x0, 0x13f02, 0x1, 0x1, 0x356, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x1, 0x7f, 0xb405, 0x74e, 0x6, 0x5}, {0x8001, 0x0, 0x711, 0x9, 0x5}], ['\x00']}) r4 = syz_open_dev$hiddev(&(0x7f0000000580), 0x1, 0x171281) signalfd4(r4, &(0x7f0000000780), 0x8, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[]) pidfd_send_signal(r5, 0x15, &(0x7f0000000b00)={0xc, 0x5}, 0x0) clone3(&(0x7f00000009c0)={0x2100, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340), {0x2f}, &(0x7f00000006c0)=""/142, 0x8e, &(0x7f00000008c0)=""/231, &(0x7f0000000380)=[0x0, 0x0], 0x2, {r1}}, 0x58) 13:36:05 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10000000c) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0xa683, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x1000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@pcr={'pcr', 0x3d, 0x35}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}}) chdir(&(0x7f00000000c0)='./file0\x00') [ 758.337626] 9pnet: p9_fd_create_tcp (6328): problem connecting socket to 127.0.0.1 [ 758.348381] loop2: detected capacity change from 0 to 32768 [ 758.354108] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:36:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 3) dup2(r0, r1) [ 758.424280] FAULT_INJECTION: forcing a failure. [ 758.424280] name failslab, interval 1, probability 0, space 0, times 0 [ 758.426227] CPU: 0 PID: 6339 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 758.427056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 758.428054] Call Trace: [ 758.428380] dump_stack+0x107/0x167 [ 758.428827] should_fail.cold+0x5/0xa [ 758.429289] ? create_object.isra.0+0x3a/0xa20 [ 758.429842] should_failslab+0x5/0x20 [ 758.430397] kmem_cache_alloc+0x5b/0x310 [ 758.431019] create_object.isra.0+0x3a/0xa20 [ 758.431621] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 758.432236] kmem_cache_alloc_node+0x169/0x330 [ 758.432792] __alloc_skb+0x6d/0x5b0 [ 758.433265] alloc_skb_with_frags+0x92/0x570 [ 758.433870] ? mark_lock+0xf5/0x2df0 [ 758.434395] ? lock_acquire+0x197/0x470 [ 758.434949] ? find_held_lock+0x2c/0x110 [ 758.435509] sock_alloc_send_pskb+0x7af/0x930 [ 758.436205] ? sk_alloc+0x350/0x350 [ 758.436672] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 758.437315] ? lock_chain_count+0x20/0x20 [ 758.437884] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 758.438580] ? ip6_mtu+0x1bb/0x3d0 [ 758.439065] ? lock_downgrade+0x6d0/0x6d0 [ 758.439585] ? ip_frag_init+0x350/0x350 [ 758.440096] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 758.440704] ? ip6_mtu+0x1e9/0x3d0 [ 758.441155] ? ip6_setup_cork+0xfb7/0x1740 [ 758.441692] ip6_make_skb+0x2de/0x4e0 [ 758.442180] ? ip_frag_init+0x350/0x350 [ 758.442663] ? ip_frag_init+0x350/0x350 [ 758.443199] ? ip6_push_pending_frames+0xf0/0xf0 [ 758.443802] ? ip6_dst_hoplimit+0x199/0x440 [ 758.444349] ? lock_downgrade+0x6d0/0x6d0 [ 758.444882] udpv6_sendmsg+0x20d3/0x2ad0 [ 758.445404] ? ip_frag_init+0x350/0x350 [ 758.445913] ? udp_v6_push_pending_frames+0x360/0x360 [ 758.446574] ? _down_write_nest_lock+0x160/0x160 [ 758.447158] ? vmacache_update+0xce/0x140 [ 758.447663] ? do_user_addr_fault+0x5b0/0xc60 [ 758.448206] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 758.448852] ? asm_exc_page_fault+0x1e/0x30 [ 758.449390] ? sock_has_perm+0x1ea/0x280 [ 758.449892] ? __import_iovec+0x458/0x590 [ 758.450427] ? udp_v6_push_pending_frames+0x360/0x360 [ 758.451135] inet6_sendmsg+0x105/0x140 [ 758.451667] ? inet6_compat_ioctl+0x320/0x320 [ 758.452279] __sock_sendmsg+0xf2/0x190 [ 758.452815] ____sys_sendmsg+0x334/0x870 [ 758.453375] ? sock_write_iter+0x3d0/0x3d0 [ 758.453951] ? do_recvmmsg+0x6d0/0x6d0 [ 758.454499] ? mark_lock+0xf5/0x2df0 [ 758.455010] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 758.455730] ? __lock_acquire+0x1657/0x5b00 [ 758.456297] ___sys_sendmsg+0xf3/0x170 [ 758.456789] ? sendmsg_copy_msghdr+0x160/0x160 [ 758.457343] ? __fget_files+0x2cf/0x520 [ 758.457820] ? lock_downgrade+0x6d0/0x6d0 [ 758.458331] ? lock_downgrade+0x6d0/0x6d0 [ 758.458833] ? __fget_files+0x2f8/0x520 [ 758.459317] ? __fget_light+0xea/0x290 [ 758.459790] __sys_sendmmsg+0x195/0x470 [ 758.460271] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 758.460789] ? lock_downgrade+0x6d0/0x6d0 [ 758.461297] ? __mutex_unlock_slowpath+0xe1/0x600 [ 758.461878] ? wait_for_completion_io+0x270/0x270 [ 758.462470] ? rcu_read_lock_any_held+0x75/0xa0 [ 758.463029] ? vfs_write+0x354/0xb10 [ 758.463481] ? fput_many+0x2f/0x1a0 [ 758.463919] ? ksys_write+0x1a9/0x260 [ 758.464378] ? __ia32_sys_read+0xb0/0xb0 [ 758.464871] __x64_sys_sendmmsg+0x99/0x100 [ 758.465381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 758.466007] do_syscall_64+0x33/0x40 [ 758.466456] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 758.467073] RIP: 0033:0x7fbfd48dcb19 [ 758.467521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 758.469732] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 758.470658] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 758.471516] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 758.472374] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 758.473232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.474103] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 758.551819] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 13:36:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:36:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 4) dup2(r0, r1) 13:36:19 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file1\x00', 0x21) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000280)=""/46, 0x2e) getdents64(r1, &(0x7f00000001c0)=""/76, 0x4c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0xa00, 0x0) fsmount(r2, 0x0, 