330 [ 686.210259] ? ip_frag_init+0x350/0x350 [ 686.210688] ? ip_frag_init+0x350/0x350 [ 686.211124] udpv6_sendmsg+0x19e4/0x2890 [ 686.211556] ? ip_frag_init+0x350/0x350 [ 686.211986] ? udp_v6_push_pending_frames+0x360/0x360 [ 686.212566] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.213140] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.213724] ? release_sock+0x1b/0x1b0 [ 686.214137] ? reacquire_held_locks+0x229/0x4d0 [ 686.214655] ? release_sock+0x1b/0x1b0 [ 686.215124] ? lock_release+0x3b2/0x6f0 [ 686.215567] ? inet_autobind+0x136/0x190 [ 686.216016] ? lock_downgrade+0x6d0/0x6d0 [ 686.216481] ? __local_bh_enable_ip+0xa0/0x120 [ 686.216982] ? lockdep_hardirqs_on+0x79/0x100 [ 686.217476] ? inet_autobind+0x136/0x190 [ 686.217922] ? __local_bh_enable_ip+0xa0/0x120 [ 686.218428] ? inet_autobind+0x13b/0x190 [ 686.218879] ? udp_v6_push_pending_frames+0x360/0x360 [ 686.219465] ? inet6_sendmsg+0x4a/0x140 [ 686.219914] inet6_sendmsg+0xfd/0x140 [ 686.220331] ? inet6_compat_ioctl+0x310/0x310 [ 686.220825] sock_sendmsg+0xee/0x190 [ 686.221241] ____sys_sendmsg+0x334/0x870 [ 686.221693] ? kernel_sendmsg+0x50/0x50 [ 686.222131] ? __ia32_sys_recvmmsg+0x260/0x260 [ 686.222650] ___sys_sendmsg+0xf3/0x170 [ 686.223093] ? sendmsg_copy_msghdr+0x160/0x160 [ 686.223611] ? lock_release+0x3b2/0x6f0 [ 686.224054] ? __fget_files+0x2cd/0x4c0 [ 686.224495] ? lock_downgrade+0x6d0/0x6d0 [ 686.224963] ? __fget_files+0x2ef/0x4c0 [ 686.225408] ? __fget_light+0xea/0x280 [ 686.225830] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 686.226443] __sys_sendmmsg+0x195/0x470 [ 686.226885] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 686.227377] ? lock_is_held_type+0xd7/0x130 [ 686.227863] ? wait_for_completion_io+0x270/0x270 [ 686.228409] ? lock_is_held_type+0xd7/0x130 [ 686.228887] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.229497] ? vfs_write+0x188/0xae0 [ 686.229914] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 686.230522] ? fput+0x2a/0x50 [ 686.230877] __x64_sys_sendmmsg+0x99/0x100 [ 686.231359] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.231923] do_syscall_64+0x3b/0x90 [ 686.232354] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.232924] RIP: 0033:0x7f6eeb626b19 [ 686.233335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.235385] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 686.236219] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 686.237004] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 686.237780] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.238563] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 686.239351] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 686.240146] [ 686.241243] FAULT_INJECTION: forcing a failure. [ 686.241243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.242534] CPU: 0 PID: 6264 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 686.243455] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 686.244702] Call Trace: [ 686.244986] [ 686.245232] dump_stack_lvl+0x8b/0xb3 [ 686.245652] should_fail.cold+0x5/0xa [ 686.246082] _copy_from_user+0x2e/0x170 [ 686.246530] __copy_msghdr_from_user+0x91/0x4b0 [ 686.247047] ? __ia32_sys_shutdown+0x70/0x70 [ 686.247555] ? __lock_acquire+0xbac/0x5b70 [ 686.248035] sendmsg_copy_msghdr+0xa1/0x160 [ 686.248517] ? __ia32_sys_recvmmsg+0x260/0x260 [ 686.249022] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 686.249615] ___sys_sendmsg+0xc6/0x170 [ 686.250052] ? sendmsg_copy_msghdr+0x160/0x160 [ 686.250555] ? lock_release+0x3b2/0x6f0 [ 686.250991] ? __fget_files+0x2cd/0x4c0 [ 686.251422] ? lock_downgrade+0x6d0/0x6d0 [ 686.251897] ? __fget_files+0x2ef/0x4c0 [ 686.252320] ? __fget_light+0xea/0x280 [ 686.252745] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 686.253359] __sys_sendmmsg+0x195/0x470 [ 686.253787] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 686.254270] ? lock_is_held_type+0xd7/0x130 [ 686.254753] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 686.255318] ? wait_for_completion_io+0x270/0x270 [ 686.255855] ? lock_is_held_type+0xd7/0x130 [ 686.256337] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 686.256939] ? vfs_write+0x188/0xae0 [ 686.257359] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 686.257969] ? fput+0x2a/0x50 [ 686.258321] __x64_sys_sendmmsg+0x99/0x100 [ 686.258792] ? syscall_enter_from_user_mode+0x1d/0x50 [ 686.259379] do_syscall_64+0x3b/0x90 [ 686.259804] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 686.260364] RIP: 0033:0x7f989a6cdb19 [ 686.260770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 686.262782] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 686.263644] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 686.264430] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 686.265230] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 686.266013] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 686.266800] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 686.267617] 15:16:23 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:35 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 3: epoll_create(0x4) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200), 0x8, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x2}) signalfd(r0, &(0x7f0000000000), 0x8) 15:16:35 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 4) 15:16:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 2) [ 698.431701] FAULT_INJECTION: forcing a failure. [ 698.431701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.432971] CPU: 0 PID: 6292 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 698.433813] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 698.434977] Call Trace: [ 698.435265] [ 698.435497] dump_stack_lvl+0x8b/0xb3 [ 698.435910] should_fail.cold+0x5/0xa [ 698.436311] _copy_from_user+0x2e/0x170 [ 698.436738] move_addr_to_kernel.part.0+0x31/0x110 [ 698.437262] __copy_msghdr_from_user+0x3dd/0x4b0 [ 698.437770] ? __ia32_sys_shutdown+0x70/0x70 [ 698.438264] ? __lock_acquire+0xbac/0x5b70 [ 698.438721] sendmsg_copy_msghdr+0xa1/0x160 [ 698.439177] ? __ia32_sys_recvmmsg+0x260/0x260 [ 698.439673] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.440236] ___sys_sendmsg+0xc6/0x170 [ 698.440646] ? sendmsg_copy_msghdr+0x160/0x160 [ 698.441123] ? lock_release+0x3b2/0x6f0 [ 698.441538] ? __fget_files+0x2cd/0x4c0 [ 698.441963] ? lock_downgrade+0x6d0/0x6d0 [ 698.442414] ? __fget_files+0x2ef/0x4c0 [ 698.442839] ? __fget_light+0xea/0x280 [ 698.443242] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 698.443843] __sys_sendmmsg+0x195/0x470 [ 698.444268] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 698.444715] ? lock_is_held_type+0xd7/0x130 [ 698.445174] ? __mutex_unlock_slowpath+0x15c/0x5e0 [ 698.445686] ? wait_for_completion_io+0x270/0x270 [ 698.446186] ? lock_is_held_type+0xd7/0x130 [ 698.446640] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.447211] ? vfs_write+0x188/0xae0 [ 698.447625] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 698.448195] ? fput+0x2a/0x50 [ 698.448537] __x64_sys_sendmmsg+0x99/0x100 [ 698.448987] ? syscall_enter_from_user_mode+0x1d/0x50 [ 698.449525] do_syscall_64+0x3b/0x90 [ 698.449932] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.450462] RIP: 0033:0x7f989a6cdb19 [ 698.450856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.452790] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 698.453587] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 698.454347] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 698.455088] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.455846] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 698.456587] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 698.456889] FAULT_INJECTION: forcing a failure. [ 698.456889] name failslab, interval 1, probability 0, space 0, times 0 [ 698.457355] [ 698.459940] CPU: 1 PID: 6297 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 698.461665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 698.464041] Call Trace: [ 698.464576] [ 698.465049] dump_stack_lvl+0x8b/0xb3 [ 698.465860] should_fail.cold+0x5/0xa [ 698.466669] ? create_object.isra.0+0x3a/0xa20 [ 698.467646] should_failslab+0x5/0x10 [ 698.468454] kmem_cache_alloc+0x5b/0x480 [ 698.469318] create_object.isra.0+0x3a/0xa20 [ 698.470241] ? kasan_unpoison+0x23/0x50 [ 698.471082] kmem_cache_alloc_node+0x248/0x490 [ 698.472057] __alloc_skb+0x211/0x340 [ 698.472846] alloc_skb_with_frags+0x92/0x690 [ 698.473790] sock_alloc_send_pskb+0x7ab/0x930 [ 698.474758] ? proto_register+0x990/0x990 [ 698.475640] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.476740] ? __lock_acquire+0x164e/0x5b70 [ 698.477645] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 698.478692] ? ip6_mtu+0x189/0x340 [ 698.479436] ? lock_downgrade+0x6d0/0x6d0 [ 698.480287] ? ip_frag_init+0x350/0x350 [ 698.481131] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 698.482091] ? ip6_mtu+0x1b0/0x340 [ 698.482822] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 698.483971] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.485104] ? ip6_setup_cork+0xfcb/0x1810 [ 698.485981] ip6_append_data+0x1e7/0x330 [ 698.486815] ? ip_frag_init+0x350/0x350 [ 698.487654] ? ip_frag_init+0x350/0x350 [ 698.488496] udpv6_sendmsg+0x19e4/0x2890 [ 698.489336] ? ip_frag_init+0x350/0x350 [ 698.490175] ? udp_v6_push_pending_frames+0x360/0x360 [ 698.491266] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.492351] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.493448] ? release_sock+0x1b/0x1b0 [ 698.494263] ? reacquire_held_locks+0x229/0x4d0 [ 698.495236] ? release_sock+0x1b/0x1b0 [ 698.496075] ? lock_release+0x3b2/0x6f0 [ 698.496886] ? inet_autobind+0x136/0x190 [ 698.497721] ? lock_downgrade+0x6d0/0x6d0 [ 698.498575] ? __local_bh_enable_ip+0xa0/0x120 [ 698.499531] ? lockdep_hardirqs_on+0x79/0x100 [ 698.500437] ? inet_autobind+0x136/0x190 [ 698.501265] ? __local_bh_enable_ip+0xa0/0x120 [ 698.502209] ? inet_autobind+0x13b/0x190 [ 698.503041] ? udp_v6_push_pending_frames+0x360/0x360 [ 698.504121] ? inet6_sendmsg+0x4a/0x140 [ 698.504942] inet6_sendmsg+0xfd/0x140 [ 698.505739] ? inet6_compat_ioctl+0x310/0x310 [ 698.506656] sock_sendmsg+0xee/0x190 [ 698.507443] ____sys_sendmsg+0x334/0x870 [ 698.508278] ? kernel_sendmsg+0x50/0x50 [ 698.509087] ? __ia32_sys_recvmmsg+0x260/0x260 [ 698.510048] ___sys_sendmsg+0xf3/0x170 [ 698.510879] ? sendmsg_copy_msghdr+0x160/0x160 [ 698.511823] ? lock_release+0x3b2/0x6f0 [ 698.512643] ? __fget_files+0x2cd/0x4c0 [ 698.513440] ? lock_downgrade+0x6d0/0x6d0 [ 698.514301] ? __fget_files+0x2ef/0x4c0 [ 698.515109] ? __fget_light+0xea/0x280 [ 698.515908] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 698.517022] __sys_sendmmsg+0x195/0x470 [ 698.517838] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 698.518703] ? lock_is_held_type+0xd7/0x130 [ 698.519597] ? wait_for_completion_io+0x270/0x270 [ 698.520575] ? lock_is_held_type+0xd7/0x130 [ 698.521447] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.522548] ? vfs_write+0x188/0xae0 [ 698.523330] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 698.524432] ? fput+0x2a/0x50 [ 698.525082] __x64_sys_sendmmsg+0x99/0x100 [ 698.525937] ? syscall_enter_from_user_mode+0x1d/0x50 [ 698.526971] do_syscall_64+0x3b/0x90 [ 698.527754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.528786] RIP: 0033:0x7f6eeb626b19 [ 698.529521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.533148] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 698.534644] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 698.536074] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 698.537476] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.538878] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 698.540297] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 698.541724] 15:16:35 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:35 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 3) 15:16:35 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 698.605330] FAULT_INJECTION: forcing a failure. [ 698.605330] name failslab, interval 1, probability 0, space 0, times 0 [ 698.607055] CPU: 0 PID: 6309 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 698.607926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 698.609118] Call Trace: [ 698.609383] [ 698.609623] dump_stack_lvl+0x8b/0xb3 [ 698.610038] should_fail.cold+0x5/0xa [ 698.610451] ? __alloc_skb+0x211/0x340 [ 698.610874] should_failslab+0x5/0x10 [ 698.611310] kmem_cache_alloc_node+0x55/0x490 [ 698.611790] __alloc_skb+0x211/0x340 [ 698.612186] alloc_skb_with_frags+0x92/0x690 [ 698.612682] sock_alloc_send_pskb+0x7ab/0x930 [ 698.613167] ? proto_register+0x990/0x990 [ 698.613620] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.614170] ? __lock_acquire+0x164e/0x5b70 [ 698.614636] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 698.615175] ? ip6_mtu+0x189/0x340 [ 698.615580] ? lock_downgrade+0x6d0/0x6d0 [ 698.616032] ? ip_frag_init+0x350/0x350 [ 698.616486] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 698.616994] ? ip6_mtu+0x1b0/0x340 [ 698.617378] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 698.617974] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.618579] ? ip6_setup_cork+0xfcb/0x1810 [ 698.619050] ip6_append_data+0x1e7/0x330 [ 698.619511] ? ip_frag_init+0x350/0x350 [ 698.619954] ? ip_frag_init+0x350/0x350 [ 698.620393] udpv6_sendmsg+0x19e4/0x2890 [ 698.620834] ? ip_frag_init+0x350/0x350 [ 698.621283] ? udp_v6_push_pending_frames+0x360/0x360 [ 698.621847] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.622427] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 698.622997] ? release_sock+0x1b/0x1b0 [ 698.623453] ? reacquire_held_locks+0x229/0x4d0 [ 698.623967] ? release_sock+0x1b/0x1b0 [ 698.624411] ? lock_release+0x3b2/0x6f0 [ 698.624850] ? inet_autobind+0x136/0x190 [ 698.625308] ? lock_downgrade+0x6d0/0x6d0 [ 698.625765] ? __local_bh_enable_ip+0xa0/0x120 [ 698.626267] ? lockdep_hardirqs_on+0x79/0x100 [ 698.626757] ? inet_autobind+0x136/0x190 [ 698.627198] ? __local_bh_enable_ip+0xa0/0x120 [ 698.627726] ? inet_autobind+0x13b/0x190 [ 698.628178] ? udp_v6_push_pending_frames+0x360/0x360 [ 698.628749] ? inet6_sendmsg+0x4a/0x140 [ 698.629179] inet6_sendmsg+0xfd/0x140 [ 698.629604] ? inet6_compat_ioctl+0x310/0x310 [ 698.630092] sock_sendmsg+0xee/0x190 [ 698.630503] ____sys_sendmsg+0x334/0x870 [ 698.630955] ? kernel_sendmsg+0x50/0x50 [ 698.631410] ? __ia32_sys_recvmmsg+0x260/0x260 [ 698.631927] ___sys_sendmsg+0xf3/0x170 [ 698.632354] ? sendmsg_copy_msghdr+0x160/0x160 [ 698.632856] ? lock_release+0x3b2/0x6f0 [ 698.633288] ? __fget_files+0x2cd/0x4c0 [ 698.633717] ? lock_downgrade+0x6d0/0x6d0 [ 698.634184] ? __fget_files+0x2ef/0x4c0 [ 698.634628] ? __fget_light+0xea/0x280 [ 698.635053] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 698.635676] __sys_sendmmsg+0x195/0x470 [ 698.636116] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 698.636591] ? lock_is_held_type+0xd7/0x130 [ 698.637072] ? wait_for_completion_io+0x270/0x270 [ 698.637610] ? lock_is_held_type+0xd7/0x130 [ 698.638097] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.638700] ? vfs_write+0x188/0xae0 [ 698.639107] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 698.639724] ? fput+0x2a/0x50 [ 698.640077] __x64_sys_sendmmsg+0x99/0x100 [ 698.640546] ? syscall_enter_from_user_mode+0x1d/0x50 [ 698.641107] do_syscall_64+0x3b/0x90 [ 698.641524] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.642095] RIP: 0033:0x7f989a6cdb19 [ 698.642495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.644511] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 698.645336] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 698.646111] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 698.646884] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.647680] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 698.648455] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 698.649243] 15:16:35 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:35 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 698.712915] FAULT_INJECTION: forcing a failure. [ 698.712915] name failslab, interval 1, probability 0, space 0, times 0 [ 698.714402] CPU: 0 PID: 6319 Comm: syz-executor.4 Not tainted 5.16.0-rc4-next-20211208 #1 [ 698.715287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 698.716509] Call Trace: [ 698.716781] [ 698.717013] dump_stack_lvl+0x8b/0xb3 [ 698.717431] should_fail.cold+0x5/0xa [ 698.717846] should_failslab+0x5/0x10 [ 698.718257] kmem_cache_alloc_bulk+0x47/0x670 [ 698.718738] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.719346] ? percpu_counter_add_batch+0xb4/0x170 [ 698.719869] io_submit_sqes.cold+0x20b/0x435 [ 698.720350] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 698.720883] ? find_held_lock+0x2c/0x110 [ 698.721310] ? io_async_task_func+0x560/0x560 [ 698.721797] ? lock_release+0x3b2/0x6f0 [ 698.722223] ? __do_sys_io_uring_enter+0x359/0x1e80 [ 698.722774] ? lock_downgrade+0x6d0/0x6d0 [ 698.723208] ? __fget_files+0x2ef/0x4c0 [ 698.723672] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 698.724223] __do_sys_io_uring_enter+0xee0/0x1e80 [ 698.724766] ? io_submit_sqes+0x8fc0/0x8fc0 [ 698.725243] ? wait_for_completion_io+0x270/0x270 [ 698.725788] ? lock_is_held_type+0xd7/0x130 [ 698.726262] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 698.726866] ? vfs_write+0x188/0xae0 [ 698.727291] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 698.727898] ? fput+0x2a/0x50 [ 698.728254] ? syscall_enter_from_user_mode+0x1d/0x50 [ 698.728824] do_syscall_64+0x3b/0x90 [ 698.729233] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 698.729800] RIP: 0033:0x7f517a696b19 [ 698.730204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 698.732257] RSP: 002b:00007f5177c0c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 698.733090] RAX: ffffffffffffffda RBX: 00007f517a7a9f60 RCX: 00007f517a696b19 [ 698.733867] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 698.734649] RBP: 00007f5177c0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 698.735444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.736227] R13: 00007ffc34bae36f R14: 00007f5177c0c300 R15: 0000000000022000 [ 698.737026] 15:16:35 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGPTPEER(r0, 0xc0189436, 0xbffffffffffff172) 15:16:35 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:16:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:16:51 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 5) 15:16:51 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 4) 15:16:51 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000580)={{r1}, r2, 0x12, @inherit={0x60, &(0x7f0000000080)={0x0, 0x3, 0x40, 0x100000000, {0x10, 0x7, 0x6, 0x1, 0x5}, [0x80000000, 0x7f, 0x3f]}}, @devid}) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) pwrite64(r3, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) getsockname$netlink(r3, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802000001000001010053500701be", 0x27, 0xb800}], 0x0, &(0x7f0000000040)=ANY=[]) 15:16:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:51 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:51 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) [ 714.587644] FAULT_INJECTION: forcing a failure. [ 714.587644] name failslab, interval 1, probability 0, space 0, times 0 [ 714.588853] CPU: 1 PID: 6343 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 714.589638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 714.590827] Call Trace: [ 714.591099] [ 714.591337] dump_stack_lvl+0x8b/0xb3 [ 714.591778] should_fail.cold+0x5/0xa [ 714.592179] should_failslab+0x5/0x10 [ 714.592589] __kmalloc_node_track_caller+0x7e/0x330 [ 714.593122] ? alloc_skb_with_frags+0x92/0x690 [ 714.593605] __alloc_skb+0xe3/0x340 [ 714.593993] alloc_skb_with_frags+0x92/0x690 [ 714.594460] sock_alloc_send_pskb+0x7ab/0x930 [ 714.594953] ? proto_register+0x990/0x990 [ 714.595395] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.595966] ? __lock_acquire+0x164e/0x5b70 [ 714.596430] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 714.596963] ? ip6_mtu+0x189/0x340 [ 714.597339] ? lock_downgrade+0x6d0/0x6d0 [ 714.597779] ? ip_frag_init+0x350/0x350 [ 714.598199] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 714.598684] ? ip6_mtu+0x1b0/0x340 [ 714.599052] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 714.599624] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.600187] ? ip6_setup_cork+0xfcb/0x1810 [ 714.600626] ip6_append_data+0x1e7/0x330 [ 714.601046] ? ip_frag_init+0x350/0x350 [ 714.601459] ? ip_frag_init+0x350/0x350 [ 714.601888] udpv6_sendmsg+0x19e4/0x2890 [ 714.602308] ? ip_frag_init+0x350/0x350 [ 714.602735] ? udp_v6_push_pending_frames+0x360/0x360 [ 714.603266] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.603825] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.604365] ? release_sock+0x1b/0x1b0 [ 714.604771] ? reacquire_held_locks+0x229/0x4d0 [ 714.605248] ? release_sock+0x1b/0x1b0 [ 714.605665] ? lock_release+0x3b2/0x6f0 [ 714.606077] ? inet_autobind+0x136/0x190 [ 714.606498] ? lock_downgrade+0x6d0/0x6d0 [ 714.606932] ? __local_bh_enable_ip+0xa0/0x120 [ 714.607408] ? lockdep_hardirqs_on+0x79/0x100 [ 714.607880] ? inet_autobind+0x136/0x190 [ 714.608299] ? __local_bh_enable_ip+0xa0/0x120 [ 714.608355] FAULT_INJECTION: forcing a failure. [ 714.608355] name failslab, interval 1, probability 0, space 0, times 0 [ 714.608771] ? inet_autobind+0x13b/0x190 [ 714.608788] ? udp_v6_push_pending_frames+0x360/0x360 [ 714.608809] ? inet6_sendmsg+0x4a/0x140 [ 714.612469] inet6_sendmsg+0xfd/0x140 [ 714.612842] ? inet6_compat_ioctl+0x310/0x310 [ 714.613303] sock_sendmsg+0xee/0x190 [ 714.613668] ____sys_sendmsg+0x334/0x870 [ 714.614094] ? kernel_sendmsg+0x50/0x50 [ 714.614502] ? __ia32_sys_recvmmsg+0x260/0x260 [ 714.614987] ___sys_sendmsg+0xf3/0x170 [ 714.615394] ? sendmsg_copy_msghdr+0x160/0x160 [ 714.615883] ? lock_release+0x3b2/0x6f0 [ 714.616297] ? __fget_files+0x2cd/0x4c0 [ 714.616703] ? lock_downgrade+0x6d0/0x6d0 [ 714.617138] ? __fget_files+0x2ef/0x4c0 [ 714.617550] ? __fget_light+0xea/0x280 [ 714.617948] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 714.618518] __sys_sendmmsg+0x195/0x470 [ 714.618937] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 714.619382] ? lock_is_held_type+0xd7/0x130 [ 714.619821] ? wait_for_completion_io+0x270/0x270 [ 714.620322] ? lock_is_held_type+0xd7/0x130 [ 714.620750] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.621311] ? vfs_write+0x188/0xae0 [ 714.621702] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 714.622262] ? fput+0x2a/0x50 [ 714.622605] __x64_sys_sendmmsg+0x99/0x100 [ 714.623045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 714.623561] do_syscall_64+0x3b/0x90 [ 714.623956] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.624479] RIP: 0033:0x7f6eeb626b19 [ 714.624840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.626721] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 714.627454] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 714.628190] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 714.628872] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.629600] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 714.630283] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 714.631049] [ 714.631286] CPU: 0 PID: 6349 Comm: syz-executor.4 Not tainted 5.16.0-rc4-next-20211208 #1 [ 714.633039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 714.635401] Call Trace: [ 714.635947] [ 714.636413] dump_stack_lvl+0x8b/0xb3 [ 714.637236] should_fail.cold+0x5/0xa [ 714.638048] ? create_object.isra.0+0x3a/0xa20 [ 714.639015] should_failslab+0x5/0x10 [ 714.639849] kmem_cache_alloc+0x5b/0x480 [ 714.640713] create_object.isra.0+0x3a/0xa20 [ 714.641393] FAULT_INJECTION: forcing a failure. [ 714.641393] name failslab, interval 1, probability 0, space 0, times 0 [ 714.641644] ? kasan_unpoison+0x23/0x50 [ 714.643612] kmem_cache_alloc_bulk+0x387/0x670 [ 714.644571] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.645729] ? percpu_counter_add_batch+0xb4/0x170 [ 714.646765] io_submit_sqes.cold+0x20b/0x435 [ 714.647734] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 714.648795] ? find_held_lock+0x2c/0x110 [ 714.649649] ? io_async_task_func+0x560/0x560 [ 714.650626] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 714.651695] __do_sys_io_uring_enter+0xee0/0x1e80 [ 714.652734] ? io_submit_sqes+0x8fc0/0x8fc0 [ 714.653651] ? wait_for_completion_io+0x270/0x270 [ 714.654676] ? lock_is_held_type+0xd7/0x130 [ 714.655601] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.656751] ? vfs_write+0x188/0xae0 [ 714.657539] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 714.658694] ? fput+0x2a/0x50 [ 714.659369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 714.660463] do_syscall_64+0x3b/0x90 [ 714.661264] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.662341] RIP: 0033:0x7f517a696b19 [ 714.663113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.666937] RSP: 002b:00007f5177c0c188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 714.668534] RAX: ffffffffffffffda RBX: 00007f517a7a9f60 RCX: 00007f517a696b19 [ 714.670017] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 714.671502] RBP: 00007f5177c0c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.672994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.674474] R13: 00007ffc34bae36f R14: 00007f5177c0c300 R15: 0000000000022000 [ 714.675996] [ 714.676478] CPU: 1 PID: 6354 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 714.677327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 714.678410] Call Trace: [ 714.678688] [ 714.678925] dump_stack_lvl+0x8b/0xb3 [ 714.679339] should_fail.cold+0x5/0xa [ 714.679751] ? create_object.isra.0+0x3a/0xa20 [ 714.680242] should_failslab+0x5/0x10 [ 714.680646] kmem_cache_alloc+0x5b/0x480 [ 714.681063] create_object.isra.0+0x3a/0xa20 [ 714.681524] ? kasan_unpoison+0x23/0x50 [ 714.681943] kmem_cache_alloc_node+0x248/0x490 [ 714.682417] __alloc_skb+0x211/0x340 [ 714.682810] alloc_skb_with_frags+0x92/0x690 [ 714.683275] sock_alloc_send_pskb+0x7ab/0x930 [ 714.683788] ? proto_register+0x990/0x990 [ 714.684217] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.684763] ? __lock_acquire+0x164e/0x5b70 [ 714.685214] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 714.685748] ? ip6_mtu+0x189/0x340 [ 714.686110] ? lock_downgrade+0x6d0/0x6d0 [ 714.686537] ? ip_frag_init+0x350/0x350 [ 714.686942] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 714.687437] ? ip6_mtu+0x1b0/0x340 [ 714.687791] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 714.688361] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.688927] ? ip6_setup_cork+0xfcb/0x1810 [ 714.689369] ip6_append_data+0x1e7/0x330 [ 714.689799] ? ip_frag_init+0x350/0x350 [ 714.690215] ? ip_frag_init+0x350/0x350 [ 714.690636] udpv6_sendmsg+0x19e4/0x2890 [ 714.691062] ? ip_frag_init+0x350/0x350 [ 714.691483] ? udp_v6_push_pending_frames+0x360/0x360 [ 714.692038] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.692601] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 714.693116] ? release_sock+0x1b/0x1b0 [ 714.693530] ? reacquire_held_locks+0x229/0x4d0 [ 714.694034] ? release_sock+0x1b/0x1b0 [ 714.694454] ? lock_release+0x3b2/0x6f0 [ 714.694870] ? inet_autobind+0x136/0x190 [ 714.695287] ? lock_downgrade+0x6d0/0x6d0 [ 714.695705] ? __local_bh_enable_ip+0xa0/0x120 [ 714.696178] ? lockdep_hardirqs_on+0x79/0x100 [ 714.696664] ? inet_autobind+0x136/0x190 [ 714.697104] ? __local_bh_enable_ip+0xa0/0x120 [ 714.697584] ? inet_autobind+0x13b/0x190 [ 714.698021] ? udp_v6_push_pending_frames+0x360/0x360 [ 714.698554] ? inet6_sendmsg+0x4a/0x140 [ 714.698966] inet6_sendmsg+0xfd/0x140 [ 714.699357] ? inet6_compat_ioctl+0x310/0x310 [ 714.699807] sock_sendmsg+0xee/0x190 [ 714.700188] ____sys_sendmsg+0x334/0x870 [ 714.700602] ? kernel_sendmsg+0x50/0x50 [ 714.701013] ? __ia32_sys_recvmmsg+0x260/0x260 [ 714.701503] ___sys_sendmsg+0xf3/0x170 [ 714.701906] ? sendmsg_copy_msghdr+0x160/0x160 [ 714.702373] ? lock_release+0x3b2/0x6f0 [ 714.702780] ? __fget_files+0x2cd/0x4c0 [ 714.703185] ? lock_downgrade+0x6d0/0x6d0 [ 714.703647] ? __fget_files+0x2ef/0x4c0 [ 714.704039] ? __fget_light+0xea/0x280 [ 714.704445] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 714.705019] __sys_sendmmsg+0x195/0x470 [ 714.705438] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 714.705867] ? lock_is_held_type+0xd7/0x130 [ 714.706334] ? wait_for_completion_io+0x270/0x270 [ 714.706829] ? lock_is_held_type+0xd7/0x130 [ 714.707278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 714.707816] ? vfs_write+0x188/0xae0 [ 714.708199] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 714.708767] ? fput+0x2a/0x50 [ 714.709104] __x64_sys_sendmmsg+0x99/0x100 [ 714.709539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 714.710060] do_syscall_64+0x3b/0x90 [ 714.710446] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 714.710968] RIP: 0033:0x7f989a6cdb19 [ 714.711345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 714.713103] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 714.713883] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 714.714599] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 714.715322] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 714.716066] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 714.716803] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 714.717545] 15:16:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 714.741572] loop3: detected capacity change from 0 to 184 15:16:51 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:16:51 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:16:51 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 15:17:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 15:17:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 15:17:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 6) 15:17:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 5) 15:17:02 executing program 3: r0 = syz_mount_image$nfs(&(0x7f0000001ec0), &(0x7f0000001f00)='./file1\x00', 0x0, 0x2, &(0x7f0000002340)=[{&(0x7f0000000000)="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", 0x13d, 0x2}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ea1357193a1f91b5a22356"]) openat(r0, &(0x7f0000000140)='./file1\x00', 0x80000, 0x10) 15:17:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 726.102473] FAULT_INJECTION: forcing a failure. [ 726.102473] name failslab, interval 1, probability 0, space 0, times 0 [ 726.104770] CPU: 0 PID: 6384 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.106354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.108565] Call Trace: [ 726.109061] [ 726.109496] dump_stack_lvl+0x8b/0xb3 [ 726.110262] should_fail.cold+0x5/0xa [ 726.111023] should_failslab+0x5/0x10 [ 726.111793] __kmalloc_node_track_caller+0x7e/0x330 [ 726.112772] ? alloc_skb_with_frags+0x92/0x690 [ 726.113689] __alloc_skb+0xe3/0x340 [ 726.114413] alloc_skb_with_frags+0x92/0x690 [ 726.115288] sock_alloc_send_pskb+0x7ab/0x930 [ 726.116214] ? proto_register+0x990/0x990 [ 726.117132] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.118208] ? __lock_acquire+0x164e/0x5b70 [ 726.119115] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 726.120164] ? ip6_mtu+0x189/0x340 [ 726.120874] ? lock_downgrade+0x6d0/0x6d0 [ 726.121690] ? ip_frag_init+0x350/0x350 [ 726.122517] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 726.123438] ? ip6_mtu+0x1b0/0x340 [ 726.124168] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 726.125253] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.126352] ? ip6_setup_cork+0xfcb/0x1810 [ 726.127188] ip6_append_data+0x1e7/0x330 [ 726.128032] ? ip_frag_init+0x350/0x350 [ 726.128849] ? ip_frag_init+0x350/0x350 [ 726.129656] udpv6_sendmsg+0x19e4/0x2890 [ 726.130467] ? ip_frag_init+0x350/0x350 [ 726.131269] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.132304] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.133341] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.134379] ? release_sock+0x1b/0x1b0 [ 726.135153] ? reacquire_held_locks+0x229/0x4d0 [ 726.136073] ? release_sock+0x1b/0x1b0 [ 726.136871] ? lock_release+0x3b2/0x6f0 [ 726.137647] ? inet_autobind+0x136/0x190 [ 726.138448] ? lock_downgrade+0x6d0/0x6d0 [ 726.139266] ? __local_bh_enable_ip+0xa0/0x120 [ 726.140193] ? lockdep_hardirqs_on+0x79/0x100 [ 726.141066] ? inet_autobind+0x136/0x190 [ 726.141396] FAULT_INJECTION: forcing a failure. [ 726.141396] name failslab, interval 1, probability 0, space 0, times 0 [ 726.141886] ? __local_bh_enable_ip+0xa0/0x120 [ 726.141918] ? inet_autobind+0x13b/0x190 [ 726.144806] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.145852] ? inet6_sendmsg+0x4a/0x140 [ 726.146652] inet6_sendmsg+0xfd/0x140 [ 726.147418] ? inet6_compat_ioctl+0x310/0x310 [ 726.148329] sock_sendmsg+0xee/0x190 [ 726.149080] ____sys_sendmsg+0x334/0x870 [ 726.149889] ? kernel_sendmsg+0x50/0x50 [ 726.150688] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.151628] ___sys_sendmsg+0xf3/0x170 [ 726.152427] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.153345] ? lock_release+0x3b2/0x6f0 [ 726.154133] ? __fget_files+0x2cd/0x4c0 [ 726.154932] ? lock_downgrade+0x6d0/0x6d0 [ 726.155794] ? __fget_files+0x2ef/0x4c0 [ 726.156604] ? __fget_light+0xea/0x280 [ 726.157374] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 726.158498] __sys_sendmmsg+0x195/0x470 [ 726.159314] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.160197] ? lock_is_held_type+0xd7/0x130 [ 726.161083] ? wait_for_completion_io+0x270/0x270 [ 726.162060] ? lock_is_held_type+0xd7/0x130 [ 726.162926] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.164057] ? vfs_write+0x188/0xae0 [ 726.164812] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.165897] ? fput+0x2a/0x50 [ 726.166544] __x64_sys_sendmmsg+0x99/0x100 [ 726.167382] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.168423] do_syscall_64+0x3b/0x90 [ 726.169189] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.170211] RIP: 0033:0x7f989a6cdb19 [ 726.170951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.174635] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.176185] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 726.177601] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.179017] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.180450] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.181875] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 726.183319] [ 726.183794] CPU: 1 PID: 6392 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.184688] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.186031] Call Trace: [ 726.186371] [ 726.186675] dump_stack_lvl+0x8b/0xb3 [ 726.187097] should_fail.cold+0x5/0xa [ 726.187497] ? create_object.isra.0+0x3a/0xa20 [ 726.187998] should_failslab+0x5/0x10 [ 726.188399] kmem_cache_alloc+0x5b/0x480 [ 726.188826] create_object.isra.0+0x3a/0xa20 [ 726.189289] ? kasan_unpoison+0x23/0x50 [ 726.189705] __kmalloc_node_track_caller+0x1fb/0x330 [ 726.190228] ? alloc_skb_with_frags+0x92/0x690 [ 726.190707] __alloc_skb+0xe3/0x340 [ 726.191098] alloc_skb_with_frags+0x92/0x690 [ 726.191568] sock_alloc_send_pskb+0x7ab/0x930 [ 726.192065] ? proto_register+0x990/0x990 [ 726.192498] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.193044] ? __lock_acquire+0x164e/0x5b70 [ 726.193493] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 726.194015] ? ip6_mtu+0x189/0x340 [ 726.194382] ? lock_downgrade+0x6d0/0x6d0 [ 726.194815] ? ip_frag_init+0x350/0x350 [ 726.195242] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 726.195736] ? ip6_mtu+0x1b0/0x340 [ 726.196101] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 726.196677] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.197240] ? ip6_setup_cork+0xfcb/0x1810 [ 726.197678] ip6_append_data+0x1e7/0x330 [ 726.198094] ? ip_frag_init+0x350/0x350 [ 726.198511] ? ip_frag_init+0x350/0x350 [ 726.198930] udpv6_sendmsg+0x19e4/0x2890 [ 726.199348] ? ip_frag_init+0x350/0x350 [ 726.199797] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.200338] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.200878] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.201421] ? release_sock+0x1b/0x1b0 [ 726.201825] ? reacquire_held_locks+0x229/0x4d0 [ 726.202309] ? release_sock+0x1b/0x1b0 [ 726.202727] ? lock_release+0x3b2/0x6f0 [ 726.203142] ? inet_autobind+0x136/0x190 [ 726.203580] ? lock_downgrade+0x6d0/0x6d0 [ 726.204033] ? __local_bh_enable_ip+0xa0/0x120 [ 726.204508] ? lockdep_hardirqs_on+0x79/0x100 [ 726.204968] ? inet_autobind+0x136/0x190 [ 726.205390] ? __local_bh_enable_ip+0xa0/0x120 [ 726.205863] ? inet_autobind+0x13b/0x190 [ 726.206291] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.206824] ? inet6_sendmsg+0x4a/0x140 [ 726.207237] inet6_sendmsg+0xfd/0x140 [ 726.207627] ? inet6_compat_ioctl+0x310/0x310 [ 726.208094] sock_sendmsg+0xee/0x190 [ 726.208493] ____sys_sendmsg+0x334/0x870 [ 726.208917] ? kernel_sendmsg+0x50/0x50 [ 726.209325] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.209813] ___sys_sendmsg+0xf3/0x170 [ 726.210224] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.210701] ? lock_release+0x3b2/0x6f0 [ 726.211110] ? __fget_files+0x2cd/0x4c0 [ 726.211518] ? lock_downgrade+0x6d0/0x6d0 [ 726.211979] ? __fget_files+0x2ef/0x4c0 [ 726.212395] ? __fget_light+0xea/0x280 [ 726.212805] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 726.213372] __sys_sendmmsg+0x195/0x470 [ 726.213634] FAULT_INJECTION: forcing a failure. [ 726.213634] name failslab, interval 1, probability 0, space 0, times 0 [ 726.213787] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.213804] ? lock_is_held_type+0xd7/0x130 [ 726.216919] ? wait_for_completion_io+0x270/0x270 [ 726.217417] ? lock_is_held_type+0xd7/0x130 [ 726.217861] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.218428] ? vfs_write+0x188/0xae0 [ 726.218816] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.219382] ? fput+0x2a/0x50 [ 726.219729] __x64_sys_sendmmsg+0x99/0x100 [ 726.220164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.220694] do_syscall_64+0x3b/0x90 [ 726.221088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.221612] RIP: 0033:0x7f6eeb626b19 [ 726.221993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.223879] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.224652] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 726.225376] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.226105] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.226828] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.227555] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 726.228300] [ 726.228539] CPU: 0 PID: 6395 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.230189] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.232447] Call Trace: [ 726.232958] [ 726.233401] dump_stack_lvl+0x8b/0xb3 [ 726.234183] should_fail.cold+0x5/0xa [ 726.234962] should_failslab+0x5/0x10 [ 726.235745] kmem_cache_alloc_bulk+0x47/0x670 [ 726.236661] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.237749] ? percpu_counter_add_batch+0xb4/0x170 [ 726.238579] FAULT_INJECTION: forcing a failure. [ 726.238579] name failslab, interval 1, probability 0, space 0, times 0 [ 726.238748] io_submit_sqes.cold+0x20b/0x435 [ 726.240719] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 726.241705] ? find_held_lock+0x2c/0x110 [ 726.242535] ? io_async_task_func+0x560/0x560 [ 726.243447] ? lock_release+0x3b2/0x6f0 [ 726.244282] ? __do_sys_io_uring_enter+0x359/0x1e80 [ 726.245301] ? lock_downgrade+0x6d0/0x6d0 [ 726.246126] ? __fget_files+0x2ef/0x4c0 [ 726.246943] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.247968] __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.248966] ? io_submit_sqes+0x8fc0/0x8fc0 [ 726.249849] ? wait_for_completion_io+0x270/0x270 [ 726.250829] ? lock_is_held_type+0xd7/0x130 [ 726.251722] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.252830] ? vfs_write+0x188/0xae0 [ 726.253586] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.254696] ? fput+0x2a/0x50 [ 726.255343] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.256396] do_syscall_64+0x3b/0x90 [ 726.257160] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.258193] RIP: 0033:0x7f67feb28b19 [ 726.258935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.262626] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 726.264159] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 726.265587] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 726.267014] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.268448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.269875] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 726.271325] [ 726.271809] CPU: 1 PID: 6399 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.272728] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.273974] Call Trace: [ 726.274256] [ 726.274494] dump_stack_lvl+0x8b/0xb3 [ 726.274923] should_fail.cold+0x5/0xa [ 726.275355] should_failslab+0x5/0x10 [ 726.275790] kmem_cache_alloc_bulk+0x47/0x670 [ 726.276279] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.276883] ? percpu_counter_add_batch+0xb4/0x170 [ 726.277422] io_submit_sqes.cold+0x20b/0x435 [ 726.277918] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 726.278467] ? find_held_lock+0x2c/0x110 [ 726.278908] ? io_async_task_func+0x560/0x560 [ 726.279399] ? lock_release+0x3b2/0x6f0 [ 726.279849] ? __do_sys_io_uring_enter+0x359/0x1e80 [ 726.280397] ? lock_downgrade+0x6d0/0x6d0 [ 726.280850] ? __fget_files+0x2ef/0x4c0 [ 726.281288] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.281838] __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.282375] ? io_submit_sqes+0x8fc0/0x8fc0 15:17:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) [ 726.282859] ? wait_for_completion_io+0x270/0x270 [ 726.283590] ? lock_is_held_type+0xd7/0x130 [ 726.284073] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.284662] ? vfs_write+0x188/0xae0 [ 726.285069] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.285672] ? fput+0x2a/0x50 [ 726.286034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.286598] do_syscall_64+0x3b/0x90 [ 726.287020] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.287574] RIP: 0033:0x7f22342afb19 [ 726.287983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.290009] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 726.290096] nfs: Unknown parameter 'W:#V' [ 726.290831] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 726.290841] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 726.290849] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.290857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.290865] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 726.290887] 15:17:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 6) [ 726.324388] FAULT_INJECTION: forcing a failure. [ 726.324388] name failslab, interval 1, probability 0, space 0, times 0 [ 726.325684] CPU: 1 PID: 6403 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.326537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.327732] Call Trace: [ 726.328008] [ 726.328247] dump_stack_lvl+0x8b/0xb3 [ 726.328657] should_fail.cold+0x5/0xa [ 726.329062] ? create_object.isra.0+0x3a/0xa20 [ 726.329548] should_failslab+0x5/0x10 [ 726.329954] kmem_cache_alloc+0x5b/0x480 [ 726.330387] create_object.isra.0+0x3a/0xa20 [ 726.330851] ? kasan_unpoison+0x23/0x50 [ 726.331278] __kmalloc_node_track_caller+0x1fb/0x330 [ 726.331815] ? alloc_skb_with_frags+0x92/0x690 [ 726.332299] __alloc_skb+0xe3/0x340 [ 726.332708] alloc_skb_with_frags+0x92/0x690 [ 726.333177] sock_alloc_send_pskb+0x7ab/0x930 [ 726.333673] ? proto_register+0x990/0x990 [ 726.334131] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.334715] ? __lock_acquire+0x164e/0x5b70 [ 726.335208] __ip6_append_data.isra.0+0x1db5/0x3cc0 [ 726.335775] ? ip6_mtu+0x189/0x340 [ 726.336164] ? lock_downgrade+0x6d0/0x6d0 [ 726.336621] ? ip_frag_init+0x350/0x350 [ 726.337067] ? ip6_finish_output2+0x1ac0/0x1ac0 [ 726.337580] ? ip6_mtu+0x1b0/0x340 [ 726.337965] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 726.338570] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.339166] ? ip6_setup_cork+0xfcb/0x1810 [ 726.339632] ip6_append_data+0x1e7/0x330 [ 726.340094] ? ip_frag_init+0x350/0x350 [ 726.340531] ? ip_frag_init+0x350/0x350 [ 726.340980] udpv6_sendmsg+0x19e4/0x2890 [ 726.341421] ? ip_frag_init+0x350/0x350 [ 726.341865] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.342435] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.343021] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.343595] ? release_sock+0x1b/0x1b0 [ 726.344052] ? reacquire_held_locks+0x229/0x4d0 [ 726.344567] ? release_sock+0x1b/0x1b0 [ 726.345003] ? lock_release+0x3b2/0x6f0 [ 726.345440] ? inet_autobind+0x136/0x190 [ 726.345898] ? lock_downgrade+0x6d0/0x6d0 [ 726.346359] ? __local_bh_enable_ip+0xa0/0x120 [ 726.346859] ? lockdep_hardirqs_on+0x79/0x100 [ 726.347345] ? inet_autobind+0x136/0x190 [ 726.347812] ? __local_bh_enable_ip+0xa0/0x120 [ 726.348309] ? inet_autobind+0x13b/0x190 [ 726.348760] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.349336] ? inet6_sendmsg+0x4a/0x140 [ 726.349774] inet6_sendmsg+0xfd/0x140 [ 726.350190] ? inet6_compat_ioctl+0x310/0x310 [ 726.350680] sock_sendmsg+0xee/0x190 [ 726.351095] ____sys_sendmsg+0x334/0x870 [ 726.351538] ? kernel_sendmsg+0x50/0x50 [ 726.351996] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.352509] ___sys_sendmsg+0xf3/0x170 [ 726.352945] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.353460] ? lock_release+0x3b2/0x6f0 [ 726.353900] ? __fget_files+0x2cd/0x4c0 [ 726.354320] ? lock_downgrade+0x6d0/0x6d0 [ 726.354781] ? __fget_files+0x2ef/0x4c0 [ 726.355219] ? __fget_light+0xea/0x280 [ 726.355648] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 726.356270] __sys_sendmmsg+0x195/0x470 [ 726.356710] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.357181] ? lock_is_held_type+0xd7/0x130 [ 726.357664] ? wait_for_completion_io+0x270/0x270 [ 726.358207] ? lock_is_held_type+0xd7/0x130 [ 726.358669] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.359271] ? vfs_write+0x188/0xae0 [ 726.359707] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.360307] ? fput+0x2a/0x50 [ 726.360662] __x64_sys_sendmmsg+0x99/0x100 [ 726.361131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.361694] do_syscall_64+0x3b/0x90 [ 726.362113] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.362672] RIP: 0033:0x7f989a6cdb19 [ 726.363081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.365112] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.365905] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 726.366689] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.367463] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.368265] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.369051] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 726.369816] [ 726.385667] nfs: Unknown parameter 'W:#V' 15:17:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:17:03 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 15:17:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 7) [ 726.433588] FAULT_INJECTION: forcing a failure. [ 726.433588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.434938] CPU: 1 PID: 6412 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.435802] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.436989] Call Trace: [ 726.437253] [ 726.437487] dump_stack_lvl+0x8b/0xb3 [ 726.437909] should_fail.cold+0x5/0xa [ 726.438325] _copy_from_user+0x2e/0x170 [ 726.438749] __copy_msghdr_from_user+0x91/0x4b0 [ 726.439254] ? __ia32_sys_shutdown+0x70/0x70 [ 726.439741] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 726.440297] sendmsg_copy_msghdr+0xa1/0x160 [ 726.440759] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.441255] ? lock_is_held_type+0xd7/0x130 [ 726.441706] ? find_held_lock+0x2c/0x110 [ 726.442137] ? lock_release+0x3b2/0x6f0 [ 726.442554] ? finish_task_switch.isra.0+0x221/0x870 [ 726.443133] ___sys_sendmsg+0xc6/0x170 [ 726.443542] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.444070] ? finish_task_switch.isra.0+0x226/0x870 [ 726.444634] ? lockdep_hardirqs_on+0x79/0x100 [ 726.445125] ? finish_task_switch.isra.0+0x226/0x870 [ 726.445690] ? __schedule+0x88a/0x2160 [ 726.446121] ? io_schedule_timeout+0x180/0x180 [ 726.446632] ? lock_is_held_type+0xd7/0x130 [ 726.447107] ? __cond_resched+0x13/0x20 [ 726.447546] __sys_sendmmsg+0x195/0x470 [ 726.448003] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.448474] ? lock_is_held_type+0xd7/0x130 [ 726.448937] ? wait_for_completion_io+0x270/0x270 [ 726.449471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.450079] ? vfs_write+0x188/0xae0 [ 726.450486] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.451083] ? fput+0x2a/0x50 [ 726.451445] __x64_sys_sendmmsg+0x99/0x100 [ 726.451925] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.452492] do_syscall_64+0x3b/0x90 [ 726.452919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.453487] RIP: 0033:0x7f989a6cdb19 [ 726.453892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.455823] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.456664] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 726.457447] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.458229] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.458983] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.459796] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 726.460588] [ 726.519268] FAULT_INJECTION: forcing a failure. [ 726.519268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.520573] CPU: 1 PID: 6420 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.521427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.522611] Call Trace: [ 726.522880] [ 726.523115] dump_stack_lvl+0x8b/0xb3 [ 726.523531] should_fail.cold+0x5/0xa [ 726.523946] _copy_from_user+0x2e/0x170 [ 726.524370] __copy_msghdr_from_user+0x91/0x4b0 [ 726.524858] ? __ia32_sys_shutdown+0x70/0x70 [ 726.525319] ? udp_v6_push_pending_frames+0x360/0x360 [ 726.525870] ? inet6_sendmsg+0x4a/0x140 [ 726.526288] ? inet6_sendmsg+0xbd/0x140 [ 726.526706] ? memcpy+0x39/0x60 [ 726.527060] sendmsg_copy_msghdr+0xa1/0x160 [ 726.527513] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.528009] ? __lock_acquire+0x164e/0x5b70 [ 726.528473] ___sys_sendmsg+0xc6/0x170 [ 726.528885] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.529397] ? lock_release+0x3b2/0x6f0 [ 726.529834] ? lock_is_held_type+0xd7/0x130 [ 726.530305] ? find_held_lock+0x2c/0x110 [ 726.530741] ? lock_release+0x3b2/0x6f0 [ 726.531178] ? __might_fault+0xd1/0x170 [ 726.531612] ? lock_downgrade+0x6d0/0x6d0 [ 726.532090] ? lock_is_held_type+0xd7/0x130 [ 726.532572] __sys_sendmmsg+0x195/0x470 [ 726.533015] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.533486] ? lock_is_held_type+0xd7/0x130 [ 726.533969] ? wait_for_completion_io+0x270/0x270 [ 726.534503] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.535103] ? vfs_write+0x188/0xae0 [ 726.535514] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.536098] ? fput+0x2a/0x50 [ 726.536451] __x64_sys_sendmmsg+0x99/0x100 [ 726.536919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.537481] do_syscall_64+0x3b/0x90 [ 726.537904] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.538465] RIP: 0033:0x7f6eeb626b19 [ 726.538866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.540894] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.541687] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 726.542478] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.543245] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.544030] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.544802] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 726.545600] [ 726.585775] FAULT_INJECTION: forcing a failure. [ 726.585775] name failslab, interval 1, probability 0, space 0, times 0 [ 726.587015] CPU: 1 PID: 6423 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.587889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.589095] Call Trace: [ 726.589363] [ 726.589599] dump_stack_lvl+0x8b/0xb3 [ 726.590006] should_fail.cold+0x5/0xa [ 726.590414] ? create_object.isra.0+0x3a/0xa20 [ 726.590895] should_failslab+0x5/0x10 [ 726.591299] kmem_cache_alloc+0x5b/0x480 [ 726.591753] create_object.isra.0+0x3a/0xa20 [ 726.592214] ? kasan_unpoison+0x23/0x50 [ 726.592638] kmem_cache_alloc_bulk+0x387/0x670 [ 726.593121] io_submit_sqes.cold+0x20b/0x435 [ 726.593591] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 726.594121] ? find_held_lock+0x2c/0x110 [ 726.594542] ? io_async_task_func+0x560/0x560 [ 726.595024] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.595576] __do_sys_io_uring_enter+0xee0/0x1e80 [ 726.596127] ? io_submit_sqes+0x8fc0/0x8fc0 [ 726.596605] ? wait_for_completion_io+0x270/0x270 [ 726.597137] ? lock_is_held_type+0xd7/0x130 [ 726.597613] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.598218] ? vfs_write+0x188/0xae0 [ 726.598631] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.599235] ? fput+0x2a/0x50 [ 726.599572] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.600164] do_syscall_64+0x3b/0x90 [ 726.600587] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.601150] RIP: 0033:0x7f22342afb19 [ 726.601536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.603565] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 726.604423] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 726.605159] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 726.605905] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.606642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.607382] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 726.608144] 15:17:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xba, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 7) 15:17:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 726.665189] FAULT_INJECTION: forcing a failure. [ 726.665189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.666538] CPU: 1 PID: 6431 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 726.667436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 726.668720] Call Trace: [ 726.669009] [ 726.669246] dump_stack_lvl+0x8b/0xb3 [ 726.669688] should_fail.cold+0x5/0xa [ 726.670120] _copy_from_user+0x2e/0x170 [ 726.670572] iovec_from_user+0x242/0x3c0 [ 726.671039] __import_iovec+0x67/0x5d0 [ 726.671493] ? __ia32_sys_shutdown+0x70/0x70 [ 726.672013] import_iovec+0x83/0xb0 [ 726.672428] sendmsg_copy_msghdr+0x12d/0x160 [ 726.672921] ? __ia32_sys_recvmmsg+0x260/0x260 [ 726.673439] ? __lock_acquire+0x164e/0x5b70 [ 726.673941] ___sys_sendmsg+0xc6/0x170 [ 726.674387] ? sendmsg_copy_msghdr+0x160/0x160 [ 726.674910] ? lock_release+0x3b2/0x6f0 [ 726.675359] ? lock_is_held_type+0xd7/0x130 [ 726.675861] ? find_held_lock+0x2c/0x110 [ 726.676321] ? lock_release+0x3b2/0x6f0 [ 726.676769] ? __might_fault+0xd1/0x170 [ 726.677230] ? lock_downgrade+0x6d0/0x6d0 [ 726.677700] ? lock_is_held_type+0xd7/0x130 [ 726.678189] __sys_sendmmsg+0x195/0x470 [ 726.678639] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 726.679126] ? lock_is_held_type+0xd7/0x130 [ 726.679589] ? wait_for_completion_io+0x270/0x270 [ 726.680140] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 726.680754] ? vfs_write+0x188/0xae0 [ 726.681171] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 726.681787] ? fput+0x2a/0x50 [ 726.682152] __x64_sys_sendmmsg+0x99/0x100 [ 726.682624] ? syscall_enter_from_user_mode+0x1d/0x50 [ 726.683199] do_syscall_64+0x3b/0x90 [ 726.683621] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 726.684215] RIP: 