0x75) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x80186803, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r1}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897a8daa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db158729cd7ca20d8cb5989348", @ANYRESHEX, @ANYBLOB="fd000000000000", @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC, @ANYBLOB=',audit,rootcontext=user_u,\x00']) creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:36:19 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r3, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) [ 772.243574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 772.258959] 9pnet: Insufficient options for proto=fd [ 772.260866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.6'. [ 772.274755] 9pnet: Insufficient options for proto=fd sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000007c0)={0x1374, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800000}]}, @TIPC_NLA_LINK={0xf0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0xfffb, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0, 0x10001}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6ce4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x40000000, @loopback, 0xfffffff7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x8001, 0xfffff2e1, @ipv4={'\x00', '\xff\xff', @broadcast}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @loopback, 0x3f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x1374}, 0x1, 0x0, 0x0, 0x40000c1}, 0x24000841) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f0000000780)=ANY=[@ANYBLOB='fscontext?']) 13:36:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) sendfile(r1, r0, 0x0, 0x4000007ffffffc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xfffffed5, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x6e4}, 0x1, 0x0, 0x0, 0x40041}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 13:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x3c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:19 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', <r4=>0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010021000000000000000c0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="04000380"], 0x24}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = syz_io_uring_setup(0xc8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@x25={0x9, @remote}, 0x0, 0x80000, 0x1, {0x0, r9}}, 0x2) sendfile(r0, r1, 0x0, 0x2) flock(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/79, 0x4f) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x434042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0004}, {0x7ff, 0x1, 0x2, 0x6000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) 13:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 772.316523] loop1: detected capacity change from 0 to 16776704 13:36:19 executing program 2: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x5714}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "15bb6949bc674ed64133723aa6453b9d292123bebbcd37c5097fd53da62c01e266166394afb8d0aca105da30931d140a11973acb99cc0d8da3a4f6f42444a1948f422c8d8d2d8bdd069588783e32b713"}, 0xd8) tgkill(0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$binfmt_elf64(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454cb8000000070000001000e5fff802003e000000000000000000000000000800008aeb00000000000000000000000000000000003800020000000000000003b1068139a93d0dbe44e8254dbf61469010d0354c88ef01c0518fcb71bac3b97fcff41dfd9a6d54c735b0b365c10303aad33310c233168196a84f7821a6da9588f733e1b017dddb33c5a0588fad46166cf2231fbf3891513628d6930c94392e514abae70c0dd9f2ffe4b945522fbf784a894b6b1e4ee8fcddccbfc851fde7a994c6cc8d06f7e807daa1b80b358bc463124a20c081230386c99544d947acc3418ccbe63a552ea94d718ffcff63d366da4aa22125c1fd51e96a2b860e6fbc38e4c87aa607a28dea45ac4bbb08a00330f1744f0da8244058843c7309ec1296a6034d144a9699f42a0d2ce4b00658c0da399b43f7029bdd3a7740bc22a6101ab4996be778271162c709b27b6246616b6bd1a5b51c259ca5da221288b366d46c82212ff7aa94093ad9660d7f7d053c01909d27d61a90b19e0a28c4863e1cb347f505edf40c002daefecf555edfec9363e76d4ffd3a20b13330179e85e653d5f290113b74f3abd09f95589fd6fb622f6d4252"], 0xaf2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x9, 0x7, 0xe1, 0x3, 0x0, 0xbb, 0x10000, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xcd01, 0x1, @perf_config_ext={0x5, 0x7}, 0x40204, 0x0, 0x2, 0x6, 0x1f, 0x5, 0x0, 0x0, 0xfffff000, 0x0, 0x7fff}, 0x0, 0x4, r6, 0x1) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4) pread64(r7, &(0x7f0000000040)=""/32, 0x20, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, 0x0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000900)={0x0, "72b65d47eda932bc407d3663234162a9"}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 772.358842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35144 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 13:36:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 772.368491] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 772.368491] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 772.368491] 13:36:19 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x481, 0x0) openat(0xffffffffffffffff, &(0x7f00000004c0)='./file0/../file0\x00', 0x800, 0x30) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6, 0x8010, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) syz_io_uring_submit(r2, r5, &(0x7f00000006c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r0, 0x0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000240)=""/84, 0x54}, {&(0x7f00000002c0)=""/221, 0xdd}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000740)=""/127, 0x7f}], 0x6, &(0x7f0000000580)=""/205, 0xcd}, 0x0, 0x2123, 0x0, {0x3}}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0}) pipe(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) io_uring_enter(r9, 0x7177, 0xb17d, 0x1, &(0x7f0000000480)={[0x7ff]}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) close(r1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}) setresuid(0xee00, r11, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 13:36:19 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:36:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 772.425591] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34247 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.457308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53893 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.463289] EXT4-fs (loop1): mounted filesystem without journal. Opts: noacl,,errors=continue [ 772.476802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=53481 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.515021] FAULT_INJECTION: forcing a failure. [ 772.515021] name failslab, interval 1, probability 0, space 0, times 0 [ 772.516573] CPU: 1 PID: 6362 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 772.517405] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.518480] Call Trace: [ 772.518839] dump_stack+0x107/0x167 [ 772.519293] should_fail.cold+0x5/0xa [ 772.519767] should_failslab+0x5/0x20 [ 772.520239] __kmalloc_node_track_caller+0x74/0x3b0 [ 772.520850] ? alloc_skb_with_frags+0x92/0x570 [ 772.521416] __alloc_skb+0xb1/0x5b0 [ 772.521865] alloc_skb_with_frags+0x92/0x570 [ 772.522421] ? mark_lock+0xf5/0x2df0 [ 772.522901] ? lock_acquire+0x197/0x470 [ 772.523411] ? find_held_lock+0x2c/0x110 [ 772.523942] sock_alloc_send_pskb+0x7af/0x930 [ 772.524498] ? sk_alloc+0x350/0x350 [ 772.524947] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.525590] ? lock_chain_count+0x20/0x20 [ 772.526101] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 772.526737] ? ip6_mtu+0x1bb/0x3d0 [ 772.527220] ? lock_downgrade+0x6d0/0x6d0 [ 772.527741] ? ip_frag_init+0x350/0x350 [ 772.528257] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 772.528845] ? ip6_mtu+0x1e9/0x3d0 [ 772.529280] ? ip6_setup_cork+0xfb7/0x1740 [ 772.529799] ip6_make_skb+0x2de/0x4e0 [ 772.530281] ? ip_frag_init+0x350/0x350 [ 772.530768] ? ip_frag_init+0x350/0x350 [ 772.531305] ? ip6_push_pending_frames+0xf0/0xf0 [ 772.531896] ? ip6_dst_hoplimit+0x199/0x440 [ 772.532425] ? lock_downgrade+0x6d0/0x6d0 [ 772.532939] udpv6_sendmsg+0x20d3/0x2ad0 [ 772.533439] ? ip_frag_init+0x350/0x350 [ 772.533931] ? udp_v6_push_pending_frames+0x360/0x360 [ 772.534578] ? _down_write_nest_lock+0x160/0x160 [ 772.535161] ? vmacache_update+0xce/0x140 [ 772.535673] ? do_user_addr_fault+0x5b0/0xc60 [ 772.536224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.536889] ? asm_exc_page_fault+0x1e/0x30 [ 772.537449] ? sock_has_perm+0x1ea/0x280 [ 772.537967] ? __import_iovec+0x458/0x590 [ 772.538492] ? udp_v6_push_pending_frames+0x360/0x360 [ 772.539126] inet6_sendmsg+0x105/0x140 [ 772.539602] ? inet6_compat_ioctl+0x320/0x320 [ 772.540151] __sock_sendmsg+0xf2/0x190 [ 772.540629] ____sys_sendmsg+0x334/0x870 [ 772.541129] ? sock_write_iter+0x3d0/0x3d0 [ 772.541645] ? do_recvmmsg+0x6d0/0x6d0 [ 772.542142] ? mark_lock+0xf5/0x2df0 [ 772.542605] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.543280] ? __lock_acquire+0x1657/0x5b00 [ 772.543811] ___sys_sendmsg+0xf3/0x170 [ 772.544290] ? sendmsg_copy_msghdr+0x160/0x160 [ 772.544853] ? __fget_files+0x2cf/0x520 [ 772.545340] ? lock_downgrade+0x6d0/0x6d0 [ 772.545851] ? lock_downgrade+0x6d0/0x6d0 [ 772.546384] ? __fget_files+0x2f8/0x520 [ 772.546887] ? __fget_light+0xea/0x290 [ 772.547404] __sys_sendmmsg+0x195/0x470 [ 772.547930] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 772.548457] ? lock_downgrade+0x6d0/0x6d0 [ 772.548976] ? __mutex_unlock_slowpath+0xe1/0x600 [ 772.549570] ? wait_for_completion_io+0x270/0x270 [ 772.550172] ? rcu_read_lock_any_held+0x75/0xa0 [ 772.550744] ? vfs_write+0x354/0xb10 [ 772.551200] ? fput_many+0x2f/0x1a0 [ 772.551646] ? ksys_write+0x1a9/0x260 [ 772.552159] ? __ia32_sys_read+0xb0/0xb0 [ 772.552662] __x64_sys_sendmmsg+0x99/0x100 [ 772.553211] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.553840] do_syscall_64+0x33/0x40 [ 772.554309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.554937] RIP: 0033:0x7fbfd48dcb19 [ 772.555393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.557690] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 772.558665] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 772.559536] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 772.560409] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.561282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.562217] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:36:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 772.629575] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35656 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.647780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 13:36:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000)=0xfffffffa, 0x4) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c, 0x0, 0x0, 0x0, 0x15}}], 0x44, 0x2000000d) [ 772.667004] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=33608 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.677883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35140 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.704462] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 [ 772.708385] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=6363 comm=syz-executor.7 13:36:19 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 5) dup2(r0, r1) 13:36:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:19 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0) pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) ioctl$sock_bt_hci(r5, 0x400448ca, &(0x7f0000000140)="c7b1aaa556988f8b0f7eec8b25a9e5af54fa5cbd15f3d7e81a3169d680f6aed56c9c2a977a28103a29f9b0aee8f695ad5b52d3db35ebf4baeb9e6f5c6bd013c93249e604f82ad0dd34a775ac2486051b9ee2f78d7ce033a6988780a0a628c57fe27a3ee667219790ec2c377c3c80dc813c44c67cb997711a885e7b039f3cd8bd0ec806c39a2611d7d54793a51378ae099a01c7c891") syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) creat(&(0x7f0000000080)='./file0\x00', 