0033:0x7f989a6cdb19 [ 726.684615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 726.686684] RSP: 002b:00007f9897c43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 726.687545] RAX: ffffffffffffffda RBX: 00007f989a7e0f60 RCX: 00007f989a6cdb19 [ 726.688367] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 726.689167] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 726.689959] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 726.690749] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 726.691554] 15:17:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 8) [ 744.692684] FAULT_INJECTION: forcing a failure. [ 744.692684] name failslab, interval 1, probability 0, space 0, times 0 [ 744.693969] CPU: 1 PID: 6442 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.694817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.696008] Call Trace: [ 744.696280] [ 744.696498] dump_stack_lvl+0x8b/0xb3 [ 744.696885] should_fail.cold+0x5/0xa [ 744.697265] ? create_object.isra.0+0x3a/0xa20 [ 744.697718] should_failslab+0x5/0x10 [ 744.698094] kmem_cache_alloc+0x5b/0x480 [ 744.698490] ? mark_held_locks+0x9e/0xe0 [ 744.698889] create_object.isra.0+0x3a/0xa20 [ 744.699324] ? kasan_unpoison+0x23/0x50 [ 744.699714] kmem_cache_alloc_bulk+0x387/0x670 [ 744.700213] io_submit_sqes.cold+0x20b/0x435 [ 744.700658] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 744.701191] ? find_held_lock+0x2c/0x110 15:17:21 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 15:17:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:21 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 15:17:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 8) 15:17:21 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:21 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 9) 15:17:21 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100002, 0x0, 0x0, 0x0, 0x0) 15:17:21 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf8102, 0x42) fcntl$setstatus(r0, 0x4, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x30000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r2, 0x6, 0x3, 0x3, 0xfce}) [ 744.701810] ? io_async_task_func+0x560/0x560 [ 744.702435] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 744.702963] __do_sys_io_uring_enter+0xee0/0x1e80 [ 744.703482] ? io_submit_sqes+0x8fc0/0x8fc0 [ 744.703943] ? wait_for_completion_io+0x270/0x270 [ 744.704452] ? lock_is_held_type+0xd7/0x130 [ 744.704928] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 744.705498] ? vfs_write+0x188/0xae0 [ 744.705916] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 744.706495] ? fput+0x2a/0x50 [ 744.706828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.707378] do_syscall_64+0x3b/0x90 [ 744.707787] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.708329] RIP: 0033:0x7f22342afb19 [ 744.708699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.710555] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 744.711321] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 744.712055] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 744.712759] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.713453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.714164] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 744.714896] [ 744.733407] FAULT_INJECTION: forcing a failure. [ 744.733407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.734693] CPU: 1 PID: 6443 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.735484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.736579] Call Trace: [ 744.736830] [ 744.737046] dump_stack_lvl+0x8b/0xb3 [ 744.737430] should_fail.cold+0x5/0xa [ 744.737811] _copy_from_user+0x2e/0x170 [ 744.738211] iovec_from_user+0x242/0x3c0 [ 744.738234] FAULT_INJECTION: forcing a failure. [ 744.738234] name failslab, interval 1, probability 0, space 0, times 0 [ 744.738621] __import_iovec+0x67/0x5d0 [ 744.738641] ? __ia32_sys_shutdown+0x70/0x70 [ 744.738667] import_iovec+0x83/0xb0 [ 744.742309] sendmsg_copy_msghdr+0x12d/0x160 [ 744.742767] ? __ia32_sys_recvmmsg+0x260/0x260 [ 744.743247] ? __lock_acquire+0x164e/0x5b70 [ 744.743699] ___sys_sendmsg+0xc6/0x170 [ 744.744111] ? sendmsg_copy_msghdr+0x160/0x160 [ 744.744585] ? lock_release+0x3b2/0x6f0 [ 744.745005] ? lock_is_held_type+0xd7/0x130 [ 744.745451] ? find_held_lock+0x2c/0x110 [ 744.745871] ? lock_release+0x3b2/0x6f0 [ 744.746289] ? __might_fault+0xd1/0x170 [ 744.746717] ? lock_downgrade+0x6d0/0x6d0 [ 744.747149] ? lock_is_held_type+0xd7/0x130 [ 744.747599] __sys_sendmmsg+0x195/0x470 [ 744.748015] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 744.748462] ? lock_is_held_type+0xd7/0x130 [ 744.748910] ? wait_for_completion_io+0x270/0x270 [ 744.749428] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 744.749994] ? vfs_write+0x188/0xae0 [ 744.750406] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 744.750978] ? fput+0x2a/0x50 [ 744.751322] __x64_sys_sendmmsg+0x99/0x100 [ 744.751771] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.752361] do_syscall_64+0x3b/0x90 [ 744.752749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.753292] RIP: 0033:0x7f6eeb626b19 [ 744.753679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.755620] RSP: 002b:00007f6ee8b9c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 744.756405] RAX: ffffffffffffffda RBX: 00007f6eeb739f60 RCX: 00007f6eeb626b19 [ 744.757102] RDX: 0000000000000002 RSI: 00000000200002c0 RDI: 0000000000000003 [ 744.757791] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.758478] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 744.759167] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 744.759867] [ 744.760105] CPU: 0 PID: 6450 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.761933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.764428] Call Trace: [ 744.764987] [ 744.765480] dump_stack_lvl+0x8b/0xb3 [ 744.766333] should_fail.cold+0x5/0xa [ 744.767187] ? create_object.isra.0+0x3a/0xa20 [ 744.768201] should_failslab+0x5/0x10 [ 744.769046] kmem_cache_alloc+0x5b/0x480 [ 744.769945] create_object.isra.0+0x3a/0xa20 [ 744.770925] ? kasan_unpoison+0x23/0x50 [ 744.771808] kmem_cache_alloc_bulk+0x387/0x670 [ 744.772815] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 744.774016] ? percpu_counter_add_batch+0xb4/0x170 [ 744.775088] io_submit_sqes.cold+0x20b/0x435 [ 744.776094] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 744.777190] ? find_held_lock+0x2c/0x110 [ 744.778080] ? io_async_task_func+0x560/0x560 [ 744.779097] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 744.780206] __do_sys_io_uring_enter+0xee0/0x1e80 [ 744.781294] ? io_submit_sqes+0x8fc0/0x8fc0 [ 744.782250] ? wait_for_completion_io+0x270/0x270 [ 744.783316] ? lock_is_held_type+0xd7/0x130 [ 744.784290] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 744.785487] ? vfs_write+0x188/0xae0 [ 744.786315] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 744.787514] ? fput+0x2a/0x50 [ 744.788230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.789364] do_syscall_64+0x3b/0x90 [ 744.790195] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.791326] RIP: 0033:0x7f67feb28b19 [ 744.792150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.796170] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 744.797799] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 744.799354] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 744.800930] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.802470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.804016] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 744.805586] [ 744.808137] FAULT_INJECTION: forcing a failure. [ 744.808137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.810974] CPU: 0 PID: 6454 Comm: syz-executor.1 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.812783] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.814406] FAULT_INJECTION: forcing a failure. [ 744.814406] name failslab, interval 1, probability 0, space 0, times 0 [ 744.815219] Call Trace: [ 744.815243] [ 744.815253] dump_stack_lvl+0x8b/0xb3 [ 744.818346] should_fail.cold+0x5/0xa [ 744.819193] _copy_to_user+0x2e/0x150 [ 744.820054] simple_read_from_buffer+0xcc/0x160 [ 744.821078] proc_fail_nth_read+0x194/0x220 [ 744.822034] ? proc_fault_inject_read+0x230/0x230 [ 744.823094] ? security_file_permission+0xb1/0xd0 [ 744.824167] ? proc_fault_inject_read+0x230/0x230 [ 744.825224] vfs_read+0x1b6/0x5f0 [ 744.825992] ksys_read+0x12d/0x250 [ 744.826769] ? __ia32_sys_pwrite64+0x230/0x230 [ 744.827772] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.828912] do_syscall_64+0x3b/0x90 [ 744.829734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.830851] RIP: 0033:0x7f989a68069c [ 744.831651] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 744.835659] RSP: 002b:00007f9897c43170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.837310] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f989a68069c [ 744.838847] RDX: 000000000000000f RSI: 00007f9897c431e0 RDI: 0000000000000004 [ 744.840392] RBP: 00007f9897c431d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.841935] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 744.843479] R13: 00007fff0442e32f R14: 00007f9897c43300 R15: 0000000000022000 [ 744.845073] [ 744.845576] CPU: 1 PID: 6460 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.846469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.847681] Call Trace: [ 744.847969] [ 744.848213] dump_stack_lvl+0x8b/0xb3 [ 744.848637] should_fail.cold+0x5/0xa [ 744.849055] ? create_object.isra.0+0x3a/0xa20 [ 744.849556] should_failslab+0x5/0x10 [ 744.849976] kmem_cache_alloc+0x5b/0x480 [ 744.850421] ? mark_held_locks+0x9e/0xe0 [ 744.850875] create_object.isra.0+0x3a/0xa20 [ 744.851354] ? kasan_unpoison+0x23/0x50 [ 744.851792] kmem_cache_alloc_bulk+0x387/0x670 [ 744.852295] io_submit_sqes.cold+0x20b/0x435 [ 744.852792] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 744.853335] ? find_held_lock+0x2c/0x110 [ 744.853767] ? io_async_task_func+0x560/0x560 [ 744.854271] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 744.854808] __do_sys_io_uring_enter+0xee0/0x1e80 15:17:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:21 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) [ 744.855346] ? io_submit_sqes+0x8fc0/0x8fc0 [ 744.856081] ? wait_for_completion_io+0x270/0x270 [ 744.856611] ? lock_is_held_type+0xd7/0x130 [ 744.857072] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 744.857662] ? vfs_write+0x188/0xae0 [ 744.858063] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 744.858657] ? fput+0x2a/0x50 [ 744.859006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.859559] do_syscall_64+0x3b/0x90 [ 744.859980] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.860526] RIP: 0033:0x7f22342afb19 [ 744.860925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 744.862846] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 744.863667] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 744.864431] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 744.865186] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.865948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.866701] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 744.867472] 15:17:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) (fail_nth: 9) [ 744.915354] FAULT_INJECTION: forcing a failure. [ 744.915354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.916684] CPU: 1 PID: 6470 Comm: syz-executor.6 Not tainted 5.16.0-rc4-next-20211208 #1 [ 744.917565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 744.918763] Call Trace: [ 744.919031] [ 744.919263] dump_stack_lvl+0x8b/0xb3 [ 744.919685] should_fail.cold+0x5/0xa [ 744.920124] _copy_to_user+0x2e/0x150 [ 744.920541] simple_read_from_buffer+0xcc/0x160 [ 744.921046] proc_fail_nth_read+0x194/0x220 [ 744.921516] ? proc_fault_inject_read+0x230/0x230 [ 744.922036] ? security_file_permission+0xb1/0xd0 [ 744.922559] ? proc_fault_inject_read+0x230/0x230 [ 744.923074] vfs_read+0x1b6/0x5f0 [ 744.923448] ksys_read+0x12d/0x250 [ 744.923819] ? __ia32_sys_pwrite64+0x230/0x230 [ 744.924329] ? syscall_enter_from_user_mode+0x1d/0x50 [ 744.924903] do_syscall_64+0x3b/0x90 [ 744.925324] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 744.925883] RIP: 0033:0x7f6eeb5d969c [ 744.926285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 744.928297] RSP: 002b:00007f6ee8b9c170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 744.929128] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6eeb5d969c [ 744.929907] RDX: 000000000000000f RSI: 00007f6ee8b9c1e0 RDI: 0000000000000004 [ 744.930681] RBP: 00007f6ee8b9c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 744.931452] R10: 0000000000008001 R11: 0000000000000246 R12: 0000000000000001 [ 744.932233] R13: 00007fff4d15c10f R14: 00007f6ee8b9c300 R15: 0000000000022000 [ 744.933015] 15:17:21 executing program 3: syz_io_uring_setup(0x30f8, &(0x7f0000000000)={0x0, 0x3, 0x1, 0xfffffffb, 0xeb}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, 0x0) 15:17:34 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 15:17:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x800015) 15:17:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:17:34 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:34 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100003, 0x0, 0x0, 0x0, 0x0) 15:17:34 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 15:17:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 757.555411] FAULT_INJECTION: forcing a failure. [ 757.555411] name failslab, interval 1, probability 0, space 0, times 0 [ 757.557893] CPU: 0 PID: 6482 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 757.559660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 757.562107] Call Trace: [ 757.562653] [ 757.563128] dump_stack_lvl+0x8b/0xb3 [ 757.563960] should_fail.cold+0x5/0xa [ 757.564795] ? create_object.isra.0+0x3a/0xa20 [ 757.565782] should_failslab+0x5/0x10 [ 757.566606] kmem_cache_alloc+0x5b/0x480 [ 757.567472] ? mark_held_locks+0x9e/0xe0 [ 757.568347] create_object.isra.0+0x3a/0xa20 [ 757.568385] FAULT_INJECTION: forcing a failure. [ 757.568385] name failslab, interval 1, probability 0, space 0, times 0 [ 757.569280] ? kasan_unpoison+0x23/0x50 [ 757.569327] kmem_cache_alloc_bulk+0x387/0x670 [ 757.573260] io_submit_sqes.cold+0x20b/0x435 [ 757.574218] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 757.575286] ? find_held_lock+0x2c/0x110 [ 757.576145] ? io_async_task_func+0x560/0x560 [ 757.577137] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.578204] __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.579254] ? io_submit_sqes+0x8fc0/0x8fc0 [ 757.580232] ? wait_for_completion_io+0x270/0x270 [ 757.581269] ? lock_is_held_type+0xd7/0x130 [ 757.582194] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 757.583355] ? vfs_write+0x188/0xae0 [ 757.584178] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 757.585346] ? fput+0x2a/0x50 [ 757.586032] ? syscall_enter_from_user_mode+0x1d/0x50 [ 757.587137] do_syscall_64+0x3b/0x90 [ 757.587939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.589044] RIP: 0033:0x7f67feb28b19 [ 757.589828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.593715] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 757.595317] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 757.596845] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 757.598344] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.599842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.601353] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 757.602899] [ 757.603390] CPU: 1 PID: 6484 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 757.605039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 757.607256] Call Trace: [ 757.607759] [ 757.608206] dump_stack_lvl+0x8b/0xb3 [ 757.608976] should_fail.cold+0x5/0xa [ 757.609738] ? create_object.isra.0+0x3a/0xa20 [ 757.610651] should_failslab+0x5/0x10 [ 757.611413] kmem_cache_alloc+0x5b/0x480 [ 757.612233] ? mark_held_locks+0x9e/0xe0 [ 757.613042] create_object.isra.0+0x3a/0xa20 [ 757.613914] ? kasan_unpoison+0x23/0x50 [ 757.614733] kmem_cache_alloc_bulk+0x387/0x670 [ 757.615626] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 757.616735] ? percpu_counter_add_batch+0xb4/0x170 [ 757.617717] io_submit_sqes.cold+0x20b/0x435 [ 757.618598] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 757.619597] ? find_held_lock+0x2c/0x110 [ 757.620414] ? io_async_task_func+0x560/0x560 [ 757.621336] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.622317] __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.623287] ? io_submit_sqes+0x8fc0/0x8fc0 [ 757.624148] ? wait_for_completion_io+0x270/0x270 [ 757.625120] ? lock_is_held_type+0xd7/0x130 [ 757.626159] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 757.626190] ? vfs_write+0x188/0xae0 [ 757.626222] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 757.626253] ? fput+0x2a/0x50 [ 757.626295] ? syscall_enter_from_user_mode+0x1d/0x50 [ 757.630829] do_syscall_64+0x3b/0x90 [ 757.630875] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.630899] RIP: 0033:0x7f22342afb19 [ 757.630918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.637238] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 757.638730] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 757.640124] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 757.641525] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.642920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.644338] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 757.645746] 15:17:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:17:34 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:17:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:17:34 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:34 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100005, 0x0, 0x0, 0x0, 0x0) 15:17:34 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 15:17:34 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x24}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000380)={@mcast1={0xf}, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x8, 0x2, @empty, @private2, 0x40, 0x8000, 0x20, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2050000}, 0x0) 15:17:34 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 757.871351] audit: type=1326 audit(1639063054.618:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6518 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0550e0b19 code=0x0 [ 757.921984] FAULT_INJECTION: forcing a failure. [ 757.921984] name failslab, interval 1, probability 0, space 0, times 0 [ 757.923364] CPU: 0 PID: 6523 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 757.924271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 757.925524] Call Trace: [ 757.925813] [ 757.926057] dump_stack_lvl+0x8b/0xb3 [ 757.926496] should_fail.cold+0x5/0xa [ 757.926911] ? create_object.isra.0+0x3a/0xa20 [ 757.927417] should_failslab+0x5/0x10 [ 757.927830] kmem_cache_alloc+0x5b/0x480 [ 757.928284] ? mark_held_locks+0x9e/0xe0 [ 757.928718] create_object.isra.0+0x3a/0xa20 [ 757.929188] ? kasan_unpoison+0x23/0x50 [ 757.929624] kmem_cache_alloc_bulk+0x387/0x670 [ 757.930114] io_submit_sqes.cold+0x20b/0x435 [ 757.930605] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 757.931140] ? find_held_lock+0x2c/0x110 [ 757.931644] ? io_async_task_func+0x560/0x560 [ 757.932134] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.932733] __do_sys_io_uring_enter+0xee0/0x1e80 [ 757.933305] ? io_submit_sqes+0x8fc0/0x8fc0 [ 757.933773] ? wait_for_completion_io+0x270/0x270 [ 757.934321] ? lock_is_held_type+0xd7/0x130 [ 757.934782] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 757.935388] ? vfs_write+0x188/0xae0 [ 757.935790] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 757.936393] ? fput+0x2a/0x50 [ 757.936733] ? syscall_enter_from_user_mode+0x1d/0x50 [ 757.937285] do_syscall_64+0x3b/0x90 [ 757.937683] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 757.938221] RIP: 0033:0x7f67feb28b19 [ 757.938639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 757.940678] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 757.941528] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 757.942313] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 757.943074] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 757.943852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.944657] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 757.945439] [ 757.972110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 758.705805] audit: type=1326 audit(1639063055.452:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6518 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0550e0b19 code=0x0 [ 758.756830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.196818] audit: type=1326 audit(1639063067.942:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6535 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0550e0b19 code=0x0 [ 771.202969] FAULT_INJECTION: forcing a failure. [ 771.202969] name failslab, interval 1, probability 0, space 0, times 0 [ 771.204188] CPU: 0 PID: 6539 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 771.204992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 771.206186] Call Trace: [ 771.206452] [ 771.206681] dump_stack_lvl+0x8b/0xb3 [ 771.207107] should_fail.cold+0x5/0xa [ 771.207516] ? create_object.isra.0+0x3a/0xa20 [ 771.208004] should_failslab+0x5/0x10 [ 771.208424] kmem_cache_alloc+0x5b/0x480 [ 771.208854] ? mark_held_locks+0x9e/0xe0 [ 771.209287] create_object.isra.0+0x3a/0xa20 [ 771.209751] ? kasan_unpoison+0x23/0x50 [ 771.210183] kmem_cache_alloc_bulk+0x387/0x670 [ 771.210663] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.211233] ? percpu_counter_add_batch+0xb4/0x170 [ 771.211755] io_submit_sqes.cold+0x20b/0x435 [ 771.212224] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 771.212743] ? find_held_lock+0x2c/0x110 [ 771.213169] ? io_async_task_func+0x560/0x560 [ 771.213630] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.214153] __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.214647] ? io_submit_sqes+0x8fc0/0x8fc0 [ 771.215100] ? wait_for_completion_io+0x270/0x270 [ 771.215584] ? lock_is_held_type+0xd7/0x130 [ 771.216033] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.216582] ? vfs_write+0x188/0xae0 [ 771.216974] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 771.217543] ? fput+0x2a/0x50 [ 771.217880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 771.218414] do_syscall_64+0x3b/0x90 15:17:47 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:17:47 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0) 15:17:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x24}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000380)={@mcast1={0xf}, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x3, 0x8, 0x2, @empty, @private2, 0x40, 0x8000, 0x20, 0x8}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb4, r1, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x2050000}, 0x0) 15:17:47 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 15:17:47 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:47 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 15:17:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:17:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x900, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 771.218813] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.219593] RIP: 0033:0x7f67feb28b19 [ 771.219977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.224647] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 771.225456] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 771.226201] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 771.226956] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.227700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.228434] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 771.229186] [ 771.256607] FAULT_INJECTION: forcing a failure. [ 771.256607] name failslab, interval 1, probability 0, space 0, times 0 [ 771.258975] CPU: 1 PID: 6548 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 771.260625] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 771.262866] Call Trace: [ 771.263386] [ 771.263832] dump_stack_lvl+0x8b/0xb3 [ 771.264613] should_fail.cold+0x5/0xa [ 771.265373] ? create_object.isra.0+0x3a/0xa20 [ 771.266278] should_failslab+0x5/0x10 [ 771.267040] kmem_cache_alloc+0x5b/0x480 [ 771.267835] ? mark_held_locks+0x9e/0xe0 [ 771.268671] create_object.isra.0+0x3a/0xa20 [ 771.269543] ? kasan_unpoison+0x23/0x50 [ 771.270342] kmem_cache_alloc_bulk+0x387/0x670 [ 771.271252] io_submit_sqes.cold+0x20b/0x435 [ 771.272142] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 771.273149] ? find_held_lock+0x2c/0x110 [ 771.273960] ? io_async_task_func+0x560/0x560 [ 771.274885] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.275870] __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.276858] ? io_submit_sqes+0x8fc0/0x8fc0 [ 771.277716] ? wait_for_completion_io+0x270/0x270 [ 771.278673] ? lock_is_held_type+0xd7/0x130 [ 771.279526] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.280632] ? vfs_write+0x188/0xae0 [ 771.281380] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 771.282463] ? fput+0x2a/0x50 [ 771.283100] ? syscall_enter_from_user_mode+0x1d/0x50 [ 771.284121] do_syscall_64+0x3b/0x90 [ 771.284884] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.285898] RIP: 0033:0x7f22342afb19 [ 771.286624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.290282] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 771.291787] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 771.293201] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 771.294603] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.296006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.297419] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 771.298849] [ 771.299855] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 15:17:48 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 15:17:48 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x10000f, 0x0, 0x0, 0x0, 0x0) 15:17:48 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 771.333291] FAULT_INJECTION: forcing a failure. [ 771.333291] name failslab, interval 1, probability 0, space 0, times 0 [ 771.334564] CPU: 0 PID: 6559 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 771.335435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 771.336627] Call Trace: [ 771.336901] [ 771.337136] dump_stack_lvl+0x8b/0xb3 [ 771.337563] should_fail.cold+0x5/0xa [ 771.337982] ? create_object.isra.0+0x3a/0xa20 [ 771.338488] should_failslab+0x5/0x10 [ 771.338911] kmem_cache_alloc+0x5b/0x480 [ 771.339344] ? mark_held_locks+0x9e/0xe0 [ 771.339795] create_object.isra.0+0x3a/0xa20 [ 771.340269] ? kasan_unpoison+0x23/0x50 [ 771.340707] kmem_cache_alloc_bulk+0x387/0x670 [ 771.341206] io_submit_sqes.cold+0x20b/0x435 [ 771.341697] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 771.342234] ? find_held_lock+0x2c/0x110 [ 771.342681] ? io_async_task_func+0x560/0x560 [ 771.343182] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.343724] __do_sys_io_uring_enter+0xee0/0x1e80 [ 771.344255] ? io_submit_sqes+0x8fc0/0x8fc0 [ 771.344728] ? wait_for_completion_io+0x270/0x270 [ 771.345245] ? lock_is_held_type+0xd7/0x130 [ 771.345716] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 771.346300] ? vfs_write+0x188/0xae0 [ 771.346698] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 771.347284] ? fput+0x2a/0x50 [ 771.347628] ? syscall_enter_from_user_mode+0x1d/0x50 [ 771.348187] do_syscall_64+0x3b/0x90 [ 771.348600] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 771.349147] RIP: 0033:0x7f67feb28b19 [ 771.349547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 