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x300) [ 772.801416] FAULT_INJECTION: forcing a failure. [ 772.801416] name failslab, interval 1, probability 0, space 0, times 0 [ 772.803214] CPU: 0 PID: 6411 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 772.804112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 772.805154] Call Trace: [ 772.805483] dump_stack+0x107/0x167 [ 772.805933] should_fail.cold+0x5/0xa [ 772.806485] ? create_object.isra.0+0x3a/0xa20 [ 772.807052] should_failslab+0x5/0x20 [ 772.807521] kmem_cache_alloc+0x5b/0x310 [ 772.808022] create_object.isra.0+0x3a/0xa20 [ 772.808602] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 772.809236] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 772.809887] ? alloc_skb_with_frags+0x92/0x570 [ 772.810471] __alloc_skb+0xb1/0x5b0 [ 772.810968] alloc_skb_with_frags+0x92/0x570 [ 772.811593] ? mark_lock+0xf5/0x2df0 [ 772.812092] ? lock_acquire+0x197/0x470 [ 772.812636] ? find_held_lock+0x2c/0x110 [ 772.813182] sock_alloc_send_pskb+0x7af/0x930 [ 772.813851] ? sk_alloc+0x350/0x350 [ 772.814363] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.815220] ? lock_chain_count+0x20/0x20 [ 772.815814] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 772.816503] ? ip6_mtu+0x1bb/0x3d0 [ 772.816979] ? lock_downgrade+0x6d0/0x6d0 [ 772.817597] ? ip_frag_init+0x350/0x350 [ 772.818149] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 772.818831] ? ip6_mtu+0x1e9/0x3d0 [ 772.819306] ? ip6_setup_cork+0xfb7/0x1740 [ 772.819879] ip6_make_skb+0x2de/0x4e0 [ 772.820391] ? ip_frag_init+0x350/0x350 [ 772.820933] ? ip_frag_init+0x350/0x350 [ 772.822159] ? ip6_push_pending_frames+0xf0/0xf0 [ 772.822851] ? ip6_dst_hoplimit+0x199/0x440 [ 772.823461] ? lock_downgrade+0x6d0/0x6d0 [ 772.824027] udpv6_sendmsg+0x20d3/0x2ad0 [ 772.824552] ? ip_frag_init+0x350/0x350 [ 772.825105] ? udp_v6_push_pending_frames+0x360/0x360 [ 772.825819] ? _down_write_nest_lock+0x160/0x160 [ 772.826441] ? vmacache_update+0xce/0x140 [ 772.826957] ? do_user_addr_fault+0x5b0/0xc60 [ 772.827546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 772.828202] ? asm_exc_page_fault+0x1e/0x30 [ 772.828748] ? sock_has_perm+0x1ea/0x280 [ 772.829260] ? __import_iovec+0x458/0x590 [ 772.829766] ? udp_v6_push_pending_frames+0x360/0x360 [ 772.830410] inet6_sendmsg+0x105/0x140 [ 772.830933] ? inet6_compat_ioctl+0x320/0x320 [ 772.831539] __sock_sendmsg+0xf2/0x190 [ 772.832073] ____sys_sendmsg+0x334/0x870 [ 772.832632] ? sock_write_iter+0x3d0/0x3d0 [ 772.833208] ? do_recvmmsg+0x6d0/0x6d0 [ 772.833735] ? mark_lock+0xf5/0x2df0 [ 772.834240] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 772.834931] ? __lock_acquire+0x1657/0x5b00 [ 772.835470] ___sys_sendmsg+0xf3/0x170 [ 772.835947] ? sendmsg_copy_msghdr+0x160/0x160 [ 772.836511] ? __fget_files+0x2cf/0x520 [ 772.836994] ? lock_downgrade+0x6d0/0x6d0 [ 772.837505] ? lock_downgrade+0x6d0/0x6d0 [ 772.838010] ? __fget_files+0x2f8/0x520 [ 772.838629] ? __fget_light+0xea/0x290 [ 772.839736] __sys_sendmmsg+0x195/0x470 [ 772.840275] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 772.840867] ? lock_downgrade+0x6d0/0x6d0 [ 772.841441] ? __mutex_unlock_slowpath+0xe1/0x600 [ 772.842104] ? wait_for_completion_io+0x270/0x270 [ 772.842741] ? rcu_read_lock_any_held+0x75/0xa0 [ 772.843381] ? vfs_write+0x354/0xb10 [ 772.843887] ? fput_many+0x2f/0x1a0 [ 772.844374] ? ksys_write+0x1a9/0x260 [ 772.844890] ? __ia32_sys_read+0xb0/0xb0 [ 772.845448] __x64_sys_sendmmsg+0x99/0x100 [ 772.846013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 772.846756] do_syscall_64+0x33/0x40 [ 772.847273] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 772.847988] RIP: 0033:0x7fbfd48dcb19 [ 772.848506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 772.851060] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 772.852188] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 772.853155] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 772.854136] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 772.855082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.856111] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 786.635924] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:33 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x200005e, 0x49ec2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x14801, 0x0, 0x4, 0x2, 0x4, 0x0, 0x5, 0x0, 0x200000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200210e00003efc0000000000bdf059"], 0x14}}, 0x800) r3 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r3}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = accept$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) close_range(0xffffffffffffffff, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000500)={0x0, 0x3, 0x3, 0x0, 0x0, [{{}, 0xff}, {{r0}, 0x6b25}, {{}, 0x9}]}) openat(r6, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x48020200) 13:36:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:36:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:33 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r0, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) fsetxattr$security_ima(r0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0410e2e1e59be21aa21e8fda6fd4dcdc4b1e1a4bc9648c7046fd87ea3d92a68243d54c16a05435b031e73046f0a8da55bf13ad1f20b127a876811937c0a0a5e5732fd87edf38c830e30996ddaa5eb6712c71760662f0422453c817318adfa5501e7bc65f28b1d24c41394bfccf0b0062098ce7a9b7106c1e1fd6c5590f1f82662d957be06189dc2429fc05eeeed568175b00094073fc669426599d80cc9b8b32c3cafd82190eba16ad58a1187287eddae70e1e10"], 0x3, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28010000280001000000000000000000000000000000000000000000000000000000000000000000fc010000000000000000000000000000fc020000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYBLOB="a762fbc59db7408d2e762830b0a218ef6408eb795afd5209fbb32566aba4bc77ef7aa3162ae9fe57015b41704eafbb37075a0ae5caae46aff3d17fa2681a91073692b0b409c15eb335f6b5ca16b10c7c09be8791bb01d30bff0ff79332a3dc94ffe30f6d2fc2aaa84479634675f8a17672e974", @ANYBLOB="0000000000000000003e65d8ea5aac8a8a077ea3f0509fa98441390cd25c5bb6b63a1b6b4bc1da05dfd501deeee84c59dd760f7c320e4c45d66f1e33602fd2bded62116e20043ff32c3adf0766a98daf10a2f435629e441243062020b33fb38349", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000002ea1ed8eac893f7500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000005eeff09d00fe5aafd714d5661d699e3fd3ccdfe72cc817d52babebc264e89350208a526dd3e5c4b57ede268897449d"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x2}) sendmsg$nl_xfrm(r2, 0x0, 0x24008044) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) chdir(&(0x7f0000000040)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r5, 0x0, 0x100000001) 13:36:33 executing program 1: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x81}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) 13:36:33 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) listen(r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x1d) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r4=>0x0, ""/256, <r5=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r6=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r7=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, <r8=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r9=>0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {0x0, <r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r12=>0x0}, {}, {}, {}, {0x0, <r13=>0x0}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {0x0, <r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r15=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, <r16=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r17=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r14}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000059340)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r18=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r19=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r20=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r21=>0x0}], 0x1f, "f703303fd21e40"}) [ 786.771815] FAULT_INJECTION: forcing a failure. [ 786.771815] name failslab, interval 1, probability 0, space 0, times 0 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000005a340)={0x0, <r22=>0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005b340)={0x0, ""/256, 0x0, <r23=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005b540)={0x8, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r21}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r19}, {}, {}, {}, {}, {}, {}, {r4}, {}, {r15}, {}, {0x0, r20}, {r22, r23}], 0x6, "1eadb197d6d01e"}) 13:36:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 6) dup2(r0, r1) 13:36:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:33 executing program 1: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_io_uring_setup(0x3998, &(0x7f0000000040)={0x0, 0xbfaf, 0x4, 0x3, 0xfe}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x3, 0x2007, @fd_index=0xa, 0xb84, 0x101, 0x5b, 0x10, 0x1}, 0x788c) ioctl$LOOP_SET_STATUS(r0, 0x4c06, 0x0) 13:36:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:33 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) flock(r0, 0x1) openat(r1, &(0x7f00000001c0)='./file1/file0\x00', 0x4000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsmount(r1, 0x0, 0x8a) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0xfffffff8, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x28}}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)="5e51650671fdde98015d579e5a304776ccd6456c1a176e6b9a1639f441048ea977170bb9530a613dbba4414440577d5f4719725528d15dc437be6679ed3b0231a3c6dc9be8d348", 0x47, 0x41, 0x1}, 0xc23b) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)}], 0x1) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) unshare(0x48020200) [ 786.773536] CPU: 1 PID: 6432 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 786.802457] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 786.803466] Call Trace: [ 786.803792] dump_stack+0x107/0x167 [ 786.804237] should_fail.cold+0x5/0xa [ 786.804707] ? skb_clone+0x14f/0x3d0 [ 786.805206] should_failslab+0x5/0x20 [ 786.805683] kmem_cache_alloc+0x5b/0x310 [ 786.806193] ? do_raw_write_lock+0x11a/0x280 [ 786.806766] skb_clone+0x14f/0x3d0 [ 786.807202] neigh_probe+0x54/0x110 [ 786.807644] __neigh_event_send+0x37c/0x1270 [ 786.808189] neigh_resolve_output+0x508/0x7f0 [ 786.808735] ? ip6_mtu+0x1bb/0x3d0 [ 786.809175] ip6_finish_output2+0xb23/0x1cf0 [ 786.809722] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 786.810341] ip6_output+0x3b8/0x7e0 [ 786.810794] ip6_local_out+0xb4/0x1a0 [ 786.811257] ip6_send_skb+0x112/0x460 [ 786.811723] udp_v6_send_skb+0x7aa/0x15b0 [ 786.812238] udpv6_sendmsg+0x2116/0x2ad0 [ 786.812734] ? ip_frag_init+0x350/0x350 [ 786.813227] ? udp_v6_push_pending_frames+0x360/0x360 [ 786.813889] ? _down_write_nest_lock+0x160/0x160 [ 786.814518] ? vmacache_update+0xce/0x140 [ 786.815060] ? do_user_addr_fault+0x5b0/0xc60 [ 786.815608] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 786.816252] ? asm_exc_page_fault+0x1e/0x30 [ 786.816775] ? sock_has_perm+0x1ea/0x280 [ 786.817293] ? __import_iovec+0x458/0x590 [ 786.817796] ? udp_v6_push_pending_frames+0x360/0x360 [ 786.834453] inet6_sendmsg+0x105/0x140 [ 786.834929] ? inet6_compat_ioctl+0x320/0x320 [ 786.835472] __sock_sendmsg+0xf2/0x190 [ 786.835991] ____sys_sendmsg+0x334/0x870 [ 786.836488] ? sock_write_iter+0x3d0/0x3d0 [ 786.837030] ? do_recvmmsg+0x6d0/0x6d0 [ 786.837506] ? mark_lock+0xf5/0x2df0 [ 786.837960] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 786.838603] ? __lock_acquire+0x1657/0x5b00 [ 