771.351517] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 15:17:48 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 771.352344] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 771.353291] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 771.354040] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 771.354787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.355527] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 771.356247] 15:17:48 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:17:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:18:02 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000003a40)={0x7, 0x0, &(0x7f0000003a00)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x5) syz_io_uring_setup(0x65b3, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:18:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100115, 0x0, 0x0, 0x0, 0x0) 15:18:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 15:18:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 15:18:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xba00, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 786.054672] FAULT_INJECTION: forcing a failure. [ 786.054672] name failslab, interval 1, probability 0, space 0, times 0 [ 786.057607] CPU: 0 PID: 6587 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 786.059194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.061368] Call Trace: [ 786.061858] [ 786.062287] dump_stack_lvl+0x8b/0xb3 [ 786.063046] should_fail.cold+0x5/0xa [ 786.063794] ? create_object.isra.0+0x3a/0xa20 [ 786.064725] should_failslab+0x5/0x10 [ 786.065199] FAULT_INJECTION: forcing a failure. [ 786.065199] name failslab, interval 1, probability 0, space 0, times 0 [ 786.065484] kmem_cache_alloc+0x5b/0x480 [ 786.068466] ? mark_held_locks+0x9e/0xe0 [ 786.069288] create_object.isra.0+0x3a/0xa20 [ 786.070153] ? kasan_unpoison+0x23/0x50 [ 786.070944] kmem_cache_alloc_bulk+0x387/0x670 [ 786.071828] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.072903] ? percpu_counter_add_batch+0xb4/0x170 [ 786.073859] io_submit_sqes.cold+0x20b/0x435 [ 786.074735] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 786.075705] ? find_held_lock+0x2c/0x110 [ 786.076491] ? io_async_task_func+0x560/0x560 [ 786.077410] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.078384] __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.079342] ? io_submit_sqes+0x8fc0/0x8fc0 [ 786.080190] ? wait_for_completion_io+0x270/0x270 [ 786.081136] ? lock_is_held_type+0xd7/0x130 [ 786.081986] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.083063] ? vfs_write+0x188/0xae0 [ 786.083795] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.084886] ? fput+0x2a/0x50 [ 786.085519] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.086529] do_syscall_64+0x3b/0x90 [ 786.087268] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.088271] RIP: 0033:0x7f22342afb19 [ 786.089014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.092585] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 786.094072] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 786.095441] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 786.096821] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.098196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.099567] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 786.100972] [ 786.101425] CPU: 1 PID: 6589 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 786.103057] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.105330] Call Trace: [ 786.105833] [ 786.106270] dump_stack_lvl+0x8b/0xb3 [ 786.107041] should_fail.cold+0x5/0xa [ 786.107806] ? create_object.isra.0+0x3a/0xa20 [ 786.108737] should_failslab+0x5/0x10 [ 786.109494] kmem_cache_alloc+0x5b/0x480 [ 786.110283] ? mark_held_locks+0x9e/0xe0 [ 786.111095] create_object.isra.0+0x3a/0xa20 [ 786.111959] ? kasan_unpoison+0x23/0x50 [ 786.112765] kmem_cache_alloc_bulk+0x387/0x670 [ 786.113671] io_submit_sqes.cold+0x20b/0x435 [ 786.114567] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 786.115547] ? find_held_lock+0x2c/0x110 [ 786.116345] ? io_async_task_func+0x560/0x560 [ 786.117274] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.118259] __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.119225] ? io_submit_sqes+0x8fc0/0x8fc0 [ 786.120074] ? wait_for_completion_io+0x270/0x270 [ 786.121045] ? lock_is_held_type+0xd7/0x130 [ 786.121884] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.122956] ? vfs_write+0x188/0xae0 [ 786.123683] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.124764] ? fput+0x2a/0x50 [ 786.125388] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.126404] do_syscall_64+0x3b/0x90 [ 786.127159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.128159] RIP: 0033:0x7f67feb28b19 [ 786.128896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.132463] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 786.133939] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 786.135328] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 786.136718] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.138091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.139478] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 786.140907] 15:18:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:18:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100300, 0x0, 0x0, 0x0, 0x0) 15:18:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:03 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 15:18:03 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) [ 786.378756] FAULT_INJECTION: forcing a failure. [ 786.378756] name failslab, interval 1, probability 0, space 0, times 0 [ 786.381032] CPU: 0 PID: 6628 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 786.382630] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.384830] Call Trace: [ 786.385324] [ 786.385760] dump_stack_lvl+0x8b/0xb3 [ 786.386528] should_fail.cold+0x5/0xa [ 786.387289] ? create_object.isra.0+0x3a/0xa20 [ 786.388256] should_failslab+0x5/0x10 [ 786.389035] kmem_cache_alloc+0x5b/0x480 [ 786.390000] ? mark_held_locks+0x9e/0xe0 [ 786.390819] create_object.isra.0+0x3a/0xa20 [ 786.391750] ? kasan_unpoison+0x23/0x50 [ 786.392539] kmem_cache_alloc_bulk+0x387/0x670 [ 786.393470] io_submit_sqes.cold+0x20b/0x435 [ 786.394351] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 786.395327] ? find_held_lock+0x2c/0x110 [ 786.396118] ? io_async_task_func+0x560/0x560 [ 786.397033] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.398004] __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.398976] ? io_submit_sqes+0x8fc0/0x8fc0 [ 786.399832] ? wait_for_completion_io+0x270/0x270 [ 786.400804] ? lock_is_held_type+0xd7/0x130 [ 786.401634] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.402703] ? vfs_write+0x188/0xae0 [ 786.403433] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.404506] ? fput+0x2a/0x50 [ 786.405151] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.406158] do_syscall_64+0x3b/0x90 [ 786.406895] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.407890] RIP: 0033:0x7f67feb28b19 [ 786.408612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.412135] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 786.413615] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 786.415202] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 786.416900] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.418590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.420285] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 786.422032] [ 786.422299] FAULT_INJECTION: forcing a failure. [ 786.422299] name failslab, interval 1, probability 0, space 0, times 0 15:18:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 786.424994] CPU: 1 PID: 6630 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 786.426830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 786.429043] Call Trace: [ 786.429539] [ 786.429974] dump_stack_lvl+0x8b/0xb3 [ 786.430735] should_fail.cold+0x5/0xa [ 786.431490] ? create_object.isra.0+0x3a/0xa20 [ 786.432397] should_failslab+0x5/0x10 [ 786.433165] kmem_cache_alloc+0x5b/0x480 [ 786.433957] ? mark_held_locks+0x9e/0xe0 [ 786.434762] create_object.isra.0+0x3a/0xa20 [ 786.435627] ? kasan_unpoison+0x23/0x50 [ 786.436417] kmem_cache_alloc_bulk+0x387/0x670 [ 786.437341] io_submit_sqes.cold+0x20b/0x435 [ 786.438223] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 786.439205] ? find_held_lock+0x2c/0x110 [ 786.440010] ? io_async_task_func+0x560/0x560 [ 786.440922] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.441899] __do_sys_io_uring_enter+0xee0/0x1e80 [ 786.442869] ? io_submit_sqes+0x8fc0/0x8fc0 [ 786.443719] ? wait_for_completion_io+0x270/0x270 [ 786.444692] ? lock_is_held_type+0xd7/0x130 [ 786.445541] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 786.446624] ? vfs_write+0x188/0xae0 [ 786.447369] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 786.448444] ? fput+0x2a/0x50 [ 786.449085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.450104] do_syscall_64+0x3b/0x90 [ 786.450844] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 786.451850] RIP: 0033:0x7f22342afb19 [ 786.452572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.456617] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 786.458353] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 786.459978] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 786.461613] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.463237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.464878] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 786.466534] 15:18:03 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:18:03 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:18:03 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:17 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 801.051008] FAULT_INJECTION: forcing a failure. [ 801.051008] name failslab, interval 1, probability 0, space 0, times 0 [ 801.052301] CPU: 1 PID: 6663 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 801.053179] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 801.054375] Call Trace: [ 801.054648] [ 801.054885] dump_stack_lvl+0x8b/0xb3 [ 801.055304] should_fail.cold+0x5/0xa [ 801.055709] ? create_object.isra.0+0x3a/0xa20 [ 801.056186] should_failslab+0x5/0x10 [ 801.056598] kmem_cache_alloc+0x5b/0x480 [ 801.057042] ? mark_held_locks+0x9e/0xe0 [ 801.057474] create_object.isra.0+0x3a/0xa20 [ 801.057946] ? kasan_unpoison+0x23/0x50 [ 801.058381] kmem_cache_alloc_bulk+0x387/0x670 [ 801.058859] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.059438] ? percpu_counter_add_batch+0xb4/0x170 [ 801.059964] io_submit_sqes.cold+0x20b/0x435 [ 801.060441] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 801.060983] ? find_held_lock+0x2c/0x110 [ 801.061413] ? io_async_task_func+0x560/0x560 [ 801.061901] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.062433] __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.062951] ? io_submit_sqes+0x8fc0/0x8fc0 [ 801.063407] ? wait_for_completion_io+0x270/0x270 [ 801.063922] ? lock_is_held_type+0xd7/0x130 [ 801.064379] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.064973] ? vfs_write+0x188/0xae0 [ 801.065369] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.065955] ? fput+0x2a/0x50 [ 801.066296] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.066845] do_syscall_64+0x3b/0x90 [ 801.067253] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.067800] RIP: 0033:0x7f22342afb19 [ 801.068201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.070121] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 801.070922] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 801.071667] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 801.072409] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.073167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.073909] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 801.074672] [ 801.076000] FAULT_INJECTION: forcing a failure. [ 801.076000] name failslab, interval 1, probability 0, space 0, times 0 [ 801.077248] CPU: 1 PID: 6656 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 801.078110] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 801.079283] Call Trace: [ 801.079548] [ 801.079782] dump_stack_lvl+0x8b/0xb3 [ 801.080192] should_fail.cold+0x5/0xa [ 801.080602] ? create_object.isra.0+0x3a/0xa20 [ 801.081100] should_failslab+0x5/0x10 [ 801.081505] kmem_cache_alloc+0x5b/0x480 [ 801.081930] ? mark_held_locks+0x9e/0xe0 [ 801.082358] create_object.isra.0+0x3a/0xa20 [ 801.082827] ? kasan_unpoison+0x23/0x50 [ 801.083264] kmem_cache_alloc_bulk+0x387/0x670 [ 801.083755] io_submit_sqes.cold+0x20b/0x435 [ 801.084226] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 801.084766] ? find_held_lock+0x2c/0x110 [ 801.085211] ? io_async_task_func+0x560/0x560 [ 801.085709] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.086239] __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.086763] ? io_submit_sqes+0x8fc0/0x8fc0 [ 801.087225] ? wait_for_completion_io+0x270/0x270 [ 801.087739] ? lock_is_held_type+0xd7/0x130 [ 801.088197] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.088779] ? vfs_write+0x188/0xae0 [ 801.089178] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.089766] ? fput+0x2a/0x50 [ 801.090106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.090659] do_syscall_64+0x3b/0x90 [ 801.091061] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.091609] RIP: 0033:0x7f67feb28b19 [ 801.092000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.093942] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 801.094230] loop3: detected capacity change from 0 to 1024 [ 801.094735] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 801.094745] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 801.094753] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.094761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.094769] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 801.099594] 15:18:17 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x2, 0x0, 0x0, 0x0) 15:18:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) 15:18:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:17 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x32}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x17}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'ext4\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '\'-#\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d00)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa0, r3, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x368758b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51806c19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaabe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3c9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x58, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ee4b89a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78f4ffbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ba63acd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b73268c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f7200d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4228de11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30123e23}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d0f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e33323937363736343400"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000def361b116dd4bb681391964ccf077da010040000c00000000000000d0f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d0f4655fd0f4655fd0f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d0f4655fd2f4655fd2f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="20000000100de17a100de17a00000000d0f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d0f4655fd0f4655fd0f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d0f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000d0f4655fd0f4655fd0f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d0f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d2f4655fd2f4655fd2f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000003f81d1a200000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000002000000600000000000000000000000000000000000000000000000000000000000000000000000000000009caef32e00000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d2f4655fd2f4655fd2f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3332393736373634342f66696c65302f66696c6530000000000000000000000000000000000000000000000ae0cdf100000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="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", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d2f4655fd2f4655fd2f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000008880d39500000000000000000000000000000000000000000000000020000000100de17a100de17a100de17ad2f4655f100de17a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000e925f2be0000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00)) 15:18:17 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 15:18:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:17 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 801.168539] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 15:18:17 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x5, 0x0, 0x0, 0x0) 15:18:17 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 15:18:17 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) [ 801.219262] FAULT_INJECTION: forcing a failure. [ 801.219262] name failslab, interval 1, probability 0, space 0, times 0 [ 801.220478] CPU: 1 PID: 6686 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 801.221336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 801.222510] Call Trace: [ 801.222777] [ 801.223015] dump_stack_lvl+0x8b/0xb3 [ 801.223427] should_fail.cold+0x5/0xa [ 801.223824] ? io_setup_async_rw+0x199/0x620 [ 801.224287] should_failslab+0x5/0x10 [ 801.224689] __kmalloc+0x72/0x330 [ 801.225058] io_setup_async_rw+0x199/0x620 [ 801.225502] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.226078] io_write+0x941/0xbe0 [ 801.226441] ? __lock_acquire+0xbac/0x5b70 [ 801.226886] ? io_read+0xff0/0xff0 [ 801.227274] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 801.227820] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 801.228376] io_issue_sqe+0xe8a/0x6980 [ 801.228788] ? lock_release+0x3b2/0x6f0 [ 801.229219] ? lock_downgrade+0x6d0/0x6d0 [ 801.229651] ? find_held_lock+0x2c/0x110 [ 801.230071] ? io_openat2+0xbc0/0xbc0 [ 801.230479] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 801.231064] ? lock_is_held_type+0xd7/0x130 [ 801.231529] io_submit_sqes+0x16ba/0x8fc0 [ 801.231976] ? find_held_lock+0x2c/0x110 [ 801.232407] ? io_async_task_func+0x560/0x560 [ 801.232908] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.233425] __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.233951] ? io_submit_sqes+0x8fc0/0x8fc0 [ 801.234405] ? wait_for_completion_io+0x270/0x270 [ 801.234913] ? lock_is_held_type+0xd7/0x130 [ 801.235369] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.235936] ? vfs_write+0x188/0xae0 [ 801.236326] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.236919] ? fput+0x2a/0x50 [ 801.237263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.237815] do_syscall_64+0x3b/0x90 [ 801.238220] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.238764] RIP: 0033:0x7f22342afb19 [ 801.239157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.241114] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 801.241911] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 801.242671] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 801.243420] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.244168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.244924] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 801.245690] 15:18:17 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 15:18:18 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 801.368288] FAULT_INJECTION: forcing a failure. [ 801.368288] name failslab, interval 1, probability 0, space 0, times 0 [ 801.369531] CPU: 1 PID: 6704 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 801.370404] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 801.371618] Call Trace: [ 801.371900] [ 801.372149] dump_stack_lvl+0x8b/0xb3 [ 801.372557] should_fail.cold+0x5/0xa [ 801.372967] ? io_setup_async_rw+0x199/0x620 [ 801.373443] should_failslab+0x5/0x10 [ 801.373848] __kmalloc+0x72/0x330 [ 801.374213] io_setup_async_rw+0x199/0x620 [ 801.374659] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.375248] io_write+0x941/0xbe0 [ 801.375616] ? __lock_acquire+0xbac/0x5b70 [ 801.376065] ? io_read+0xff0/0xff0 [ 801.376456] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 801.377023] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 801.377580] io_issue_sqe+0xe8a/0x6980 [ 801.378003] ? lock_release+0x3b2/0x6f0 [ 801.378424] ? lock_downgrade+0x6d0/0x6d0 [ 801.378867] ? find_held_lock+0x2c/0x110 [ 801.379300] ? io_openat2+0xbc0/0xbc0 [ 801.379720] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 801.380317] ? lock_is_held_type+0xd7/0x130 [ 801.380790] io_submit_sqes+0x16ba/0x8fc0 [ 801.381265] ? find_held_lock+0x2c/0x110 [ 801.381718] ? io_async_task_func+0x560/0x560 [ 801.382222] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.382745] __do_sys_io_uring_enter+0xee0/0x1e80 [ 801.383276] ? io_submit_sqes+0x8fc0/0x8fc0 [ 801.383741] ? wait_for_completion_io+0x270/0x270 [ 801.384272] ? lock_is_held_type+0xd7/0x130 [ 801.384740] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 801.385348] ? vfs_write+0x188/0xae0 [ 801.385753] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 801.386347] ? fput+0x2a/0x50 [ 801.386692] ? syscall_enter_from_user_mode+0x1d/0x50 [ 801.387246] do_syscall_64+0x3b/0x90 [ 801.387649] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 801.388203] RIP: 0033:0x7f67feb28b19 [ 801.388598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 801.390562] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 801.391379] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 801.392138] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 801.392905] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 801.393667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.394438] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 801.395213] 15:18:32 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 15:18:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:32 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 15:18:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:32 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) 15:18:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x11, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:32 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) 15:18:32 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x8, 0x0, 0x0, 0x0) [ 815.972931] FAULT_INJECTION: forcing a failure. [ 815.972931] name failslab, interval 1, probability 0, space 0, times 0 [ 815.975252] CPU: 1 PID: 6717 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 815.976874] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 815.979114] Call Trace: [ 815.979622] [ 815.980063] dump_stack_lvl+0x8b/0xb3 [ 815.980834] should_fail.cold+0x5/0xa [ 815.981619] ? create_object.isra.0+0x3a/0xa20 [ 815.982542] should_failslab+0x5/0x10 [ 815.983312] kmem_cache_alloc+0x5b/0x480 [ 815.984135] create_object.isra.0+0x3a/0xa20 [ 815.985028] ? kasan_unpoison+0x23/0x50 [ 815.985847] __kmalloc+0x1ed/0x330 [ 815.986565] io_setup_async_rw+0x199/0x620 [ 815.987412] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 815.988511] io_write+0x941/0xbe0 [ 815.989228] ? __lock_acquire+0xbac/0x5b70 [ 815.990073] ? io_read+0xff0/0xff0 [ 815.990811] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 815.991861] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 815.992914] io_issue_sqe+0xe8a/0x6980 [ 815.993710] ? lock_release+0x3b2/0x6f0 [ 815.994501] ? lock_downgrade+0x6d0/0x6d0 [ 815.995323] ? find_held_lock+0x2c/0x110 [ 815.996127] ? io_openat2+0xbc0/0xbc0 [ 815.996900] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 815.997998] ? lock_is_held_type+0xd7/0x130 [ 815.998863] io_submit_sqes+0x16ba/0x8fc0 [ 815.999716] ? find_held_lock+0x2c/0x110 [ 816.000521] ? io_async_task_func+0x560/0x560 [ 816.001451] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 816.002454] __do_sys_io_uring_enter+0xee0/0x1e80 [ 816.003425] ? io_submit_sqes+0x8fc0/0x8fc0 [ 816.004292] ? wait_for_completion_io+0x270/0x270 [ 816.005249] ? lock_is_held_type+0xd7/0x130 [ 816.006108] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 816.007193] ? vfs_write+0x188/0xae0 [ 816.007941] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 816.009028] ? fput+0x2a/0x50 [ 816.009683] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.010716] do_syscall_64+0x3b/0x90 [ 816.011465] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 816.012449] FAULT_INJECTION: forcing a failure. [ 816.012449] name failslab, interval 1, probability 0, space 0, times 0 [ 816.012480] RIP: 0033:0x7f22342afb19 [ 816.014452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.018081] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 816.019570] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 816.020956] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 816.022622] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.024340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.025887] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 816.027371] [ 816.027829] CPU: 0 PID: 6714 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 816.028677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 816.029852] Call Trace: [ 816.030137] [ 816.030368] dump_stack_lvl+0x8b/0xb3 [ 816.030776] should_fail.cold+0x5/0xa [ 816.031185] ? create_object.isra.0+0x3a/0xa20 [ 816.031666] should_failslab+0x5/0x10 [ 816.032069] kmem_cache_alloc+0x5b/0x480 [ 816.032489] create_object.isra.0+0x3a/0xa20 [ 816.032955] ? kasan_unpoison+0x23/0x50 [ 816.033376] __kmalloc+0x1ed/0x330 [ 816.033743] io_setup_async_rw+0x199/0x620 [ 816.034178] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 816.034751] io_write+0x941/0xbe0 [ 816.035109] ? __lock_acquire+0xbac/0x5b70 [ 816.035542] ? io_read+0xff0/0xff0 [ 816.035927] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 816.036463] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 816.037004] io_issue_sqe+0xe8a/0x6980 [ 816.037432] ? lock_release+0x3b2/0x6f0 [ 816.037845] ? lock_downgrade+0x6d0/0x6d0 [ 816.038267] ? find_held_lock+0x2c/0x110 [ 816.038684] ? io_openat2+0xbc0/0xbc0 [ 816.039082] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 816.039646] ? lock_is_held_type+0xd7/0x130 [ 816.040095] io_submit_sqes+0x16ba/0x8fc0 [ 816.040539] ? find_held_lock+0x2c/0x110 [ 816.040956] ? io_async_task_func+0x560/0x560 [ 816.041444] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 816.041965] __do_sys_io_uring_enter+0xee0/0x1e80 [ 816.042472] ? io_submit_sqes+0x8fc0/0x8fc0 [ 816.042919] ? wait_for_completion_io+0x270/0x270 [ 816.043416] ? lock_is_held_type+0xd7/0x130 [ 816.043862] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 816.044424] ? vfs_write+0x188/0xae0 [ 816.044816] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 816.045389] ? fput+0x2a/0x50 [ 816.045726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.046275] do_syscall_64+0x3b/0x90 [ 816.046679] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 816.047204] RIP: 0033:0x7f67feb28b19 [ 816.047578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.049452] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 816.050223] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 816.050939] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 