786.839132] ___sys_sendmsg+0xf3/0x170 [ 786.839605] ? sendmsg_copy_msghdr+0x160/0x160 [ 786.840164] ? __fget_files+0x2cf/0x520 [ 786.840646] ? lock_downgrade+0x6d0/0x6d0 [ 786.841154] ? lock_downgrade+0x6d0/0x6d0 [ 786.841663] ? __fget_files+0x2f8/0x520 [ 786.842153] ? __fget_light+0xea/0x290 [ 786.842644] __sys_sendmmsg+0x195/0x470 [ 786.843133] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 786.843655] ? lock_downgrade+0x6d0/0x6d0 [ 786.844180] ? __mutex_unlock_slowpath+0xe1/0x600 [ 786.844769] ? wait_for_completion_io+0x270/0x270 [ 786.845363] ? rcu_read_lock_any_held+0x75/0xa0 [ 786.845949] ? vfs_write+0x354/0xb10 [ 786.846427] ? fput_many+0x2f/0x1a0 [ 786.846896] ? ksys_write+0x1a9/0x260 [ 786.847373] ? __ia32_sys_read+0xb0/0xb0 [ 786.847885] __x64_sys_sendmmsg+0x99/0x100 [ 786.848398] ? syscall_enter_from_user_mode+0x1d/0x50 [ 786.849065] do_syscall_64+0x33/0x40 [ 786.849546] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 786.850203] RIP: 0033:0x7fbfd48dcb19 [ 786.854722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 786.856965] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 786.857890] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 786.858771] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 786.859636] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 786.860498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.861366] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:36:34 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:34 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc00c3, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1811c1, 0x114) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r3 = syz_open_dev$rtc(&(0x7f0000000140), 0x100000000, 0x637ffb93f191f85f) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001d000143ff0000ec0000000000000000307e5b3cb016d758da48"], 0x14}}, 0x0) pwrite64(r4, &(0x7f0000000400)="2b06f74db2c01fba7467722c173cc7f1cb8b64265683502e82e05b378d94fe6ff569ce7f7f534837eab103e7386a16a61d24148afbeaaddda29c2e74e53cc30a646faf27f032240dffcf9d41f2c7c1ab437c9bab4acf7205e97cc6c0df4940608c9430a52d6b3d838754fa7f9f644ec8ffe7286c78208ac9643ac6f448d3a2bc2e0c6333bb01339df2cf7d1515e2b4029d35d504fa118ab73e5e329d0aaee7c764f9240801c9316767f436450f587adcb15eca2d4c23401b873520c3e0f6febc55a41e2a1f32f978317a2d6dfaf012a580dde54ac984683da6abff6e6a0ec132c71140310abfa9a35ee9ac9960", 0xed, 0x4) fallocate(r2, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x4) openat$dir(0xffffffffffffff9c, 0x0, 0xc100, 0x124) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x2308, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:36:34 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 787.456011] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.2'. 13:36:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 7) dup2(r0, r1) 13:36:49 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r2=>r1, @ANYBLOB="02000000000000002e2f66696c685700"]) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x10, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}}, 0x8804) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xfffffffffffffff3, 0x100000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r5, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 13:36:49 executing program 1: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000780)=@add_del={0x2, 0x0}) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffff7fd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000380), &(0x7f00000006c0), &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="2397c4193a8b239a18000000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYRES32=<r2=>0x0, @ANYRES32=<r3=>0xee00, @ANYBLOB='./file1\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRESHEX=r3, @ANYRESHEX, @ANYRESOCT=r2, @ANYRESHEX, @ANYRES16]) r4 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r5=>r0, @ANYBLOB="04ba66696c65310a0000000000000000"]) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) read(r5, &(0x7f0000000500)=""/122, 0x7a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) perf_event_open(&(0x7f0000000800)={0x0, 0x80, 0x6, 0x0, 0x0, 0x3, 0x0, 0x7, 0x200, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x802, 0x4, @perf_bp={&(0x7f0000000400), 0x9}, 0x9000, 0x41, 0x1c, 0x5, 0x1f, 0x5, 0x4, 0x0, 0x6, 0x0, 0x3f}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x1) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00]\x00', @ANYRESOCT=r6, @ANYRESDEC=r7], 0x58}, 0x1, 0x0, 0x0, 0x20040940}, 0x30004840) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x1) 13:36:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0xfffffffa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000580)="a1c37888de9b84685c33dc8dfc64fa8b9422161a286f6e7ba4caa18ea8c8cc9531f08e43d036b6a2e99b41dcbbb58f3c4a36453bd7a9f9f8e366965e5cecfde9cf4f4dc410c92cbd66871f4d8a78a38bfc04fad9421e6201b5c82e61679d43132b189cf9a50190c419e4ac79da69c608714275c16f66a77d040350f5a52937fbe3f0ed2f61ce67ed2547b719d102521933742289f0", 0x95}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0x1d0}}], 0x1, 0x20000010) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c010400000021a3f9c0eb0000000000020000000000af018000000095652806f9ad42e90c69fab1febcffabad30783a1b6c2b430bb3fbf412733e518a0f1e9ada735c55919981955105740adac77ccbc431fd489b0f0400b9ac054ee2d6ff426850ec1f6b24dc9cf0aca0c56a27e72df02114ebf8ddcd9bee0365c485d4f379414aa436a691567be160e4fe06277000307951ff1a9d571513e9e6cceab2e653a026f1b45ae07be27b125cdaa730fc7d54a2e9b5c5b80cc37662f6b700cbe9911de920ca7e1d60f1d6c64d8a1430995595b4c27f3139d5ca00eb1b7076d03c2623a429c45400"/246], 0x1c}}, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)={0xa0002002}) setsockopt$inet6_udp_int(r1, 0x11, 0x0, &(0x7f0000000100)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) syz_io_uring_complete(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ftruncate(0xffffffffffffffff, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000500)='z', 