816.051666] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.052388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 816.053135] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 816.053875] 15:18:32 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x60, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:32 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x10, 0x0, 0x0, 0x0) 15:18:44 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 15:18:44 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:18:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2ff, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x11, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 15:18:44 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x60, 0x0, 0x0, 0x0) 15:18:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5028, 0x2, 0x1, 0x1f1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) [ 827.385617] FAULT_INJECTION: forcing a failure. [ 827.385617] name failslab, interval 1, probability 0, space 0, times 0 [ 827.386887] CPU: 0 PID: 6762 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.387737] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.388914] Call Trace: [ 827.389177] [ 827.389422] dump_stack_lvl+0x8b/0xb3 [ 827.389841] should_fail.cold+0x5/0xa [ 827.390242] ? io_issue_sqe+0x6ea/0x6980 [ 827.390667] ? io_arm_poll_handler+0x22f/0x7a0 [ 827.391159] should_failslab+0x5/0x10 [ 827.391561] kmem_cache_alloc_trace+0x55/0x3c0 [ 827.392042] ? lock_release+0x3b2/0x6f0 [ 827.392470] io_arm_poll_handler+0x22f/0x7a0 [ 827.392936] ? io_write+0xbe0/0xbe0 [ 827.393327] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 827.393907] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 827.394392] io_submit_sqes+0x7cd4/0x8fc0 [ 827.394845] ? find_held_lock+0x2c/0x110 [ 827.395265] ? io_async_task_func+0x560/0x560 [ 827.395756] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.396276] __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.396795] ? io_submit_sqes+0x8fc0/0x8fc0 [ 827.397269] ? wait_for_completion_io+0x270/0x270 [ 827.397788] ? lock_is_held_type+0xd7/0x130 [ 827.398243] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.398810] ? vfs_write+0x188/0xae0 [ 827.399200] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.399773] ? fput+0x2a/0x50 [ 827.400106] ? syscall_enter_from_user_mode+0x1d/0x50 [ 827.400642] do_syscall_64+0x3b/0x90 [ 827.401048] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.401592] RIP: 0033:0x7f22342afb19 [ 827.401978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.403867] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.404656] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 827.405416] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.406154] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.406887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.407622] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 827.408369] [ 827.413425] FAULT_INJECTION: forcing a failure. [ 827.413425] name failslab, interval 1, probability 0, space 0, times 0 [ 827.414655] CPU: 0 PID: 6767 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.415500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.416667] Call Trace: [ 827.416935] [ 827.417163] dump_stack_lvl+0x8b/0xb3 [ 827.417571] should_fail.cold+0x5/0xa [ 827.417981] ? io_issue_sqe+0x6ea/0x6980 [ 827.418405] ? io_arm_poll_handler+0x22f/0x7a0 [ 827.418883] should_failslab+0x5/0x10 [ 827.419289] kmem_cache_alloc_trace+0x55/0x3c0 [ 827.419762] ? lock_release+0x3b2/0x6f0 [ 827.420182] io_arm_poll_handler+0x22f/0x7a0 [ 827.420651] ? io_write+0xbe0/0xbe0 [ 827.421037] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 827.421620] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 827.422104] io_submit_sqes+0x7cd4/0x8fc0 [ 827.422548] ? find_held_lock+0x2c/0x110 [ 827.422972] ? io_async_task_func+0x560/0x560 [ 827.423464] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.423992] __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.424509] ? io_submit_sqes+0x8fc0/0x8fc0 [ 827.424981] ? wait_for_completion_io+0x270/0x270 [ 827.425500] ? lock_is_held_type+0xd7/0x130 [ 827.425946] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.426518] ? vfs_write+0x188/0xae0 [ 827.426908] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.427471] ? fput+0x2a/0x50 [ 827.427804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 827.428338] do_syscall_64+0x3b/0x90 [ 827.428731] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.429271] RIP: 0033:0x7f67feb28b19 [ 827.429647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.431528] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.432313] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 827.433049] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.433803] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.434542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.435270] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 827.436016] 15:18:44 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:18:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x10, 0x0, 0x0, 0x0) 15:18:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x300, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x60, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 15:18:44 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 15:18:44 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xf0, 0x0, 0x0, 0x0) 15:18:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 827.552869] FAULT_INJECTION: forcing a failure. [ 827.552869] name failslab, interval 1, probability 0, space 0, times 0 [ 827.554142] CPU: 0 PID: 6782 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.554998] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.556177] Call Trace: [ 827.556450] [ 827.556689] dump_stack_lvl+0x8b/0xb3 [ 827.557116] should_fail.cold+0x5/0xa [ 827.557538] ? io_setup_async_rw+0x199/0x620 [ 827.558022] should_failslab+0x5/0x10 [ 827.558434] __kmalloc+0x72/0x330 [ 827.558807] io_setup_async_rw+0x199/0x620 [ 827.559255] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.559850] io_write+0x941/0xbe0 [ 827.560223] ? __lock_acquire+0xbac/0x5b70 [ 827.560670] ? io_read+0xff0/0xff0 [ 827.561072] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.561629] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.562191] io_issue_sqe+0xe8a/0x6980 [ 827.562617] ? lock_release+0x3b2/0x6f0 [ 827.563042] ? lock_downgrade+0x6d0/0x6d0 [ 827.563479] ? find_held_lock+0x2c/0x110 [ 827.563910] ? io_openat2+0xbc0/0xbc0 [ 827.564317] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 827.564892] ? lock_is_held_type+0xd7/0x130 [ 827.565369] io_submit_sqes+0x16ba/0x8fc0 [ 827.565828] ? find_held_lock+0x2c/0x110 [ 827.566250] ? io_async_task_func+0x560/0x560 [ 827.566743] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.567272] __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.567791] ? io_submit_sqes+0x8fc0/0x8fc0 [ 827.568247] ? wait_for_completion_io+0x270/0x270 [ 827.568762] ? lock_is_held_type+0xd7/0x130 [ 827.569230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.569810] ? vfs_write+0x188/0xae0 [ 827.570208] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.570793] ? fput+0x2a/0x50 [ 827.571130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 827.571674] do_syscall_64+0x3b/0x90 [ 827.572076] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.572610] RIP: 0033:0x7f67feb28b19 [ 827.572995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.574914] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.575711] RAX: ffffffffffffffda RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 827.576449] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.577191] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.577933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.578682] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 827.579432] [ 827.581351] FAULT_INJECTION: forcing a failure. [ 827.581351] name failslab, interval 1, probability 0, space 0, times 0 [ 827.582551] CPU: 0 PID: 6783 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.583407] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.584568] Call Trace: [ 827.584836] [ 827.585069] dump_stack_lvl+0x8b/0xb3 [ 827.585485] should_fail.cold+0x5/0xa [ 827.585891] ? io_setup_async_rw+0x199/0x620 [ 827.586353] should_failslab+0x5/0x10 [ 827.586757] __kmalloc+0x72/0x330 [ 827.587121] io_setup_async_rw+0x199/0x620 [ 827.587567] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.588150] io_write+0x941/0xbe0 [ 827.588519] ? __lock_acquire+0xbac/0x5b70 [ 827.588964] ? io_read+0xff0/0xff0 [ 827.589360] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.589916] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.590472] io_issue_sqe+0xe8a/0x6980 [ 827.590891] ? lock_release+0x3b2/0x6f0 [ 827.591332] ? lock_downgrade+0x6d0/0x6d0 [ 827.591789] ? find_held_lock+0x2c/0x110 [ 827.592245] ? io_openat2+0xbc0/0xbc0 [ 827.592673] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 827.593311] ? lock_is_held_type+0xd7/0x130 [ 827.593792] io_submit_sqes+0x16ba/0x8fc0 [ 827.594271] ? find_held_lock+0x2c/0x110 [ 827.594714] ? io_async_task_func+0x560/0x560 [ 827.595209] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.595756] __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.596302] ? io_submit_sqes+0x8fc0/0x8fc0 [ 827.596758] ? wait_for_completion_io+0x270/0x270 [ 827.597285] ? lock_is_held_type+0xd7/0x130 [ 827.597763] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.598365] ? vfs_write+0x188/0xae0 [ 827.598773] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.599375] ? fput+0x2a/0x50 [ 827.599726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 827.600271] do_syscall_64+0x3b/0x90 [ 827.600666] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.601239] RIP: 0033:0x7f22342afb19 [ 827.601643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.603637] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 15:18:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x500, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 827.604474] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 827.605449] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.606215] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.606995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.607740] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 827.608532] 15:18:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2ff, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x60, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:44 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 15:18:44 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 15:18:44 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000140)) 15:18:44 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100115, 0x0, 0x0, 0x0, 0x0) 15:18:44 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x300, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 827.737595] FAULT_INJECTION: forcing a failure. [ 827.737595] name failslab, interval 1, probability 0, space 0, times 0 [ 827.738939] CPU: 0 PID: 6803 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.739808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.740986] Call Trace: [ 827.741259] [ 827.741501] dump_stack_lvl+0x8b/0xb3 [ 827.741922] should_fail.cold+0x5/0xa [ 827.742343] ? create_io_worker+0xf6/0x620 [ 827.742803] should_failslab+0x5/0x10 [ 827.743214] kmem_cache_alloc_node_trace+0x59/0x3f0 [ 827.743746] create_io_worker+0xf6/0x620 [ 827.744182] io_wqe_enqueue+0x692/0xb90 [ 827.744613] ? create_io_worker+0x620/0x620 [ 827.745072] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 827.745650] ? lock_is_held_type+0xd7/0x130 [ 827.746113] io_queue_async_work+0x271/0x5a0 [ 827.746602] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 827.747101] io_req_task_submit+0x3b3/0x530 [ 827.747573] tctx_task_work+0x1d7/0x750 [ 827.748003] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 827.748579] ? rwlock_bug.part.0+0x90/0x90 [ 827.749031] ? _raw_spin_unlock_irq+0x1f/0x40 [ 827.749546] task_work_run+0xe2/0x1a0 [ 827.749964] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 827.750484] syscall_exit_to_user_mode+0x19/0x50 [ 827.750989] do_syscall_64+0x48/0x90 [ 827.751401] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.751953] RIP: 0033:0x7f67feb28b19 [ 827.752357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.754326] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.755136] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 827.755889] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.756639] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.757405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.758154] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 827.758922] [ 827.766462] FAULT_INJECTION: forcing a failure. [ 827.766462] name failslab, interval 1, probability 0, space 0, times 0 [ 827.767721] CPU: 0 PID: 6804 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 827.768620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 827.769833] Call Trace: [ 827.770113] [ 827.770350] dump_stack_lvl+0x8b/0xb3 [ 827.770771] should_fail.cold+0x5/0xa [ 827.771186] ? create_object.isra.0+0x3a/0xa20 [ 827.771685] should_failslab+0x5/0x10 [ 827.772100] kmem_cache_alloc+0x5b/0x480 [ 827.772541] create_object.isra.0+0x3a/0xa20 [ 827.773029] ? kasan_unpoison+0x23/0x50 [ 827.773459] __kmalloc+0x1ed/0x330 [ 827.773846] io_setup_async_rw+0x199/0x620 [ 827.774289] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.774876] io_write+0x941/0xbe0 [ 827.775248] ? __lock_acquire+0xbac/0x5b70 [ 827.775697] ? io_read+0xff0/0xff0 [ 827.776101] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.776650] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 827.777241] io_issue_sqe+0xe8a/0x6980 [ 827.777667] ? lock_release+0x3b2/0x6f0 [ 827.778089] ? lock_downgrade+0x6d0/0x6d0 [ 827.778544] ? find_held_lock+0x2c/0x110 [ 827.778978] ? io_openat2+0xbc0/0xbc0 [ 827.779399] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 827.779986] ? lock_is_held_type+0xd7/0x130 [ 827.780454] io_submit_sqes+0x16ba/0x8fc0 [ 827.780920] ? find_held_lock+0x2c/0x110 [ 827.781367] ? io_async_task_func+0x560/0x560 [ 827.781872] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.782409] __do_sys_io_uring_enter+0xee0/0x1e80 [ 827.782947] ? io_submit_sqes+0x8fc0/0x8fc0 [ 827.783420] ? wait_for_completion_io+0x270/0x270 [ 827.783942] ? lock_is_held_type+0xd7/0x130 [ 827.784405] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 827.785002] ? vfs_write+0x188/0xae0 [ 827.785422] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 827.786018] ? fput+0x2a/0x50 [ 827.786378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 827.786944] do_syscall_64+0x3b/0x90 [ 827.787369] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 827.787923] RIP: 0033:0x7f22342afb19 [ 827.788345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 827.790338] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.791179] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 827.791979] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 827.792768] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 827.793521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.794277] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 827.795046] 15:18:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5dc, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 839.243400] FAULT_INJECTION: forcing a failure. [ 839.243400] name failslab, interval 1, probability 0, space 0, times 0 [ 839.244669] CPU: 0 PID: 6823 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.245564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.246772] Call Trace: [ 839.247046] [ 839.247278] dump_stack_lvl+0x8b/0xb3 [ 839.247704] should_fail.cold+0x5/0xa [ 839.248109] ? create_object.isra.0+0x3a/0xa20 [ 839.248606] should_failslab+0x5/0x10 [ 839.249013] kmem_cache_alloc+0x5b/0x480 [ 839.249461] create_object.isra.0+0x3a/0xa20 [ 839.249930] ? kasan_unpoison+0x23/0x50 [ 839.250362] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 839.250917] create_io_worker+0xf6/0x620 [ 839.251365] io_wqe_enqueue+0x692/0xb90 [ 839.251794] ? create_io_worker+0x620/0x620 [ 839.252267] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 839.252829] ? lock_is_held_type+0xd7/0x130 [ 839.253296] io_queue_async_work+0x271/0x5a0 [ 839.253777] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 839.254257] io_req_task_submit+0x3b3/0x530 [ 839.254718] tctx_task_work+0x1d7/0x750 [ 839.255141] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 839.255702] ? rwlock_bug.part.0+0x90/0x90 [ 839.256149] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.256625] task_work_run+0xe2/0x1a0 [ 839.257037] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 839.257571] syscall_exit_to_user_mode+0x19/0x50 [ 839.258065] do_syscall_64+0x48/0x90 [ 839.258460] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.259002] RIP: 0033:0x7f22342afb19 [ 839.259390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.261305] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.262111] RAX: 0000000000000001 RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 839.262856] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.263629] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.264374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.265122] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 839.265899] [ 839.269351] EXT4-fs warning (device sda): verify_group_input:157: Reserved blocks too high (44288) 15:18:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x26e1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) uselib(&(0x7f00000001c0)='.\x00') ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x0, 0x10000000}}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40286608, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000000000000000000000d62101bde500000000000000000000000000040000000000ad"]) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000200)={0x3, 0x0, [0x0, 0x0, 0x0]}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x7ff, 0x3, 0x9, 0x2, 0x9}) pwrite64(r0, &(0x7f0000000100)="6b4841807b41e8cd21386f80d6f57627872d76ee952781bee7714a6db98660bb7bf534fbcd77f0033574b515e0f7136d072a44965b7e09f6bab62bb525e6a30c40734adf8b69edfbe5b61a6382381fc66d85633b05e77d49db2ad2f558be20289d200aca1f2c1ee2596feacbf529a8bd98ef45f73846a8e3ec5cc43eed9fdf18acc5", 0x82, 0x5) 15:18:55 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x115, 0x0, 0x0, 0x0) 15:18:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x500, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:55 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 15:18:55 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 15:18:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:18:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x500, 0x0, 0x0, 0x0) [ 839.297624] FAULT_INJECTION: forcing a failure. [ 839.297624] name failslab, interval 1, probability 0, space 0, times 0 [ 839.298886] CPU: 0 PID: 6836 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.299767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.300968] Call Trace: [ 839.301238] [ 839.301483] dump_stack_lvl+0x8b/0xb3 [ 839.301896] should_fail.cold+0x5/0xa [ 839.302314] should_failslab+0x5/0x10 [ 839.302743] kmem_cache_alloc_bulk+0x47/0x670 [ 839.303223] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 839.303814] ? percpu_counter_add_batch+0xb4/0x170 [ 839.304338] io_submit_sqes.cold+0x20b/0x435 [ 839.304818] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 839.305347] ? find_held_lock+0x2c/0x110 [ 839.305796] ? io_async_task_func+0x560/0x560 [ 839.306278] ? lock_release+0x3b2/0x6f0 [ 839.306704] ? __do_sys_io_uring_enter+0x359/0x1e80 [ 839.307234] ? lock_downgrade+0x6d0/0x6d0 [ 839.307676] ? __fget_files+0x2ef/0x4c0 [ 839.308105] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.308629] __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.309142] ? io_submit_sqes+0x8fc0/0x8fc0 [ 839.309616] ? wait_for_completion_io+0x270/0x270 [ 839.310127] ? lock_is_held_type+0xd7/0x130 [ 839.310585] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 839.311153] ? vfs_write+0x188/0xae0 [ 839.311187] FAULT_INJECTION: forcing a failure. [ 839.311187] name failslab, interval 1, probability 0, space 0, times 0 [ 839.311545] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 839.314299] ? fput+0x2a/0x50 [ 839.314631] ? syscall_enter_from_user_mode+0x1d/0x50 [ 839.315179] do_syscall_64+0x3b/0x90 [ 839.315578] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.316112] RIP: 0033:0x7fec339e7b19 [ 839.316499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.318424] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.319219] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 839.319962] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.320744] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.321497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.322254] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 839.323023] [ 839.323264] CPU: 1 PID: 6837 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.324880] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.327099] Call Trace: [ 839.327599] [ 839.328034] dump_stack_lvl+0x8b/0xb3 [ 839.328802] should_fail.cold+0x5/0xa [ 839.329563] ? create_object.isra.0+0x3a/0xa20 [ 839.330470] should_failslab+0x5/0x10 [ 839.331228] kmem_cache_alloc+0x5b/0x480 [ 839.332029] create_object.isra.0+0x3a/0xa20 [ 839.332894] ? kasan_unpoison+0x23/0x50 [ 839.333710] kmem_cache_alloc_node_trace+0x256/0x3f0 [ 839.334711] create_io_worker+0xf6/0x620 [ 839.335522] io_wqe_enqueue+0x692/0xb90 [ 839.336318] ? create_io_worker+0x620/0x620 [ 839.337168] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 839.338190] ? lock_is_held_type+0xd7/0x130 [ 839.339041] io_queue_async_work+0x271/0x5a0 [ 839.339916] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 839.340813] io_req_task_submit+0x3b3/0x530 [ 839.341670] tctx_task_work+0x1d7/0x750 [ 839.342466] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 839.343542] ? rwlock_bug.part.0+0x90/0x90 [ 839.344374] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.345269] task_work_run+0xe2/0x1a0 [ 839.346059] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 839.347023] syscall_exit_to_user_mode+0x19/0x50 [ 839.347949] do_syscall_64+0x48/0x90 [ 839.348694] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.349709] RIP: 0033:0x7f67feb28b19 [ 839.350428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.354011] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.355487] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 839.356875] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.358278] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.359670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.361055] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 839.362516] 15:18:56 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 839.417044] FAULT_INJECTION: forcing a failure. [ 839.417044] name failslab, interval 1, probability 0, space 0, times 0 [ 839.418428] CPU: 0 PID: 6846 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.419342] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.420558] Call Trace: [ 839.420849] [ 839.421097] dump_stack_lvl+0x8b/0xb3 [ 839.421527] should_fail.cold+0x5/0xa [ 839.421939] ? create_object.isra.0+0x3a/0xa20 [ 839.422429] should_failslab+0x5/0x10 [ 839.422844] kmem_cache_alloc+0x5b/0x480 [ 839.423275] create_object.isra.0+0x3a/0xa20 [ 839.423756] ? kasan_unpoison+0x23/0x50 [ 839.424189] kmem_cache_alloc_trace+0x22e/0x3c0 [ 839.424693] io_arm_poll_handler+0x22f/0x7a0 [ 839.425171] ? io_write+0xbe0/0xbe0 [ 839.425573] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 839.426180] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 839.426660] io_submit_sqes+0x7cd4/0x8fc0 [ 839.427118] ? find_held_lock+0x2c/0x110 [ 839.427546] ? io_async_task_func+0x560/0x560 [ 839.428033] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.428561] __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.429077] ? io_submit_sqes+0x8fc0/0x8fc0 [ 839.429555] ? wait_for_completion_io+0x270/0x270 [ 839.430063] ? lock_is_held_type+0xd7/0x130 [ 839.430521] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 839.431106] ? vfs_write+0x188/0xae0 [ 839.431500] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 839.432086] ? fput+0x2a/0x50 [ 839.432426] ? syscall_enter_from_user_mode+0x1d/0x50 [ 839.432975] do_syscall_64+0x3b/0x90 [ 839.433383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.433954] RIP: 0033:0x7f22342afb19 [ 839.434337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.436255] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.437067] RAX: ffffffffffffffda RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 839.437825] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.438570] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.439314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.440062] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 839.440829] 15:18:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:18:56 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3c00000000000000000000000000000000f3fd689ecfde18f006900000000e00b002614e7e0b0000000000000000"]}) fchmod(r0, 0x8) r1 = syz_io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_dev$evdev(&(0x7f0000000980), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r5, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) syz_mount_image$tmpfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1f, 0xa, &(0x7f00000009c0)=[{&(0x7f0000000280)="40bfc71a6f18bb9986aab264c0de251426f86fae938329cb19545708245f7292a13d3b7147912be69c4665773321b305304089f556c057e82e723ae174b4bd023d3b4a4fc7e3e5b3b20e37b0b4d7bf113bab6b3b53eb2c9afdfa6d0489800ffcf530f979c3a7807299f16dfee888fbdb808f58ab91e5990bb2c39aea5760ec01350eddc2d82bf353853861809f7a95d768c73491a9bc983a3614b2aa299336609d9860c1d549719ad3f63d7c79ffbb7f9458d7ad80d8f22460af1d900f6774edc190c5474b08ca1cef748b6a3b966f27135d9b52aa39e8ef33770edf90fbb1a63c456393a2b787a413356711f2ae6698e9be4aefe2837bd230b9f7", 0xfb, 0x1f}, {&(0x7f0000000380)="b0e770aa2ff7ec29e9a78ff284fedfb83a907bf3985540cf59e533d50ca8ca8cbc4e28a4739f81101a8e514c92f453478af0f4233c48395843d647f100a2e9ec4a312c889c09186cf2ca8b5bee87fcf190c78130e4751752b55c8154c9059582371f4ebd4d165ee0638204915cf06f6575f95b650134bbad2f928e6b42ff0b2072820b7afdc64688966edd55bcad20046d3f52b91a0c8ab7ec35baad461d6c6ee68d624faa0d8e1c9d1fbdac6c46af1ee8f26ad37528d3c3f67bb37c79", 0xbd, 0x5}, {&(0x7f0000000440)="1701f8ad2e7095a2a442406806aeca643eaa15b448f55646ced74a4a98839cd574bb966b0eb45403b3a2d7b479601228e43d6c6fd6e446d699a5510331d86c4e19237fd904798d47a60bde52a63cb098469b983000aebec4bf4c53ccdea0526a6ab14a739e61e4484510d1bb03300081e8d985ff549d3b42bb1990ba2436c19b09f3d811", 0x84, 0xff}, {&(0x7f0000000500)="abb8a3fd572241b1a4c5cc1ab5a26c0a4b6008da96d9d830da70a74d38b4290660eb6712a41f8340d614a6cf9762b7f7a0dff7ac67acefcee297bfabccf562e0c96a39ec38a8ba3c54701b9006fce7e852f205c852bc3f8eac46f658b258c05912285f4a1812179dad1bb2dd65c073c5686503c4e327bc4cf256330cd11bf03d6c8b7248b2eb500e1a71cbb081041894fa014f9ca02bb52edecdbf0e0369f30730bdd2e92666c0fe4414f19b1464acfdeafae61e22bae66e9164da2f7053d2dc23fdccfd36b48f4079664fd86b522a5b71599f0cd206d3c670d5d1225a9e", 0xde, 0x5}, {&(0x7f0000000600)="91da6f4f08218ea8a374728bd513b64feb77adbb3624010509723ea008f25401d39b14809c7f06848e7d3c4f56e79ae9800ce9419649cafa6edcfc863ef85d1b6533bd64b07c5017c570772f045e0793b539119223a79a23dfeca7ecc41b40e5c0efc516d4986294b83f930d52074304a49b85c7af5ea38c", 0x78, 