0x1}, {&(0x7f0000000040)='Z', 0x1}], 0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) sendmsg$inet6(r4, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 13:36:49 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:36:49 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)=<r1=>0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4106, 0x100a}], 0x1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000002600)={0x0, "a496b98aa1c41f2d849ba08febb6921c"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000081) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) openat$hpet(0xffffffffffffff9c, &(0x7f0000000480), 0x101000, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 13:36:49 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r0=>0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:49 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000000)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee01, @ANYBLOB='$\x00']) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1) 13:36:49 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 802.112650] FAULT_INJECTION: forcing a failure. [ 802.112650] name failslab, interval 1, probability 0, space 0, times 0 [ 802.116332] CPU: 0 PID: 6489 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 802.118547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 802.121269] Call Trace: [ 802.122096] dump_stack+0x107/0x167 [ 802.123291] should_fail.cold+0x5/0xa [ 802.124512] ? create_object.isra.0+0x3a/0xa20 [ 802.125988] should_failslab+0x5/0x20 [ 802.127251] kmem_cache_alloc+0x5b/0x310 [ 802.128517] create_object.isra.0+0x3a/0xa20 [ 802.129935] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 802.131586] kmem_cache_alloc+0x159/0x310 [ 802.132952] skb_clone+0x14f/0x3d0 [ 802.134139] neigh_probe+0x54/0x110 [ 802.135354] __neigh_event_send+0x37c/0x1270 [ 802.136823] neigh_resolve_output+0x508/0x7f0 [ 802.138291] ? ip6_mtu+0x1bb/0x3d0 [ 802.139482] ip6_finish_output2+0xb23/0x1cf0 [ 802.140917] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 802.142590] ip6_output+0x3b8/0x7e0 [ 802.143761] ip6_local_out+0xb4/0x1a0 [ 802.144994] ip6_send_skb+0x112/0x460 [ 802.146246] udp_v6_send_skb+0x7aa/0x15b0 [ 802.147605] udpv6_sendmsg+0x2116/0x2ad0 [ 802.149006] ? ip_frag_init+0x350/0x350 [ 802.150303] ? udp_v6_push_pending_frames+0x360/0x360 [ 802.152071] ? _down_write_nest_lock+0x160/0x160 [ 802.153603] ? vmacache_update+0xce/0x140 [ 802.155045] ? do_user_addr_fault+0x5b0/0xc60 [ 802.156502] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 802.158256] ? asm_exc_page_fault+0x1e/0x30 [ 802.159680] ? sock_has_perm+0x1ea/0x280 [ 802.160970] ? __import_iovec+0x458/0x590 [ 802.162349] ? udp_v6_push_pending_frames+0x360/0x360 [ 802.164038] inet6_sendmsg+0x105/0x140 [ 802.165324] ? inet6_compat_ioctl+0x320/0x320 [ 802.166807] __sock_sendmsg+0xf2/0x190 [ 802.168079] ____sys_sendmsg+0x334/0x870 [ 802.169426] ? sock_write_iter+0x3d0/0x3d0 [ 802.170847] ? do_recvmmsg+0x6d0/0x6d0 [ 802.171336] ? mark_lock+0xf5/0x2df0 [ 802.171791] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 802.172422] ? __lock_acquire+0x1657/0x5b00 [ 802.172950] ___sys_sendmsg+0xf3/0x170 [ 802.173424] ? sendmsg_copy_msghdr+0x160/0x160 [ 802.173983] ? __fget_files+0x2cf/0x520 [ 802.174478] ? lock_downgrade+0x6d0/0x6d0 [ 802.175002] ? lock_downgrade+0x6d0/0x6d0 [ 802.175514] ? __fget_files+0x2f8/0x520 [ 802.176002] ? __fget_light+0xea/0x290 [ 802.176487] __sys_sendmmsg+0x195/0x470 [ 802.176973] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 802.177496] ? lock_downgrade+0x6d0/0x6d0 [ 802.178017] ? __mutex_unlock_slowpath+0xe1/0x600 [ 802.178618] ? wait_for_completion_io+0x270/0x270 [ 802.179210] ? rcu_read_lock_any_held+0x75/0xa0 [ 802.179762] ? vfs_write+0x354/0xb10 [ 802.180217] ? fput_many+0x2f/0x1a0 [ 802.180652] ? ksys_write+0x1a9/0x260 [ 802.181098] ? __ia32_sys_read+0xb0/0xb0 [ 802.181583] __x64_sys_sendmmsg+0x99/0x100 [ 802.182089] ? syscall_enter_from_user_mode+0x1d/0x50 [ 802.182739] do_syscall_64+0x33/0x40 [ 802.183202] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 802.183830] RIP: 0033:0x7fbfd48dcb19 13:36:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 802.184306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 802.203006] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 802.203958] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 802.204860] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 802.205771] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 802.206700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.207571] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 [ 802.304005] tmpfs: Bad value for 'gid' [ 802.310328] tmpfs: Bad value for 'gid' 13:36:49 executing program 1: syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x2, 0x0, 0x0, 0x40000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='romfs\x00', 0x40000, 0x0) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x800, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x8000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'macvlan0\x00', {0x2, 0x0, @multicast2}}) umount2(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', <r2=>0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRESOCT=r2]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) 13:36:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:36:49 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x14}}, 0x20000084) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r3, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x11a0, r3, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x118c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "065ffe2fd710cd523f613a1f7ee29868692d84671f56934a34e7f2a9ffcdc5e70abf5ac9563eb941b1a9eba2892406bec30c124e6ccfd7ae3906"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '%\x10&:!