0x47}, {&(0x7f0000000680)="719b100110fced3490e0a8cf7576a8f9769aa23e78a34ccb356c21ce67388090564eda5d993317f28d7249e789398e3b82beeb702d78d1867257e7b31c5b265717eae98b13dc7a714f81698068e0774304dfbcf180384b324c9f68be700ff2e5b161220dde4b8fc827529ca815cdf6e4e2ffd61b0a9118d459d825d5974a21864fc81db6a3a96ca53780a19c044178e49f8fc353bbc4655c1dd485b3b95123bec15cf492", 0xa4, 0x3}, {&(0x7f0000000740)="ee2216d4dad715a1c7428ae4d735baede79d82321981baa70656961ec64d7c4ef1a8a9a78f0394a2acf58d22d2c9a077b0ed388c9209d74cd4dec02bdd03226987ce0f19f629bdf5ad81692fea97eb4bb04f5e6646553f4b93ca1445f903d80f725d6d54b7d54c0cb84e48b0163bf0cb0fe21a952b3a4cae480d100504c2d64b197acee46f5f39e69a08652879d257dd83d3c1e24977d62f07003475b96ec54aec7b6e1866e6c431dfe4", 0xaa, 0x7}, {&(0x7f0000000800)="ca80f28fe1b1fb6fcee6f8bef7b5046c825336ae32a3b85519b0677f0593de0ff1c8b947f2fd71a1cc8c95316853da74713876d6b42d95dcc4a61260ac683d74862aa738e3e4a3b5eecf28125a08ce6bd1dc0b0a2d53c1cfc2401d24e55e4976ec59ca631b507bf0a0aedd0f32a6138df36f8906e0f1907928b0341bcb140dd4d2213a82fe539cc43b9d31964554768b673d230440c50e70d5e3ca9e1ba32b5cdbcfe3b50aaa5974b406f7ad26e641334b38df722f97d6955ec48222f5891607d079d2877539fc8809", 0xc9, 0x4}, {&(0x7f0000000900)="1675cfcf3dcc6f55e330eff2acae9b67595f8fd434760e7ffc9d1e670cdfa9e5c6d8667dce3f858eaa", 0x29, 0x8}, {&(0x7f0000000940)="675b138901f7c541dcd2fac51b73321e3f737a692983f074121bb12e2a19846ba4", 0x21, 0x1}], 0x4880, &(0x7f0000000ac0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x36, 0x34, 0x65, 0x31, 0x2d, 0x31, 0xc, 0x2d]}}, {@huge_always}, {@huge_advise}, {@huge_never}, {@huge_advise}, {@mode={'mode', 0x3d, 0x3ff}}, {@size={'size', 0x3d, [0x69, 0x25]}}, {@size={'size', 0x3d, [0x74, 0x2d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x67, 0x70, 0x6d, 0x65, 0x74, 0x25, 0x30]}}, {@huge_within_size}], [{@defcontext={'defcontext', 0x3d, 'root'}}]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) close(r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x0) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {0x10000}}, './file0\x00'}) 15:18:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5dc, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x600, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 839.478797] tmpfs: Bad value for 'nr_inodes' 15:18:56 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:18:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xa19, 0x0, 0x0, 0x0) [ 839.493094] tmpfs: Bad value for 'nr_inodes' 15:18:56 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xcc0, 0x0, 0x0, 0x0) [ 839.566100] FAULT_INJECTION: forcing a failure. [ 839.566100] name failslab, interval 1, probability 0, space 0, times 0 [ 839.567351] CPU: 0 PID: 6871 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.568288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.569610] Call Trace: [ 839.569914] [ 839.570174] dump_stack_lvl+0x8b/0xb3 [ 839.570624] should_fail.cold+0x5/0xa [ 839.571072] ? create_object.isra.0+0x3a/0xa20 [ 839.571599] should_failslab+0x5/0x10 [ 839.572043] kmem_cache_alloc+0x5b/0x480 [ 839.572504] create_object.isra.0+0x3a/0xa20 [ 839.573010] ? kasan_unpoison+0x23/0x50 [ 839.573478] kmem_cache_alloc_bulk+0x387/0x670 [ 839.574006] io_submit_sqes.cold+0x20b/0x435 [ 839.574524] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 839.575068] ? find_held_lock+0x2c/0x110 [ 839.575516] ? io_async_task_func+0x560/0x560 [ 839.576040] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.576609] __do_sys_io_uring_enter+0xee0/0x1e80 [ 839.577156] ? io_submit_sqes+0x8fc0/0x8fc0 [ 839.577665] ? wait_for_completion_io+0x270/0x270 [ 839.578213] ? lock_is_held_type+0xd7/0x130 [ 839.578698] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 839.579325] ? vfs_write+0x188/0xae0 [ 839.579741] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 839.580374] ? fput+0x2a/0x50 [ 839.580723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 839.581331] do_syscall_64+0x3b/0x90 [ 839.581760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.582349] RIP: 0033:0x7fec339e7b19 [ 839.582761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.584796] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.585661] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 839.586466] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.587272] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.588070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.588895] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 839.589717] 15:18:56 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000290000000f000000000000000200000002000000008000000080000020000000d3f4655fd3f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010200)="82a311010000000000546dab020000faff", 0x11, 0x9ede}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x1000}, {0x0, 0x0, 0x9}], 0x0, &(0x7f0000014900)) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x24) 15:18:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x700, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:18:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x600, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 839.609064] loop3: detected capacity change from 0 to 158 15:18:56 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 839.621226] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks) 15:18:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 839.636670] loop3: detected capacity change from 0 to 158 [ 839.644128] EXT4-fs (loop3): bad geometry: block count 64 exceeds size of device (19 blocks) [ 839.645438] FAULT_INJECTION: forcing a failure. [ 839.645438] name failslab, interval 1, probability 0, space 0, times 0 [ 839.646731] CPU: 0 PID: 6878 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 839.647597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 839.648778] Call Trace: [ 839.649046] [ 839.649286] dump_stack_lvl+0x8b/0xb3 [ 839.649717] should_fail.cold+0x5/0xa [ 839.650126] ? create_object.isra.0+0x3a/0xa20 [ 839.650633] should_failslab+0x5/0x10 [ 839.651043] kmem_cache_alloc+0x5b/0x480 [ 839.651484] create_object.isra.0+0x3a/0xa20 [ 839.651953] ? kasan_unpoison+0x23/0x50 [ 839.652388] kmem_cache_alloc_node+0x248/0x490 [ 839.652874] copy_process+0x5c4/0x6be0 [ 839.653298] ? __stack_depot_save+0x35/0x450 [ 839.653792] ? kasan_save_stack+0x2e/0x40 [ 839.654229] ? kasan_save_stack+0x1e/0x40 [ 839.654671] ? __kasan_kmalloc+0x81/0xa0 [ 839.655104] ? io_wqe_enqueue+0x692/0xb90 [ 839.655549] ? io_queue_async_work+0x271/0x5a0 [ 839.656046] ? io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 839.656570] ? __cleanup_sighand+0xb0/0xb0 [ 839.657026] ? lock_is_held_type+0xd7/0x130 [ 839.657491] ? find_held_lock+0x2c/0x110 [ 839.657927] ? create_io_worker+0x1d0/0x620 [ 839.658389] ? io_worker_handle_work+0x17f0/0x17f0 [ 839.658915] create_io_thread+0xb6/0xf0 [ 839.659346] ? copy_init_mm+0x20/0x20 [ 839.659758] ? mark_held_locks+0x9e/0xe0 [ 839.660191] ? io_worker_handle_work+0x17f0/0x17f0 [ 839.660719] ? lockdep_init_map_type+0x2c3/0x7a0 [ 839.661227] create_io_worker+0x248/0x620 [ 839.661698] io_wqe_enqueue+0x692/0xb90 [ 839.662133] ? create_io_worker+0x620/0x620 [ 839.662596] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 839.663154] ? lock_is_held_type+0xd7/0x130 [ 839.663612] io_queue_async_work+0x271/0x5a0 [ 839.664085] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 839.664586] io_req_task_submit+0x3b3/0x530 [ 839.665059] tctx_task_work+0x1d7/0x750 [ 839.665509] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 839.666083] ? rwlock_bug.part.0+0x90/0x90 [ 839.666535] ? _raw_spin_unlock_irq+0x1f/0x40 [ 839.667022] task_work_run+0xe2/0x1a0 [ 839.667435] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 839.667954] syscall_exit_to_user_mode+0x19/0x50 [ 839.668459] do_syscall_64+0x48/0x90 [ 839.668862] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 839.669400] RIP: 0033:0x7f22342afb19 [ 839.669811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 839.671739] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 839.672528] RAX: 0000000000000001 RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 839.673276] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 839.674036] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 839.674787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 839.675527] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 839.676292] 15:19:09 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 15:19:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1100, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:09 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 15:19:09 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x1501, 0x0, 0x0, 0x0) 15:19:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:09 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:19:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:09 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x700, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 852.674085] FAULT_INJECTION: forcing a failure. [ 852.674085] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 852.675381] CPU: 1 PID: 6904 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 852.676235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.677420] Call Trace: [ 852.677721] [ 852.677952] dump_stack_lvl+0x8b/0xb3 [ 852.678363] should_fail.cold+0x5/0xa [ 852.678771] prepare_alloc_pages+0x17b/0x500 [ 852.679235] ? find_held_lock+0x2c/0x110 [ 852.679662] __alloc_pages+0x131/0x4e0 [ 852.680078] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 852.680735] ? rcu_read_lock_sched_held+0x3a/0x70 [ 852.681238] ? kmem_cache_alloc_node+0x344/0x490 [ 852.681764] copy_process+0x617/0x6be0 [ 852.682173] ? __stack_depot_save+0x35/0x450 [ 852.682651] ? kasan_save_stack+0x2e/0x40 [ 852.683097] ? kasan_save_stack+0x1e/0x40 [ 852.683539] ? __kasan_kmalloc+0x81/0xa0 [ 852.683979] ? io_wqe_enqueue+0x692/0xb90 [ 852.684433] ? io_queue_async_work+0x271/0x5a0 [ 852.684937] ? __cleanup_sighand+0xb0/0xb0 [ 852.685412] ? lock_is_held_type+0xd7/0x130 [ 852.685890] ? find_held_lock+0x2c/0x110 [ 852.686335] ? create_io_worker+0x1d0/0x620 [ 852.686811] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.687344] create_io_thread+0xb6/0xf0 [ 852.687776] ? copy_init_mm+0x20/0x20 [ 852.688192] ? mark_held_locks+0x9e/0xe0 [ 852.688634] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.689171] ? lockdep_init_map_type+0x2c3/0x7a0 [ 852.689710] create_io_worker+0x248/0x620 [ 852.690166] io_wqe_enqueue+0x692/0xb90 [ 852.690606] ? create_io_worker+0x620/0x620 [ 852.691073] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 852.691637] ? lock_is_held_type+0xd7/0x130 [ 852.692112] io_queue_async_work+0x271/0x5a0 [ 852.692592] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 852.693101] io_req_task_submit+0x3b3/0x530 [ 852.693575] tctx_task_work+0x1d7/0x750 [ 852.694030] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 852.694611] ? rwlock_bug.part.0+0x90/0x90 [ 852.695072] ? _raw_spin_unlock_irq+0x1f/0x40 [ 852.695573] task_work_run+0xe2/0x1a0 [ 852.695999] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 852.696522] syscall_exit_to_user_mode+0x19/0x50 [ 852.697035] do_syscall_64+0x48/0x90 [ 852.697440] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.698023] RIP: 0033:0x7f22342afb19 [ 852.698420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.700386] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 852.701192] RAX: 0000000000000001 RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 852.701967] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 852.702725] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.703484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.704258] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 852.705026] [ 852.710978] FAULT_INJECTION: forcing a failure. [ 852.710978] name failslab, interval 1, probability 0, space 0, times 0 [ 852.713296] CPU: 0 PID: 6909 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 852.714978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.717296] Call Trace: [ 852.717843] [ 852.718299] dump_stack_lvl+0x8b/0xb3 [ 852.719083] should_fail.cold+0x5/0xa [ 852.719858] ? create_object.isra.0+0x3a/0xa20 [ 852.720785] should_failslab+0x5/0x10 [ 852.721556] kmem_cache_alloc+0x5b/0x480 [ 852.722379] ? mark_held_locks+0x9e/0xe0 [ 852.723201] create_object.isra.0+0x3a/0xa20 [ 852.724093] ? kasan_unpoison+0x23/0x50 15:19:09 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 852.724911] kmem_cache_alloc_bulk+0x387/0x670 [ 852.725997] io_submit_sqes.cold+0x20b/0x435 [ 852.726906] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 852.727916] ? find_held_lock+0x2c/0x110 [ 852.728720] ? io_async_task_func+0x560/0x560 [ 852.729643] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 852.730625] __do_sys_io_uring_enter+0xee0/0x1e80 [ 852.731604] ? io_submit_sqes+0x8fc0/0x8fc0 [ 852.732457] ? wait_for_completion_io+0x270/0x270 [ 852.733416] ? lock_is_held_type+0xd7/0x130 [ 852.734288] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 852.735376] ? vfs_write+0x188/0xae0 [ 852.736118] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 852.737196] ? fput+0x2a/0x50 [ 852.737852] ? syscall_enter_from_user_mode+0x1d/0x50 [ 852.738878] do_syscall_64+0x3b/0x90 [ 852.739619] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.740628] RIP: 0033:0x7fec339e7b19 [ 852.741355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.744955] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 852.746475] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 852.747911] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 15:19:09 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1100, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x600, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 852.749371] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.750907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.752322] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 852.753814] [ 852.768022] FAULT_INJECTION: forcing a failure. [ 852.768022] name failslab, interval 1, probability 0, space 0, times 0 [ 852.769303] CPU: 1 PID: 6919 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 852.770177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.771340] Call Trace: [ 852.771619] [ 852.771857] dump_stack_lvl+0x8b/0xb3 [ 852.772271] should_fail.cold+0x5/0xa [ 852.772676] ? alloc_pid+0xcd/0xd80 [ 852.773068] should_failslab+0x5/0x10 [ 852.773475] kmem_cache_alloc+0x5b/0x480 [ 852.773909] ? memcpy+0x39/0x60 [ 852.774266] alloc_pid+0xcd/0xd80 [ 852.774639] ? copy_thread+0x304/0x950 [ 852.775049] ? copy_namespaces+0x1c1/0x450 [ 852.775496] copy_process+0x3d02/0x6be0 [ 852.775918] ? __stack_depot_save+0x35/0x450 [ 852.776401] ? __cleanup_sighand+0xb0/0xb0 [ 852.776852] ? lock_is_held_type+0xd7/0x130 [ 852.777303] ? find_held_lock+0x2c/0x110 [ 852.777748] ? create_io_worker+0x1d0/0x620 [ 852.778214] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.778734] create_io_thread+0xb6/0xf0 [ 852.779163] ? copy_init_mm+0x20/0x20 [ 852.779562] ? mark_held_locks+0x9e/0xe0 [ 852.779983] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.780524] ? lockdep_init_map_type+0x2c3/0x7a0 [ 852.781040] create_io_worker+0x248/0x620 [ 852.781477] io_wqe_enqueue+0x692/0xb90 [ 852.781935] ? create_io_worker+0x620/0x620 [ 852.782406] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 852.782970] ? lock_is_held_type+0xd7/0x130 [ 852.783438] io_queue_async_work+0x271/0x5a0 [ 852.783921] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 852.784421] io_req_task_submit+0x3b3/0x530 [ 852.784900] tctx_task_work+0x1d7/0x750 [ 852.785342] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 852.785910] ? rwlock_bug.part.0+0x90/0x90 [ 852.786381] ? _raw_spin_unlock_irq+0x1f/0x40 [ 852.786861] task_work_run+0xe2/0x1a0 [ 852.787290] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 852.787799] syscall_exit_to_user_mode+0x19/0x50 [ 852.788321] do_syscall_64+0x48/0x90 [ 852.788716] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.789283] RIP: 0033:0x7f22342afb19 [ 852.789676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.791661] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 852.792447] RAX: 0000000000000001 RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 852.793216] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 852.793998] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.794766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.795525] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 852.796300] [ 852.797070] FAULT_INJECTION: forcing a failure. [ 852.797070] name failslab, interval 1, probability 0, space 0, times 0 [ 852.798316] CPU: 1 PID: 6913 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 852.799200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 852.800411] Call Trace: [ 852.800689] [ 852.800935] dump_stack_lvl+0x8b/0xb3 [ 852.801354] should_fail.cold+0x5/0xa [ 852.801786] ? copy_process+0x5c4/0x6be0 [ 852.802227] should_failslab+0x5/0x10 [ 852.802643] kmem_cache_alloc_node+0x55/0x490 [ 852.803123] copy_process+0x5c4/0x6be0 [ 852.803553] ? __stack_depot_save+0x35/0x450 [ 852.804035] ? kasan_save_stack+0x2e/0x40 [ 852.804485] ? kasan_save_stack+0x1e/0x40 [ 852.804928] ? __kasan_kmalloc+0x81/0xa0 [ 852.805347] ? io_wqe_enqueue+0x692/0xb90 [ 852.805819] ? io_queue_async_work+0x271/0x5a0 [ 852.806319] ? io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 852.806835] ? __cleanup_sighand+0xb0/0xb0 [ 852.807296] ? lock_is_held_type+0xd7/0x130 [ 852.807757] ? find_held_lock+0x2c/0x110 [ 852.808202] ? create_io_worker+0x1d0/0x620 [ 852.808667] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.809200] create_io_thread+0xb6/0xf0 [ 852.809648] ? copy_init_mm+0x20/0x20 [ 852.810048] ? mark_held_locks+0x9e/0xe0 [ 852.810468] ? io_worker_handle_work+0x17f0/0x17f0 [ 852.811010] ? lockdep_init_map_type+0x2c3/0x7a0 [ 852.811504] create_io_worker+0x248/0x620 [ 852.811950] io_wqe_enqueue+0x692/0xb90 [ 852.812366] ? create_io_worker+0x620/0x620 [ 852.812830] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 852.813360] ? lock_is_held_type+0xd7/0x130 [ 852.813842] io_queue_async_work+0x271/0x5a0 [ 852.814308] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 852.814784] io_req_task_submit+0x3b3/0x530 [ 852.815246] tctx_task_work+0x1d7/0x750 [ 852.815664] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 852.816243] ? rwlock_bug.part.0+0x90/0x90 [ 852.816702] ? _raw_spin_unlock_irq+0x1f/0x40 [ 852.817192] task_work_run+0xe2/0x1a0 [ 852.817624] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 852.818155] syscall_exit_to_user_mode+0x19/0x50 [ 852.818661] do_syscall_64+0x48/0x90 [ 852.819066] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 852.819600] RIP: 0033:0x7f67feb28b19 [ 852.820003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 852.821978] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 852.822794] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 852.823551] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 852.824317] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 852.825083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.825863] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 852.826634] 15:19:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3f00, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:09 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x190a, 0x0, 0x0, 0x0) 15:19:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:09 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:23 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 15:19:23 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:19:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:23 executing program 3: syz_emit_ethernet(0x38, &(0x7f0000000000)=ANY=[], 0x0) 15:19:23 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3f00, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:23 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x2000, 0x0, 0x0, 0x0) 15:19:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xdc05, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:23 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 866.980648] FAULT_INJECTION: forcing a failure. [ 866.980648] name failslab, interval 1, probability 0, space 0, times 0 [ 866.981926] CPU: 0 PID: 6960 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 866.982775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 866.983949] Call Trace: [ 866.984212] [ 866.984445] dump_stack_lvl+0x8b/0xb3 [ 866.984864] should_fail.cold+0x5/0xa [ 866.985265] ? create_object.isra.0+0x3a/0xa20 [ 866.985760] should_failslab+0x5/0x10 [ 866.986178] kmem_cache_alloc+0x5b/0x480 [ 866.986618] ? mark_held_locks+0x9e/0xe0 [ 866.987058] create_object.isra.0+0x3a/0xa20 [ 866.987526] ? kasan_unpoison+0x23/0x50 [ 866.987945] kmem_cache_alloc_bulk+0x387/0x670 [ 866.988424] io_submit_sqes.cold+0x20b/0x435 [ 866.988903] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 866.989428] ? find_held_lock+0x2c/0x110 [ 866.989875] ? io_async_task_func+0x560/0x560 [ 866.990354] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 866.990870] __do_sys_io_uring_enter+0xee0/0x1e80 [ 866.991378] ? io_submit_sqes+0x8fc0/0x8fc0 [ 866.991828] ? wait_for_completion_io+0x270/0x270 [ 866.992328] ? lock_is_held_type+0xd7/0x130 [ 866.992773] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 866.993339] ? vfs_write+0x188/0xae0 [ 866.993725] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 866.994306] ? fput+0x2a/0x50 [ 866.994640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 866.995183] do_syscall_64+0x3b/0x90 [ 866.995579] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 866.996112] RIP: 0033:0x7fec339e7b19 [ 866.996495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 866.998426] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 866.999212] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 866.999949] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 867.000677] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.001404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.002152] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 867.002899] [ 867.023642] FAULT_INJECTION: forcing a failure. [ 867.023642] name failslab, interval 1, probability 0, space 0, times 0 [ 867.026256] CPU: 1 PID: 6964 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 867.027991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 867.030409] Call Trace: [ 867.030948] [ 867.031433] dump_stack_lvl+0x8b/0xb3 [ 867.032280] should_fail.cold+0x5/0xa [ 867.033100] ? create_object.isra.0+0x3a/0xa20 [ 867.034091] should_failslab+0x5/0x10 [ 867.034917] kmem_cache_alloc+0x5b/0x480 [ 867.035789] create_object.isra.0+0x3a/0xa20 [ 867.036744] ? kasan_unpoison+0x23/0x50 [ 867.037611] kmem_cache_alloc_node+0x248/0x490 [ 867.038632] copy_process+0x5c4/0x6be0 [ 867.039476] ? __stack_depot_save+0x35/0x450 [ 867.040461] ? kasan_save_stack+0x2e/0x40 [ 867.041343] ? kasan_save_stack+0x1e/0x40 [ 867.042246] ? __kasan_kmalloc+0x81/0xa0 [ 867.043102] ? io_wqe_enqueue+0x692/0xb90 [ 867.043993] ? io_queue_async_work+0x271/0x5a0 [ 867.045019] ? io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 867.046070] ? __cleanup_sighand+0xb0/0xb0 [ 867.046995] ? lock_is_held_type+0xd7/0x130 [ 867.047912] ? find_held_lock+0x2c/0x110 [ 867.048800] ? create_io_worker+0x1d0/0x620 [ 867.049744] ? io_worker_handle_work+0x17f0/0x17f0 [ 867.050832] create_io_thread+0xb6/0xf0 [ 867.051706] ? copy_init_mm+0x20/0x20 [ 867.052348] FAULT_INJECTION: forcing a failure. [ 867.052348] name failslab, interval 1, probability 0, space 0, times 0 [ 867.052544] ? mark_held_locks+0x9e/0xe0 [ 867.054612] ? io_worker_handle_work+0x17f0/0x17f0 [ 867.055676] ? lockdep_init_map_type+0x2c3/0x7a0 [ 867.056720] create_io_worker+0x248/0x620 [ 867.057621] io_wqe_enqueue+0x692/0xb90 [ 867.058525] ? create_io_worker+0x620/0x620 [ 867.059474] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 867.060590] ? lock_is_held_type+0xd7/0x130 [ 867.061511] io_queue_async_work+0x271/0x5a0 [ 867.062482] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 867.063462] io_req_task_submit+0x3b3/0x530 [ 867.064409] tctx_task_work+0x1d7/0x750 [ 867.065275] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 867.066451] ? rwlock_bug.part.0+0x90/0x90 [ 867.067363] ? _raw_spin_unlock_irq+0x1f/0x40 [ 867.068355] task_work_run+0xe2/0x1a0 [ 867.069179] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 867.070273] syscall_exit_to_user_mode+0x19/0x50 [ 867.071279] do_syscall_64+0x48/0x90 [ 867.072074] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 867.073173] RIP: 0033:0x7f67feb28b19 [ 867.073978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.077867] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 867.079484] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 867.081016] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 867.082558] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.084055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.085579] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 867.087120] [ 867.087618] CPU: 0 PID: 6963 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 867.088466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 867.089619] Call Trace: [ 867.089894] [ 867.090125] dump_stack_lvl+0x8b/0xb3 [ 867.090532] should_fail.cold+0x5/0xa [ 867.090931] ? create_object.isra.0+0x3a/0xa20 [ 867.091406] should_failslab+0x5/0x10 [ 867.091804] kmem_cache_alloc+0x5b/0x480 [ 867.092228] create_object.isra.0+0x3a/0xa20 [ 867.092685] ? kasan_unpoison+0x23/0x50 [ 867.093102] kmem_cache_alloc+0x239/0x480 [ 867.093529] alloc_pid+0xcd/0xd80 [ 867.093906] ? copy_thread+0x304/0x950 [ 867.094310] ? copy_namespaces+0x1c1/0x450 [ 867.094751] copy_process+0x3d02/0x6be0 [ 867.095167] ? __stack_depot_save+0x35/0x450 [ 867.095638] ? __cleanup_sighand+0xb0/0xb0 [ 867.096085] ? lock_is_held_type+0xd7/0x130 [ 867.096525] ? find_held_lock+0x2c/0x110 [ 867.096966] ? create_io_worker+0x1d0/0x620 [ 867.097412] ? io_worker_handle_work+0x17f0/0x17f0 [ 867.097948] create_io_thread+0xb6/0xf0 [ 867.098359] ? copy_init_mm+0x20/0x20 [ 867.098756] ? mark_held_locks+0x9e/0xe0 [ 867.099191] ? io_worker_handle_work+0x17f0/0x17f0 [ 867.099701] ? lockdep_init_map_type+0x2c3/0x7a0 [ 867.100198] create_io_worker+0x248/0x620 [ 867.100630] io_wqe_enqueue+0x692/0xb90 [ 867.101063] ? create_io_worker+0x620/0x620 [ 867.101512] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 867.102061] ? lock_is_held_type+0xd7/0x130 [ 867.102513] io_queue_async_work+0x271/0x5a0 [ 867.102990] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 867.103463] io_req_task_submit+0x3b3/0x530 [ 867.103911] tctx_task_work+0x1d7/0x750 [ 867.104335] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 867.104904] ? rwlock_bug.part.0+0x90/0x90 [ 867.105347] ? _raw_spin_unlock_irq+0x1f/0x40 [ 867.105839] task_work_run+0xe2/0x1a0 [ 867.106244] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 867.106754] syscall_exit_to_user_mode+0x19/0x50 [ 867.107239] do_syscall_64+0x48/0x90 [ 867.107628] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 867.108159] RIP: 0033:0x7f22342afb19 [ 867.108535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 867.110396] RSP: 002b:00007f2231825188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 867.111166] RAX: 0000000000000001 RBX: 00007f22343c2f60 RCX: 00007f22342afb19 [ 867.111884] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 867.112603] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 867.113323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 867.114049] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 867.114784] 15:19:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:23 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:23 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xff02, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:23 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x3f00, 0x0, 0x0, 0x0) 15:19:38 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:19:38 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 15:19:38 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x6000, 0x0, 0x0, 0x0) 15:19:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:38 executing program 3: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffb000/0x1000)=nil) 15:19:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x34000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:38 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 881.423032] FAULT_INJECTION: forcing a failure. [ 881.423032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 881.425516] CPU: 1 PID: 6991 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 881.427225] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.429571] Call Trace: [ 881.430131] [ 881.430596] dump_stack_lvl+0x8b/0xb3 [ 881.431412] should_fail.cold+0x5/0xa [ 881.432245] prepare_alloc_pages+0x17b/0x500 [ 881.433201] ? find_held_lock+0x2c/0x110 [ 881.434114] __alloc_pages+0x131/0x4e0 [ 881.434967] ? __alloc_pages_slowpath.constprop.0+0x1f10/0x1f10 [ 881.436307] ? rcu_read_lock_sched_held+0x3a/0x70 [ 881.437347] ? kmem_cache_alloc_node+0x344/0x490 [ 881.438369] copy_process+0x617/0x6be0 [ 881.439244] ? __stack_depot_save+0x35/0x450 [ 881.440228] ? kasan_save_stack+0x2e/0x40 [ 881.441130] ? kasan_save_stack+0x1e/0x40 [ 881.442040] ? __kasan_kmalloc+0x81/0xa0 [ 881.442953] ? io_wqe_enqueue+0x692/0xb90 [ 881.443876] ? io_queue_async_work+0x271/0x5a0 [ 881.444879] ? __cleanup_sighand+0xb0/0xb0 [ 881.445822] ? lock_is_held_type+0xd7/0x130 [ 881.446757] ? find_held_lock+0x2c/0x110 15:19:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xdc05, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 881.447645] ? create_io_worker+0x1d0/0x620 [ 881.448787] ? io_worker_handle_work+0x17f0/0x17f0 [ 881.449894] create_io_thread+0xb6/0xf0 [ 881.450783] ? copy_init_mm+0x20/0x20 [ 881.451597] ? mark_held_locks+0x9e/0xe0 [ 881.452471] ? io_worker_handle_work+0x17f0/0x17f0 [ 881.453537] ? lockdep_init_map_type+0x2c3/0x7a0 [ 881.454594] create_io_worker+0x248/0x620 [ 881.455512] io_wqe_enqueue+0x692/0xb90 [ 881.456399] ? create_io_worker+0x620/0x620 [ 881.457344] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 881.457526] FAULT_INJECTION: forcing a failure. [ 881.457526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.458470] ? lock_is_held_type+0xd7/0x130 [ 881.458511] io_queue_async_work+0x271/0x5a0 [ 881.463144] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 881.464184] io_req_task_submit+0x3b3/0x530 [ 881.465182] tctx_task_work+0x1d7/0x750 [ 881.466110] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 881.467345] ? rwlock_bug.part.0+0x90/0x90 [ 881.468308] ? _raw_spin_unlock_irq+0x1f/0x40 [ 881.469332] task_work_run+0xe2/0x1a0 [ 881.470180] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 881.471269] syscall_exit_to_user_mode+0x19/0x50 [ 881.472288] do_syscall_64+0x48/0x90 [ 881.473114] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.474218] RIP: 0033:0x7f67feb28b19 [ 881.475032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.478962] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 881.480612] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 881.482153] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 881.483671] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.485191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 881.486724] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 881.488274] [ 881.488777] CPU: 0 PID: 6993 Comm: syz-executor.2 Not tainted 5.16.0-rc4-next-20211208 #1 [ 881.490453] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.492683] Call Trace: [ 881.493196] [ 881.493642] dump_stack_lvl+0x8b/0xb3 [ 881.494430] should_fail.cold+0x5/0xa [ 881.495210] _copy_to_user+0x2e/0x150 [ 881.495978] simple_read_from_buffer+0xcc/0x160 [ 881.496918] proc_fail_nth_read+0x194/0x220 [ 881.497793] ? proc_fault_inject_read+0x230/0x230 [ 881.498770] ? security_file_permission+0xb1/0xd0 [ 881.499741] ? proc_fault_inject_read+0x230/0x230 [ 881.500713] vfs_read+0x1b6/0x5f0 [ 881.501429] ksys_read+0x12d/0x250 [ 881.502161] ? __ia32_sys_pwrite64+0x230/0x230 [ 881.503086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 881.504120] do_syscall_64+0x3b/0x90 [ 881.504871] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.505889] RIP: 0033:0x7f223426269c [ 881.506632] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 881.510249] RSP: 002b:00007f2231825170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.511737] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f223426269c [ 881.513131] RDX: 000000000000000f RSI: 00007f22318251e0 RDI: 0000000000000004 [ 881.514540] RBP: 00007f22318251d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.515935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 881.517324] R13: 00007ffed552f4ef R14: 00007f2231825300 R15: 0000000000022000 [ 881.518746] [ 881.527976] FAULT_INJECTION: forcing a failure. [ 881.527976] name failslab, interval 1, probability 0, space 0, times 0 [ 881.530615] CPU: 1 PID: 7002 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 881.532414] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 881.534835] Call Trace: [ 881.535392] [ 881.535881] dump_stack_lvl+0x8b/0xb3 [ 881.536718] should_fail.cold+0x5/0xa [ 881.537554] ? create_object.isra.0+0x3a/0xa20 [ 881.538575] should_failslab+0x5/0x10 [ 881.539407] kmem_cache_alloc+0x5b/0x480 [ 881.540273] ? mark_held_locks+0x9e/0xe0 [ 881.541162] create_object.isra.0+0x3a/0xa20 [ 881.542146] ? kasan_unpoison+0x23/0x50 [ 881.543025] kmem_cache_alloc_bulk+0x387/0x670 [ 881.544006] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.545198] ? percpu_counter_add_batch+0xb4/0x170 [ 881.546269] io_submit_sqes.cold+0x20b/0x435 [ 881.547239] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 881.548341] ? find_held_lock+0x2c/0x110 [ 881.549205] ? io_async_task_func+0x560/0x560 [ 881.550214] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 881.551290] __do_sys_io_uring_enter+0xee0/0x1e80 [ 881.552364] ? io_submit_sqes+0x8fc0/0x8fc0 [ 881.553301] ? wait_for_completion_io+0x270/0x270 [ 881.554355] ? lock_is_held_type+0xd7/0x130 [ 881.555296] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 881.556480] ? vfs_write+0x188/0xae0 [ 881.557290] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 881.558491] ? fput+0x2a/0x50 [ 881.559191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 881.560307] do_syscall_64+0x3b/0x90 [ 881.561121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 881.562254] RIP: 0033:0x7fec339e7b19 [ 881.563055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 881.566985] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 881.568614] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 881.570174] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 881.571692] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 881.573370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.575149] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 881.576933] 15:19:38 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x40000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xba000000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:38 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xff02, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:19:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x100000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) [ 893.605567] FAULT_INJECTION: forcing a failure. [ 893.605567] name failslab, interval 1, probability 0, space 0, times 0 [ 893.606984] CPU: 0 PID: 7034 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 893.608022] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 893.609453] Call Trace: [ 893.609782] [ 893.610077] dump_stack_lvl+0x8b/0xb3 [ 893.610602] should_fail.cold+0x5/0xa [ 893.611100] ? create_object.isra.0+0x3a/0xa20 [ 893.611691] should_failslab+0x5/0x10 [ 893.612184] kmem_cache_alloc+0x5b/0x480 [ 893.612705] ? mark_held_locks+0x9e/0xe0 [ 893.613235] create_object.isra.0+0x3a/0xa20 [ 893.613798] ? kasan_unpoison+0x23/0x50 [ 893.614325] kmem_cache_alloc_bulk+0x387/0x670 [ 893.614912] io_submit_sqes.cold+0x20b/0x435 [ 893.615487] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 893.616124] ? find_held_lock+0x2c/0x110 [ 893.616639] ? io_async_task_func+0x560/0x560 [ 893.617236] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 893.617875] __do_sys_io_uring_enter+0xee0/0x1e80 [ 893.618534] ? io_submit_sqes+0x8fc0/0x8fc0 [ 893.619098] ? wait_for_completion_io+0x270/0x270 [ 893.619727] ? lock_is_held_type+0xd7/0x130 [ 893.620278] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 893.620984] ? vfs_write+0x188/0xae0 [ 893.621464] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 893.622165] ? fput+0x2a/0x50 [ 893.622583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.623249] do_syscall_64+0x3b/0x90 [ 893.623733] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 893.624386] RIP: 0033:0x7fec339e7b19 [ 893.624855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.627183] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 893.628148] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 893.629054] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 893.629954] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.630861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.631613] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 893.632325] 15:19:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xc00c, 0x0, 0x0, 0x0) 15:19:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x34000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 893.642920] FAULT_INJECTION: forcing a failure. [ 893.642920] name failslab, interval 1, probability 0, space 0, times 0 [ 893.644126] CPU: 0 PID: 7027 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 893.644985] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 893.646071] Call Trace: [ 893.646356] [ 893.646590] dump_stack_lvl+0x8b/0xb3 [ 893.647002] should_fail.cold+0x5/0xa [ 893.647403] ? copy_process+0x5c4/0x6be0 [ 893.647837] should_failslab+0x5/0x10 [ 893.648239] kmem_cache_alloc_node+0x55/0x490 [ 893.648713] copy_process+0x5c4/0x6be0 [ 893.649124] ? __stack_depot_save+0x35/0x450 [ 893.649599] ? kasan_save_stack+0x2e/0x40 [ 893.650034] ? kasan_save_stack+0x1e/0x40 [ 893.650504] ? __kasan_kmalloc+0x81/0xa0 [ 893.650934] ? io_wqe_enqueue+0x692/0xb90 [ 893.651393] ? io_queue_async_work+0x271/0x5a0 [ 893.651875] ? io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 893.652374] ? __cleanup_sighand+0xb0/0xb0 [ 893.652830] ? lock_is_held_type+0xd7/0x130 [ 893.653293] ? find_held_lock+0x2c/0x110 [ 893.653727] ? create_io_worker+0x1d0/0x620 [ 893.654184] ? io_worker_handle_work+0x17f0/0x17f0 [ 893.654707] create_io_thread+0xb6/0xf0 [ 893.655131] ? copy_init_mm+0x20/0x20 [ 893.655535] ? mark_held_locks+0x9e/0xe0 [ 893.655969] ? io_worker_handle_work+0x17f0/0x17f0 [ 893.656496] ? lockdep_init_map_type+0x2c3/0x7a0 [ 893.657000] create_io_worker+0x248/0x620 [ 893.657441] io_wqe_enqueue+0x692/0xb90 [ 893.657862] ? create_io_worker+0x620/0x620 [ 893.658332] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 893.658885] ? lock_is_held_type+0xd7/0x130 [ 893.659318] io_queue_async_work+0x271/0x5a0 [ 893.659801] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 893.660293] io_req_task_submit+0x3b3/0x530 [ 893.660768] tctx_task_work+0x1d7/0x750 [ 893.661169] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 893.661754] ? rwlock_bug.part.0+0x90/0x90 [ 893.662208] ? _raw_spin_unlock_irq+0x1f/0x40 [ 893.662719] task_work_run+0xe2/0x1a0 [ 893.663144] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 893.663677] syscall_exit_to_user_mode+0x19/0x50 [ 893.664187] do_syscall_64+0x48/0x90 [ 893.664563] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 893.665114] RIP: 0033:0x7f67feb28b19 [ 893.665516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.667488] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 893.668304] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 893.669080] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 893.669848] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.670616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.671382] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 893.672096] 15:19:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:19:50 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100002, 0x0, 0x0, 0x0, 0x0) 15:19:50 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xf000, 0x0, 0x0, 0x0) 15:19:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x40000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x400300, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:19:50 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100003, 0x0, 0x0, 0x0, 0x0) 15:19:50 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:19:50 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 15:19:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x100000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 893.834310] FAULT_INJECTION: forcing a failure. [ 893.834310] name failslab, interval 1, probability 0, space 0, times 0 [ 893.835569] CPU: 0 PID: 7072 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 893.836435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 893.837624] Call Trace: [ 893.837892] [ 893.838126] dump_stack_lvl+0x8b/0xb3 [ 893.838548] should_fail.cold+0x5/0xa [ 893.838956] ? create_object.isra.0+0x3a/0xa20 [ 893.839452] should_failslab+0x5/0x10 [ 893.839863] kmem_cache_alloc+0x5b/0x480 [ 893.840309] ? mark_held_locks+0x9e/0xe0 [ 893.840721] create_object.isra.0+0x3a/0xa20 [ 893.841193] ? kasan_unpoison+0x23/0x50 [ 893.841598] kmem_cache_alloc_bulk+0x387/0x670 [ 893.842095] io_submit_sqes.cold+0x20b/0x435 [ 893.842548] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 893.843091] ? find_held_lock+0x2c/0x110 [ 893.843496] ? io_async_task_func+0x560/0x560 [ 893.844007] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 893.844540] __do_sys_io_uring_enter+0xee0/0x1e80 [ 893.845081] ? io_submit_sqes+0x8fc0/0x8fc0 [ 893.845544] ? wait_for_completion_io+0x270/0x270 [ 893.846076] ? lock_is_held_type+0xd7/0x130 [ 893.846522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 893.847130] ? vfs_write+0x188/0xae0 [ 893.847545] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 893.848134] ? fput+0x2a/0x50 [ 893.848451] ? syscall_enter_from_user_mode+0x1d/0x50 [ 893.849013] do_syscall_64+0x3b/0x90 [ 893.849392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 893.849893] RIP: 0033:0x7fec339e7b19 [ 893.850310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.852290] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 893.853104] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 893.853871] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 893.854645] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.855347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.856119] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 893.856893] [ 893.864492] FAULT_INJECTION: forcing a failure. [ 893.864492] name failslab, interval 1, probability 0, space 0, times 0 [ 893.865715] CPU: 0 PID: 7075 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 893.866598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 893.867690] Call Trace: [ 893.867957] [ 893.868202] dump_stack_lvl+0x8b/0xb3 [ 893.868596] should_fail.cold+0x5/0xa [ 893.869010] ? create_object.isra.0+0x3a/0xa20 [ 893.869499] should_failslab+0x5/0x10 [ 893.869923] kmem_cache_alloc+0x5b/0x480 [ 893.870372] create_object.isra.0+0x3a/0xa20 [ 893.870843] ? kasan_unpoison+0x23/0x50 [ 893.871275] kmem_cache_alloc+0x239/0x480 [ 893.871716] alloc_pid+0xcd/0xd80 [ 893.872103] ? copy_thread+0x304/0x950 [ 893.872508] ? copy_namespaces+0x1c1/0x450 [ 893.872930] copy_process+0x3d02/0x6be0 [ 893.873360] ? __stack_depot_save+0x35/0x450 [ 893.873845] ? __cleanup_sighand+0xb0/0xb0 [ 893.874326] ? lock_is_held_type+0xd7/0x130 [ 893.874784] ? find_held_lock+0x2c/0x110 [ 893.875239] ? create_io_worker+0x1d0/0x620 [ 893.875707] ? io_worker_handle_work+0x17f0/0x17f0 [ 893.876238] create_io_thread+0xb6/0xf0 [ 893.876667] ? copy_init_mm+0x20/0x20 [ 893.877047] ? mark_held_locks+0x9e/0xe0 [ 893.877487] ? io_worker_handle_work+0x17f0/0x17f0 [ 893.878030] ? lockdep_init_map_type+0x2c3/0x7a0 [ 893.878565] create_io_worker+0x248/0x620 [ 893.879013] io_wqe_enqueue+0x692/0xb90 [ 893.879446] ? create_io_worker+0x620/0x620 [ 893.879911] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 893.880465] ? lock_is_held_type+0xd7/0x130 [ 893.880940] io_queue_async_work+0x271/0x5a0 [ 893.881420] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 893.881919] io_req_task_submit+0x3b3/0x530 [ 893.882390] tctx_task_work+0x1d7/0x750 [ 893.882833] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 893.883419] ? rwlock_bug.part.0+0x90/0x90 [ 893.883877] ? _raw_spin_unlock_irq+0x1f/0x40 [ 893.884378] task_work_run+0xe2/0x1a0 [ 893.884796] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 893.885325] syscall_exit_to_user_mode+0x19/0x50 [ 893.885833] do_syscall_64+0x48/0x90 [ 893.886256] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 893.886764] RIP: 0033:0x7f67feb28b19 [ 893.887160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 893.889109] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 893.889924] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 893.890624] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 893.891386] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 893.892081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 893.892836] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 893.893602] 15:20:02 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 15:20:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100005, 0x0, 0x0, 0x0, 0x0) 15:20:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x100000, 0x0, 0x0, 0x0) 15:20:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x400300, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:02 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"81a813f11c38864d2b4a3d73bf77fdb9", 0x0, 0x0, {0x8, 0xfec4}, {0xfff, 0xfff}, 0x8000, [0x10001, 0x5b22, 0x7fffffff, 0x0, 0xd1a, 0x800, 0x1, 0x8, 0x1, 0x3, 0x3f, 0x6, 0x354, 0x401, 0x7, 0x9a]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000003c0)={"29251c46bbddb79acd899d10939623ec", 0x0, 0x0, {0x6, 0x9}, {0x7, 0x9}, 0x1000, [0x8, 0xfffffffffffffff7, 0x1, 0x9, 0x8, 0x9a, 0x3, 0x9, 0x3, 0x8000, 0x0, 0x1, 0x6, 0x1, 0x8, 0xec]}) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3deb0c76772b7fe3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="cc010000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fbdbdf25090000003400028006000b000a000000080005000700000008000300010000000800080000100000060002004e210000080004000500000044000380140002006c6f000000000000000000000000000008000300000000000800030002000000060007004e23000014000600ff0200000000000000000000000000014c000380080001000000000014000600fc02000000000000000000000000000106000400060000000600040001fc000014000600fc000000000000000000000000000000060007004e23000028000180140003007f0000010000000000000000000000000700060072720000060002008800000008000500000014004c000180060004004e240000060001000a000000080008000700000008000b0073697000090006006e6f6e6500000000060001000a00000014000300fe8800000000000000000000000001017000038008000300000000001400060000000000000000000000ffff6401010208000300030000000600040005000000060007004e2200001400020076657468315f766972745f776966690014000600ff01000000000000000000000000000108000500ac1414bb08000100020000000800050005000000bc00d77d97c08a1e589099f0aa95d92cb936bd0f66954f6f1c9ea14e005a3c318b1f3a54941c2b41a2922ed94180ad283f44538e488eefb50537ee5e23bc82ec6a4982914314a2c0f13435b6808d9dbb5fcbf7167480bc5b6d1c228bf15f6f140a1d06731741639030cdb878c08b9c1a49084131251be4e4d89109bf21e3f501f996a3cea90889b680cc3b24f7618ef905ef051645c56331bee99504adf79a45"], 0x1cc}, 0x1, 0x0, 0x0, 0x20008840}, 0x400c010) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000004c0)={"48e0668bd3b4b289e94d4b1923ffc417", r1, r2, {0x53, 0x7735}, {0x10001, 0x7}, 0x3ff, [0xff, 0x3e, 0x5, 0x306a49da, 0x3, 0x5, 0x2, 0x1, 0x80000000, 0xf81, 0xffffffffffffff00, 0x7, 0x11, 0x8, 0x4, 0x3]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x10000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b64877366cd155d00080101000240002000f8010022004000000000000000000080000000000000000000000000000000002000"/64, 0x40}, {&(0x7f0000010100)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x800}, {&(0x7f0000010200)="f8ffff00f0ffffffff07800009a000ffffff00"/32, 0x20, 0x1000}, {&(0x7f0000010300)="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", 0x120, 0x1800}, {&(0x7f0000010500)="2e20202020202020202020100011e970325132510000e97032510300000000002e2e202020202020202020100011e970325132510000e970325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c4530202020202020200011e970325132510000e970325104001a040000", 0x80, 0x2800}, {&(0x7f0000010600)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x3000}, {&(0x7f0000010b00)='syzkallers\x00'/32, 0x20, 0x3800}, {&(0x7f0000010c00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x6800}], 0x0, &(0x7f0000010d00)) 15:20:02 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) [ 905.576806] FAULT_INJECTION: forcing a failure. [ 905.576806] name failslab, interval 1, probability 0, space 0, times 0 [ 905.579072] CPU: 0 PID: 7102 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 905.580645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 905.582821] Call Trace: [ 905.583315] [ 905.583749] dump_stack_lvl+0x8b/0xb3 [ 905.584515] should_fail.cold+0x5/0xa [ 905.585269] ? create_object.isra.0+0x3a/0xa20 [ 905.586168] should_failslab+0x5/0x10 [ 905.586955] kmem_cache_alloc+0x5b/0x480 [ 905.587741] ? mark_held_locks+0x9e/0xe0 [ 905.588540] create_object.isra.0+0x3a/0xa20 [ 905.589403] ? kasan_unpoison+0x23/0x50 [ 905.590231] kmem_cache_alloc_bulk+0x387/0x670 [ 905.591168] io_submit_sqes.cold+0x20b/0x435 [ 905.592056] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 905.593040] ? find_held_lock+0x2c/0x110 [ 905.593845] ? io_async_task_func+0x560/0x560 [ 905.594775] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 905.594905] loop3: detected capacity change from 0 to 128 [ 905.595752] __do_sys_io_uring_enter+0xee0/0x1e80 [ 905.595809] ? io_submit_sqes+0x8fc0/0x8fc0 [ 905.598683] ? wait_for_completion_io+0x270/0x270 [ 905.599650] ? lock_is_held_type+0xd7/0x130 [ 905.600504] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 905.601579] ? vfs_write+0x188/0xae0 [ 905.602320] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 905.603481] ? fput+0x2a/0x50 [ 905.604132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 905.605187] do_syscall_64+0x3b/0x90 [ 905.605975] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.607025] RIP: 0033:0x7fec339e7b19 [ 905.607800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.611533] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 905.613070] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 905.614531] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 905.615983] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.617431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.618898] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 905.620370] [ 905.630350] FAULT_INJECTION: forcing a failure. [ 905.630350] name failslab, interval 1, probability 0, space 0, times 0 [ 905.632958] CPU: 0 PID: 7098 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 [ 905.634682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 905.637028] Call Trace: [ 905.637558] [ 905.638022] dump_stack_lvl+0x8b/0xb3 [ 905.638855] should_fail.cold+0x5/0xa [ 905.639668] ? memcg_alloc_slab_cgroups+0x7a/0x120 [ 905.640705] should_failslab+0x5/0x10 [ 905.641512] __kmalloc_node+0x76/0x360 [ 905.642335] memcg_alloc_slab_cgroups+0x7a/0x120 [ 905.643377] new_slab+0xff/0x360 [ 905.644094] ___slab_alloc+0x76d/0xa60 [ 905.644915] ? alloc_pid+0xcd/0xd80 [ 905.645714] ? alloc_pid+0xcd/0xd80 [ 905.646528] __slab_alloc.constprop.0+0x45/0x80 [ 905.647531] ? alloc_pid+0xcd/0xd80 [ 905.648327] kmem_cache_alloc+0x393/0x480 [ 905.649222] alloc_pid+0xcd/0xd80 [ 905.649987] ? copy_thread+0x304/0x950 [ 905.650834] ? copy_namespaces+0x1c1/0x450 [ 905.651753] copy_process+0x3d02/0x6be0 [ 905.652633] ? __stack_depot_save+0x35/0x450 [ 905.653615] ? __cleanup_sighand+0xb0/0xb0 [ 905.654557] ? lock_is_held_type+0xd7/0x130 [ 905.655506] ? find_held_lock+0x2c/0x110 [ 905.656382] ? create_io_worker+0x1d0/0x620 [ 905.657343] ? io_worker_handle_work+0x17f0/0x17f0 [ 905.658414] create_io_thread+0xb6/0xf0 [ 905.659297] ? copy_init_mm+0x20/0x20 [ 905.660132] ? mark_held_locks+0x9e/0xe0 [ 905.661012] ? io_worker_handle_work+0x17f0/0x17f0 [ 905.662096] ? lockdep_init_map_type+0x2c3/0x7a0 [ 905.663158] create_io_worker+0x248/0x620 [ 905.664072] io_wqe_enqueue+0x692/0xb90 [ 905.664972] ? create_io_worker+0x620/0x620 [ 905.665924] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 905.667069] ? lock_is_held_type+0xd7/0x130 [ 905.668023] io_queue_async_work+0x271/0x5a0 [ 905.669009] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 905.670017] io_req_task_submit+0x3b3/0x530 [ 905.670983] tctx_task_work+0x1d7/0x750 [ 905.671873] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 905.673059] ? rwlock_bug.part.0+0x90/0x90 [ 905.673982] ? _raw_spin_unlock_irq+0x1f/0x40 [ 905.675005] task_work_run+0xe2/0x1a0 [ 905.675847] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 905.676930] syscall_exit_to_user_mode+0x19/0x50 [ 905.677958] do_syscall_64+0x48/0x90 [ 905.678808] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 905.679925] RIP: 0033:0x7f67feb28b19 15:20:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 905.680743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 905.684961] RSP: 002b:00007f67fc09e188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 905.686654] RAX: 0000000000000001 RBX: 00007f67fec3bf60 RCX: 00007f67feb28b19 [ 905.688218] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 905.689791] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 905.691373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.692945] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 905.694553] 15:20:02 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x600000, 0x0, 0x0, 0x0) 15:20:02 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0) 15:20:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:02 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 917.903866] FAULT_INJECTION: forcing a failure. [ 917.903866] name failslab, interval 1, probability 0, space 0, times 0 [ 917.905152] CPU: 1 PID: 7152 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 917.906014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 917.907191] Call Trace: [ 917.907467] [ 917.907704] dump_stack_lvl+0x8b/0xb3 [ 917.908116] should_fail.cold+0x5/0xa [ 917.908526] ? create_object.isra.0+0x3a/0xa20 [ 917.909041] should_failslab+0x5/0x10 [ 917.909444] kmem_cache_alloc+0x5b/0x480 [ 917.909876] ? mark_held_locks+0x9e/0xe0 [ 917.910313] create_object.isra.0+0x3a/0xa20 [ 917.910795] ? kasan_unpoison+0x23/0x50 [ 917.911221] kmem_cache_alloc_bulk+0x387/0x670 [ 917.911698] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 917.912276] ? percpu_counter_add_batch+0xb4/0x170 [ 917.912801] io_submit_sqes.cold+0x20b/0x435 [ 917.913275] ? __do_sys_io_uring_enter+0xed2/0x1e80 [ 917.913808] ? find_held_lock+0x2c/0x110 [ 917.914236] ? io_async_task_func+0x560/0x560 [ 917.914733] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 917.915262] __do_sys_io_uring_enter+0xee0/0x1e80 [ 917.915781] ? io_submit_sqes+0x8fc0/0x8fc0 [ 917.916241] ? wait_for_completion_io+0x270/0x270 [ 917.916748] ? lock_is_held_type+0xd7/0x130 [ 917.917208] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 917.917777] ? vfs_write+0x188/0xae0 [ 917.918168] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 917.918758] ? fput+0x2a/0x50 [ 917.919092] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.919632] do_syscall_64+0x3b/0x90 [ 917.920029] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 917.920570] RIP: 0033:0x7fec339e7b19 [ 917.920955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 917.922862] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 917.923650] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 917.924268] FAULT_INJECTION: forcing a failure. [ 917.924268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.924394] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 917.924404] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.924413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.924421] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 917.924444] [ 917.930185] CPU: 0 PID: 7157 Comm: syz-executor.7 Not tainted 5.16.0-rc4-next-20211208 #1 15:20:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:14 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x80ffff, 0x0, 0x0, 0x0) 15:20:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:14 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) 15:20:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x2000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:14 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x10000f, 0x0, 0x0, 0x0, 0x0) [ 917.931801] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 917.934257] Call Trace: [ 917.934775] [ 917.935217] dump_stack_lvl+0x8b/0xb3 [ 917.935978] should_fail.cold+0x5/0xa [ 917.936745] _copy_from_user+0x2e/0x170 [ 917.937539] kstrtouint_from_user+0xac/0x160 [ 917.938418] ? kstrtouint+0x120/0x120 [ 917.939196] ? lock_acquire+0x1b2/0x4d0 [ 917.940003] proc_fail_nth_write+0x78/0x220 [ 917.940881] ? proc_task_getattr+0x1f0/0x1f0 [ 917.941785] ? lock_is_held_type+0xd7/0x130 [ 917.942668] ? proc_task_getattr+0x1f0/0x1f0 [ 917.943549] vfs_write+0x28a/0xae0 [ 917.944285] ksys_write+0x12d/0x250 [ 917.945027] ? __ia32_sys_read+0xb0/0xb0 [ 917.945828] ? syscall_enter_from_user_mode+0x1d/0x50 [ 917.946864] do_syscall_64+0x3b/0x90 [ 917.947610] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 917.948638] RIP: 0033:0x7f67feadb5ff [ 917.949361] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 917.953011] RSP: 002b:00007f67fc09e170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 917.954501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f67feadb5ff [ 917.955942] RDX: 0000000000000001 RSI: 00007f67fc09e1e0 RDI: 0000000000000004 [ 917.957350] RBP: 00007f67fc09e1d0 R08: 0000000000000000 R09: 0000000000000000 [ 917.958788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 917.960191] R13: 00007ffe21a19fdf R14: 00007f67fc09e300 R15: 0000000000022000 [ 917.961620] 15:20:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) pwrite64(r0, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_script(r1, &(0x7f0000005880)={'#! ', './file1'}, 0xb) pwrite64(r1, &(0x7f0000000180)='F', 0x1, 0x10000) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 15:20:14 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xc0ffff, 0x0, 0x0, 0x0) 15:20:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:14 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xf0ffff, 0x0, 0x0, 0x0) 15:20:14 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:14 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100300, 0x0, 0x0, 0x0, 0x0) 15:20:14 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:20:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r1, 0x76cf8000) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x3ff) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) 15:20:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x4000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 918.135365] FAULT_INJECTION: forcing a failure. [ 918.135365] name failslab, interval 1, probability 0, space 0, times 0 [ 918.136642] CPU: 1 PID: 7187 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 918.137507] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 918.138703] Call Trace: [ 918.138975] [ 918.139210] dump_stack_lvl+0x8b/0xb3 [ 918.139622] should_fail.cold+0x5/0xa [ 918.140027] ? io_setup_async_rw+0x199/0x620 [ 918.140498] should_failslab+0x5/0x10 [ 918.140905] __kmalloc+0x72/0x330 [ 918.141278] io_setup_async_rw+0x199/0x620 [ 918.141728] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 918.142311] io_write+0x941/0xbe0 [ 918.142689] ? __lock_acquire+0xbac/0x5b70 [ 918.143155] ? io_read+0xff0/0xff0 [ 918.143546] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 918.144107] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 918.144670] io_issue_sqe+0xe8a/0x6980 [ 918.145091] ? lock_release+0x3b2/0x6f0 [ 918.145519] ? lock_downgrade+0x6d0/0x6d0 [ 918.145964] ? find_held_lock+0x2c/0x110 [ 918.146398] ? io_openat2+0xbc0/0xbc0 [ 918.146827] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 918.147420] ? lock_is_held_type+0xd7/0x130 [ 918.147898] io_submit_sqes+0x16ba/0x8fc0 [ 918.148378] ? find_held_lock+0x2c/0x110 [ 918.148819] ? io_async_task_func+0x560/0x560 [ 918.149325] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 918.149870] __do_sys_io_uring_enter+0xee0/0x1e80 [ 918.150403] ? io_submit_sqes+0x8fc0/0x8fc0 [ 918.150891] ? wait_for_completion_io+0x270/0x270 [ 918.151413] ? lock_is_held_type+0xd7/0x130 [ 918.151875] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 918.152465] ? vfs_write+0x188/0xae0 [ 918.152874] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 918.153471] ? fput+0x2a/0x50 [ 918.153817] ? syscall_enter_from_user_mode+0x1d/0x50 [ 918.154363] do_syscall_64+0x3b/0x90 [ 918.154777] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 918.155326] RIP: 0033:0x7fec339e7b19 [ 918.155730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 918.157693] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 918.158497] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 918.159270] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 918.160026] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 918.160783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 918.161538] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 918.162300] 15:20:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xf, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:20:30 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x2000000, 0x0, 0x0, 0x0) 15:20:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x5000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:30 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:20:30 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) r3 = memfd_create(&(0x7f0000000140)='\x00', 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x908b0e24f82b546}, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x1}, 0x78) syz_io_uring_setup(0x1, &(0x7f0000000280)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x0, 0x1, {0x0, 0x0, r8}}, 0x1ff) io_uring_enter(r0, 0x100008, 0x0, 0x0, 0x0, 0x0) syz_io_uring_complete(r1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) fallocate(r9, 0x44, 0x20, 0x4af1) 15:20:30 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) [ 934.053926] FAULT_INJECTION: forcing a failure. [ 934.053926] name failslab, interval 1, probability 0, space 0, times 0 [ 934.056095] CPU: 0 PID: 7210 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 934.057608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 934.059771] Call Trace: [ 934.060252] [ 934.060664] dump_stack_lvl+0x8b/0xb3 [ 934.061389] should_fail.cold+0x5/0xa [ 934.062129] ? create_object.isra.0+0x3a/0xa20 [ 934.063000] should_failslab+0x5/0x10 [ 934.063724] kmem_cache_alloc+0x5b/0x480 [ 934.064484] create_object.isra.0+0x3a/0xa20 [ 934.065306] ? kasan_unpoison+0x23/0x50 [ 934.066058] __kmalloc+0x1ed/0x330 [ 934.066745] io_setup_async_rw+0x199/0x620 [ 934.067571] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 934.068607] io_write+0x941/0xbe0 [ 934.069256] ? __lock_acquire+0xbac/0x5b70 [ 934.070050] ? io_read+0xff0/0xff0 [ 934.070737] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 934.071737] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 934.072732] io_issue_sqe+0xe8a/0x6980 [ 934.073481] ? lock_release+0x3b2/0x6f0 [ 934.074233] ? lock_downgrade+0x6d0/0x6d0 [ 934.075026] ? find_held_lock+0x2c/0x110 [ 934.075786] ? io_openat2+0xbc0/0xbc0 [ 934.076521] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 934.077546] ? lock_is_held_type+0xd7/0x130 [ 934.078356] io_submit_sqes+0x16ba/0x8fc0 [ 934.079159] ? find_held_lock+0x2c/0x110 [ 934.079902] ? io_async_task_func+0x560/0x560 [ 934.080767] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 934.081695] __do_sys_io_uring_enter+0xee0/0x1e80 [ 934.082640] ? io_submit_sqes+0x8fc0/0x8fc0 [ 934.083459] ? wait_for_completion_io+0x270/0x270 [ 934.084369] ? lock_is_held_type+0xd7/0x130 [ 934.085178] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 934.086213] ? vfs_write+0x188/0xae0 [ 934.086923] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 934.087967] ? fput+0x2a/0x50 [ 934.088564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 934.089522] do_syscall_64+0x3b/0x90 [ 934.090219] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 934.091173] RIP: 0033:0x7fec339e7b19 [ 934.091853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 934.095243] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 934.096640] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 934.097967] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 934.099329] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 934.100683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.101987] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 934.103331] 15:20:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:30 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100300, 0x0, 0x0, 0x0, 0x0) 15:20:30 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:30 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x2, 0x0, 0x0, 0x0) 15:20:30 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x5000000, 0x0, 0x0, 0x0) 15:20:30 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x5, &(0x7f0000000040)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x00', &(0x7f0000000240)={0x100, 0x24, 0x17}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10, &(0x7f0000000480)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}, {@version_L}, {@debug}, {@access_user}, {@cache_none}, {@cache_fscache}], [{@permit_directio}, {@uid_lt={'uid<', 0xee01}}, {@smackfsdef={'smackfsdef', 0x3d, '.^\''}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_appraise}, {@measure}]}}) getdents(r0, &(0x7f0000000280)=""/170, 0xaa) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}, {r4, r5/1000+10000}}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=""/91) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x7, 0x5, &(0x7f0000000840)=[{&(0x7f0000000600)="0d7c914573224bff9759aeca07dbc4cbd05bff9e3b3c7d6a2f978171b9306186f9e141b7edcd99bfed41590170546b98fe1db1fe2dadad85f2e37696cc55b35bbc0a4ef5889ec812091339a5a727a3da3174a37518064d5606c27e61a957c54d4fc62bf3eab95c365e84d73ea5dbd22855fcbd7c4f07f50f612ef7d828ff22a247ca12d6ef2d9e688defdd9c3f1816234ca5f13a05f7bf8d49cb4bcae2cca5", 0x9f, 0x80000001}, {&(0x7f00000006c0)="aa1655a3c43a60a4f5724b3d000929a5eaa851008cd9eac3ad0c0740080532be3ff7464b86865e6bb9e33227f7686520a54a6cb03ed0832d5355f37b57d039", 0x3f}, {&(0x7f0000000700)="566d1521c0672277091d93486d95f01689d94754c2f51abd38e91b2fcb2d1d9369a3a1b89ec7c9e53f796d4de7dcac948525cfb162d6f16d4ae9ae4620d272a575adc18266847e832964dec7e9b41da3f24bcb", 0x53, 0x2}, {&(0x7f0000000780)="14b398d12d7251501ddfba6c5099090e1631fbba5ffef0c47e47bf46e7b4dbb0dc56df9901d044c459d0907e1e6466e8e541abc17adfe592dd5d7783784974b4b6a8706723575396bdba3d26560d1dc14bdb584f159b73330859168fb35927611fa0108703ff88f470", 0x69, 0x4}, {&(0x7f0000000800)="1fbdcaa6dd9bb7fd092ef641ccf07e2b9204f793d3c45b47dd0fae1514a302bf5cb83b633309e1dc882d24228cabbd81400c4873652c5b", 0x37, 0x2}], 0x4088, &(0x7f00000008c0)={[{@commit={'commit', 0x3d, 0x7}}, {@data_writeback}], [{@uid_gt={'uid>', r2}}]}) mkdirat(r6, &(0x7f0000000980)='./file0\x00', 0x210) [ 934.336601] 9pnet: Insufficient options for proto=fd [ 934.347147] loop3: detected capacity change from 0 to 264192 [ 934.380025] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 934.397615] loop3: detected capacity change from 0 to 264192 [ 934.401733] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 15:20:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xc0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x7000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:42 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x5, 0x0, 0x0, 0x0) 15:20:42 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) 15:20:42 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:20:42 executing program 3: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x2, 0x0, 0x0, 0x0) 15:20:42 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x8000000, 0x0, 0x0, 0x0) 15:20:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 946.243145] FAULT_INJECTION: forcing a failure. [ 946.243145] name failslab, interval 1, probability 0, space 0, times 0 [ 946.245690] CPU: 0 PID: 7291 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 946.247646] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 946.249838] Call Trace: [ 946.250450] [ 946.250895] dump_stack_lvl+0x8b/0xb3 [ 946.251856] should_fail.cold+0x5/0xa [ 946.252611] ? io_issue_sqe+0x6ea/0x6980 [ 946.253452] ? io_arm_poll_handler+0x22f/0x7a0 [ 946.254455] should_failslab+0x5/0x10 [ 946.255315] kmem_cache_alloc_trace+0x55/0x3c0 [ 946.256308] ? lock_release+0x3b2/0x6f0 [ 946.257181] io_arm_poll_handler+0x22f/0x7a0 [ 946.258150] ? io_write+0xbe0/0xbe0 [ 946.258866] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 946.259956] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 946.260850] io_submit_sqes+0x7cd4/0x8fc0 [ 946.261680] ? find_held_lock+0x2c/0x110 [ 946.262465] ? io_async_task_func+0x560/0x560 [ 946.263376] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 946.264348] __do_sys_io_uring_enter+0xee0/0x1e80 [ 946.265296] ? io_submit_sqes+0x8fc0/0x8fc0 [ 946.266139] ? wait_for_completion_io+0x270/0x270 [ 946.267078] ? lock_is_held_type+0xd7/0x130 [ 946.267916] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 946.268968] ? vfs_write+0x188/0xae0 [ 946.269695] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 946.270752] ? fput+0x2a/0x50 [ 946.271381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 946.272385] do_syscall_64+0x3b/0x90 [ 946.273121] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 946.274116] RIP: 0033:0x7fec339e7b19 [ 946.274832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 946.278391] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 946.279860] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 946.281233] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 946.282609] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 946.284002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.285375] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 946.286776] 15:20:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:43 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x8, 0x0, 0x0, 0x0) 15:20:43 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0xa190000, 0x0, 0x0, 0x0) 15:20:43 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x100001, 0x0, 0x0, 0x0) 15:20:43 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000000)='./file0\x00', 0x2000000000000002, 0x0, 0x0, 0x0, 0x0) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r0, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r1, 0x0) mount$cgroup(0x0, &(0x7f00000002c0)='\x00', &(0x7f0000000300), 0x800000, &(0x7f0000000340)={[{@xattr}], [{@subj_type={'subj_type', 0x3d, 'huge=always'}}, {@dont_appraise}, {@subj_user={'subj_user', 0x3d, 'hash'}}, {@appraise}, {@uid_lt={'uid<', r1}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}]}) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="8a6d0e0688bda03e7d125eccaf242d8e9c99a068c5fb029624cac11f7ee5fb82641e0b475ec899ca62563ea69b887e4cb72453293f421c16e578e4af8e5ca53025ce67982c3e3cbcd6b210a00bb0c6c41e2027d58480ff77b876a4a7acce2e9500b02e239e02b9dfc94dd7ba9cf4fd8d676523bcf7fc6f82b0c40cfac7ab4648c100e05989dd2093f667a312efe69e43b20c8faf39557b7b4a2c2e817967291a4b38064d8cd72b400ad521d5974de0f86c", 0xb1, 0x6}, {&(0x7f0000000180)="11f8309f183eb37734627f483f0fe4c375cc4d54cd399a1a758744bc06a16cd75e702240b01953878caa26b93dc83f5dd9de66c38e08074da31a5b37449cb349cd0a3f9483b49cb50febbf8e1fc866b86da7a1e89b44875ee973883dd2b6da34a721b3176b77ee13ce1506ee4fa2a8971b4999728254d668cd4ecd5267303a3e401018c10d1f0601751b021b13f35fc0083044d974f1f6a2f18fe31a30fe6baf0e27d0ef5b77005fce2d3659d0", 0xad}], 0x80000, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x6}}, {@huge_always}], [{@hash}, {@obj_user}]}) 15:20:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xec0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x8000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:43 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x1001000, 0x0, 0x0, 0x0) 15:20:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:20:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x11000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x10000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:55 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x100001, 0x0, 0x0) 15:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x33fe0, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) 15:20:55 executing program 3: prctl$PR_CAPBSET_DROP(0x18, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) syz_io_uring_setup(0x3b38, &(0x7f0000000040), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000380), 0x1, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$incfs(r2, &(0x7f00000003c0)='.pending_reads\x00', 0x0, 0x100) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x2000, 0x0) poll(&(0x7f0000000440)=[{r0, 0x2114}], 0x1, 0x4) pwrite64(r2, &(0x7f0000000000)="a291061163a15c0497bee057a5beff6d65165fcbb9336bfa04f1c901491e5308ea8f0d", 0x23, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfc95}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000180)={0x6, 0x2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, 0x0, 0x40) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, 0x0, 0x800) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x40010, r1, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), 0xffffffffffffffff) 15:20:55 executing program 2: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x10, 0x0, 0x0, 0x0) 15:20:55 executing program 4: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x15010000, 0x0, 0x0, 0x0) [ 958.513604] FAULT_INJECTION: forcing a failure. [ 958.513604] name failslab, interval 1, probability 0, space 0, times 0 [ 958.516226] CPU: 0 PID: 7334 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 958.517961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 958.520346] Call Trace: [ 958.520898] [ 958.521374] dump_stack_lvl+0x8b/0xb3 [ 958.522223] should_fail.cold+0x5/0xa [ 958.523038] ? create_object.isra.0+0x3a/0xa20 [ 958.524010] should_failslab+0x5/0x10 [ 958.524815] kmem_cache_alloc+0x5b/0x480 [ 958.525693] create_object.isra.0+0x3a/0xa20 [ 958.526622] ? kasan_unpoison+0x23/0x50 [ 958.527506] kmem_cache_alloc_trace+0x22e/0x3c0 [ 958.528504] io_arm_poll_handler+0x22f/0x7a0 [ 958.529447] ? io_write+0xbe0/0xbe0 [ 958.530234] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 958.531428] io_queue_sqe_arm_apoll+0x61/0x1a0 [ 958.532393] io_submit_sqes+0x7cd4/0x8fc0 [ 958.533307] ? find_held_lock+0x2c/0x110 [ 958.534168] ? io_async_task_func+0x560/0x560 [ 958.535145] ? __do_sys_io_uring_enter+0xee0/0x1e80 [ 958.536213] __do_sys_io_uring_enter+0xee0/0x1e80 [ 958.537260] ? io_submit_sqes+0x8fc0/0x8fc0 [ 958.538178] ? wait_for_completion_io+0x270/0x270 [ 958.539202] ? lock_is_held_type+0xd7/0x130 [ 958.540147] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 958.541292] ? vfs_write+0x188/0xae0 [ 958.542090] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 958.543257] ? fput+0x2a/0x50 [ 958.543941] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.545030] do_syscall_64+0x3b/0x90 [ 958.545837] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 958.546904] RIP: 0033:0x7fec339e7b19 [ 958.547702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.551703] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 958.553346] RAX: ffffffffffffffda RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 958.554885] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 958.556444] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.558001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.559599] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 958.561207] 15:20:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x3f000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) 15:20:55 executing program 7: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x1001000, 0x0, 0x0) 15:20:55 executing program 0: r0 = syz_io_uring_setup(0xeaf, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x100001, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000039c0), 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0), 0x0) 15:20:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20000264, r1, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x24}}, 0x0) [ 958.630073] FAULT_INJECTION: forcing a failure. [ 958.630073] name failslab, interval 1, probability 0, space 0, times 0 [ 958.631261] CPU: 1 PID: 7363 Comm: syz-executor.0 Not tainted 5.16.0-rc4-next-20211208 #1 [ 958.632078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 958.633155] Call Trace: [ 958.633410] [ 958.633635] dump_stack_lvl+0x8b/0xb3 [ 958.634032] should_fail.cold+0x5/0xa [ 958.634429] ? create_io_worker+0xf6/0x620 [ 958.634868] should_failslab+0x5/0x10 [ 958.635254] kmem_cache_alloc_node_trace+0x59/0x3f0 [ 958.635775] create_io_worker+0xf6/0x620 [ 958.636179] io_wqe_enqueue+0x692/0xb90 [ 958.636601] ? create_io_worker+0x620/0x620 [ 958.637028] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 958.637561] ? lock_is_held_type+0xd7/0x130 [ 958.637990] io_queue_async_work+0x271/0x5a0 [ 958.638452] io_queue_sqe_arm_apoll+0xd1/0x1a0 [ 958.638905] io_req_task_submit+0x3b3/0x530 [ 958.639354] tctx_task_work+0x1d7/0x750 [ 958.639752] ? __io_submit_flush_completions+0x3b0/0x3b0 [ 958.640296] ? rwlock_bug.part.0+0x90/0x90 [ 958.640715] ? _raw_spin_unlock_irq+0x1f/0x40 [ 958.641182] task_work_run+0xe2/0x1a0 [ 958.641567] exit_to_user_mode_prepare+0x1b4/0x1c0 [ 958.642086] syscall_exit_to_user_mode+0x19/0x50 [ 958.642543] do_syscall_64+0x48/0x90 [ 958.642936] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 958.643453] RIP: 0033:0x7fec339e7b19 [ 958.643831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.645713] RSP: 002b:00007fec30f5d188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 958.646484] RAX: 0000000000000001 RBX: 00007fec33afaf60 RCX: 00007fec339e7b19 [ 958.647214] RDX: 0000000000000000 RSI: 0000000000100001 RDI: 0000000000000003 [ 958.647951] RBP: 00007fec30f5d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.648670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.649381] R13: 00007ffc25e0ec6f R14: 00007fec30f5d300 R15: 0000000000022000 [ 958.650113] 15:20:55 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x11000000, @mcast2, 0x4}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='\"', 0x1}], 0x1}}], 0x2, 0x8001) [ 1102.784696] INFO: task syz-executor.4:7349 blocked for more than 143 seconds. [ 1102.786760] Not tainted 5.16.0-rc4-next-20211208 #1 [ 1102.788173] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.790053] task:syz-executor.4 state:D stack:28136 pid: 7349 ppid: 296 flags:0x00024004 [ 1102.791883] Call Trace: [ 1102.792422] [ 1102.792931] __schedule+0x882/0x2160 [ 1102.793787] ? io_schedule_timeout+0x180/0x180 [ 1102.794812] schedule+0xd2/0x260 [ 1102.795537] io_uring_cancel_generic+0x537/0x68a [ 1102.796583] ? io_uring_setup.cold+0x23ac/0x23ac [ 1102.797640] ? lock_release+0x3b2/0x6f0 [ 1102.798479] ? do_exit+0x253/0x2960 [ 1102.799293] ? lock_downgrade+0x6d0/0x6d0 [ 1102.800917] ? wait_woken+0x1f0/0x1f0 [ 1102.802181] ? rwlock_bug.part.0+0x90/0x90 [ 1102.803117] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1102.804120] do_exit+0x604/0x2960 [ 1102.804904] ? lock_release+0x3b2/0x6f0 [ 1102.805799] ? mm_update_next_owner+0x7d0/0x7d0 [ 1102.806808] ? lock_downgrade+0x6d0/0x6d0 [ 1102.807725] ? do_raw_spin_lock+0x121/0x260 [ 1102.808688] do_group_exit+0x125/0x310 [ 1102.809538] get_signal+0x349/0x2690 [ 1102.810384] ? futex_wake+0x158/0x490 [ 1102.811231] ? signal_setup_done+0x4e0/0x4e0 [ 1102.812226] arch_do_signal_or_restart+0x2b0/0x1720 [ 1102.813339] ? do_futex+0x136/0x380 [ 1102.814172] ? __ia32_compat_sys_get_robust_list+0x3b0/0x3b0 [ 1102.815436] ? get_sigframe_size+0x10/0x10 [ 1102.816392] ? __x64_sys_futex+0x1c6/0x4c0 [ 1102.817329] ? __x64_sys_futex_time32+0x480/0x480 [ 1102.818401] exit_to_user_mode_prepare+0x143/0x1c0 [ 1102.819492] syscall_exit_to_user_mode+0x19/0x50 [ 1102.820547] do_syscall_64+0x48/0x90 [ 1102.821377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1102.822527] RIP: 0033:0x7f517a696b19 [ 1102.823340] RSP: 002b:00007f5177beb218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1102.824983] RAX: fffffffffffffe00 RBX: 00007f517a7aa028 RCX: 00007f517a696b19 [ 1102.826528] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f517a7aa028 [ 1102.828085] RBP: 00007f517a7aa020 R08: 0000000000000000 R09: 0000000000000000 [ 1102.829636] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f517a7aa02c [ 1102.831171] R13: 00007ffc34bae36f R14: 00007f5177beb300 R15: 0000000000022000 [ 1102.832738] [ 1102.833233] [ 1102.833233] Showing all locks held in the system: [ 1102.834583] 1 lock held by khungtaskd/24: [ 1102.835471] #0: ffffffff85201860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1102.837478] 1 lock held by in:imklog/211: [ 1102.838390] [ 1102.838777] ============================================= [ 1102.838777] VM DIAGNOSIS: 15:23:19 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82368b21 RDI=ffffffff87387a40 RBP=ffffffff87387a00 RSP=ffff888008b5f900 R8 =0000000000000000 R9 =0000000000000030 R10=ffffffff8236a763 R11=000000000000000a R12=0000000000000030 R13=0000000000000030 R14=ffffffff87387a00 R15=dffffc0000000000 RIP=ffffffff82368b78 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d0ced14648 CR3=000000001b4dc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 415725e200000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=ffffffff8407f190 RBX=ffff8880081a9ac0 RCX=ffffffff84061151 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000001 RSP=ffff888008207e78 R8 =0000000000000001 R9 =ffff88806cf38a13 R10=ffffed100d9e7142 R11=0000000000000001 R12=ffffed1001035358 R13=ffffffff858bde90 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8407f19b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f568cbf46e8 CR3=00000000085c4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 36452280bdc4cdb4 1446094bd11f7424 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea20 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec60 YMM04=0000000000000000 0000000000000000 9eb7ffd262b32a59 00000000001796b0 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aeac8 YMM06=0000000000000000 0000000000000000 d34b9966f6ee0ba7 00000000000ae980 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000002000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000