{&.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xba2f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xdd\xf6-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[{:\'\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--%(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-^]\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x97, 0x5, "222eaf49db47ed39cc8c3c2de754fa1d98e0265a808a92ec3e2cbedc910ac0ddc2e0a2e46b72a8897c0c44333457ec5d0bd6c23b5e0e2711acbd97550fbf62357318d76c8582032a48c449acd98efbc268959bc68d6f0a72d9267c04ad7527188ed2ac04d5f3046d2ed3b3679d65d4a37568736126c7e095b0c120d190ae9706f78bd780079c5dd2f81ce48ba8ec1aac94e0b4"}]}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) [ 804.092303] wlan1: Trigger new scan to find an IBSS to join [ 807.052187] wlan1: Trigger new scan to find an IBSS to join [ 810.060127] wlan1: Trigger new scan to find an IBSS to join [ 810.855025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.858693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 816.483163] FAULT_INJECTION: forcing a failure. [ 816.483163] name failslab, interval 1, probability 0, space 0, times 0 [ 816.484915] CPU: 1 PID: 6527 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 816.485844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.486958] Call Trace: [ 816.487288] dump_stack+0x107/0x167 [ 816.487737] should_fail.cold+0x5/0xa [ 816.488206] ? __alloc_skb+0x6d/0x5b0 [ 816.488675] should_failslab+0x5/0x20 [ 816.489142] kmem_cache_alloc_node+0x55/0x330 [ 816.489691] ? find_held_lock+0x2c/0x110 [ 816.490204] __alloc_skb+0x6d/0x5b0 [ 816.506683] ndisc_alloc_skb+0x134/0x320 [ 816.507242] ndisc_send_ns+0x177/0x860 [ 816.507785] ? pndisc_redo+0x20/0x20 [ 816.508318] ndisc_solicit+0x2cd/0x470 [ 816.508855] ? ndisc_send_ns+0x860/0x860 [ 816.509410] ? __skb_clone+0x586/0x770 [ 816.509953] ? ndisc_send_ns+0x860/0x860 [ 816.510512] neigh_probe+0xc4/0x110 [ 816.511017] __neigh_event_send+0x37c/0x1270 [ 816.511654] neigh_resolve_output+0x508/0x7f0 [ 816.512271] ? ip6_mtu+0x1bb/0x3d0 [ 816.512768] ip6_finish_output2+0xb23/0x1cf0 [ 816.513381] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 816.514074] ip6_output+0x3b8/0x7e0 [ 816.514581] ip6_local_out+0xb4/0x1a0 [ 816.515067] ip6_send_skb+0x112/0x460 [ 816.515534] udp_v6_send_skb+0x7aa/0x15b0 [ 816.516050] udpv6_sendmsg+0x2116/0x2ad0 [ 816.516547] ? ip_frag_init+0x350/0x350 [ 816.517040] ? udp_v6_push_pending_frames+0x360/0x360 [ 816.517667] ? _down_write_nest_lock+0x160/0x160 [ 816.518244] ? vmacache_update+0xce/0x140 [ 816.518770] ? do_user_addr_fault+0x5b0/0xc60 [ 816.519318] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.519968] ? asm_exc_page_fault+0x1e/0x30 [ 816.520494] ? sock_has_perm+0x1ea/0x280 [ 816.521011] ? __import_iovec+0x458/0x590 [ 816.521517] ? udp_v6_push_pending_frames+0x360/0x360 [ 816.522148] inet6_sendmsg+0x105/0x140 [ 816.522623] ? inet6_compat_ioctl+0x320/0x320 [ 816.523192] __sock_sendmsg+0xf2/0x190 [ 816.523663] ____sys_sendmsg+0x334/0x870 [ 816.524154] ? sock_write_iter+0x3d0/0x3d0 [ 816.524660] ? do_recvmmsg+0x6d0/0x6d0 [ 816.525136] ? mark_lock+0xf5/0x2df0 [ 816.525586] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.526214] ? __lock_acquire+0x1657/0x5b00 [ 816.526750] ___sys_sendmsg+0xf3/0x170 [ 816.527257] ? sendmsg_copy_msghdr+0x160/0x160 [ 816.527813] ? __fget_files+0x2cf/0x520 [ 816.528293] ? lock_downgrade+0x6d0/0x6d0 [ 816.528797] ? lock_downgrade+0x6d0/0x6d0 [ 816.529304] ? __fget_files+0x2f8/0x520 [ 816.529792] ? __fget_light+0xea/0x290 [ 816.530272] __sys_sendmmsg+0x195/0x470 [ 816.530770] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 816.531290] ? lock_downgrade+0x6d0/0x6d0 [ 816.531808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 816.532396] ? wait_for_completion_io+0x270/0x270 [ 816.532979] ? rcu_read_lock_any_held+0x75/0xa0 [ 816.533540] ? vfs_write+0x354/0xb10 [ 816.533991] ? fput_many+0x2f/0x1a0 [ 816.534434] ? ksys_write+0x1a9/0x260 [ 816.534909] ? __ia32_sys_read+0xb0/0xb0 [ 816.535408] __x64_sys_sendmmsg+0x99/0x100 [ 816.535918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.536541] do_syscall_64+0x33/0x40 [ 816.536989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.537605] RIP: 0033:0x7fbfd48dcb19 [ 816.538055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.540274] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 816.541191] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 816.542047] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 816.542920] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.543776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.544633] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 [ 816.545583] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 816.561699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 13:37:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 8) dup2(r0, r1) 13:37:03 executing program 6: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x11, 0x7, 0x72}) ioctl$TCSBRKP(r0, 0x5425, 0x0) 13:37:03 executing program 1: syz_io_uring_setup(0x1a8d, &(0x7f00000000c0), &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100), 0x5a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x27}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) r3 = syz_io_uring_setup(0x78e6, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) syz_io_uring_setup(0x1fde, &(0x7f0000000300)={0x0, 0x9164, 0x0, 0x2, 0x7b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000200)) syz_io_uring_setup(0x3e56, &(0x7f0000000380)={0x0, 0x168b, 0x1, 0x0, 0x248}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), &(0x7f0000000440)=<r5=>0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x228}, 0x1, {0x0, r6}}, 0xfffff000) io_uring_enter(r3, 0x76d3, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r7 = getuid() mount$cgroup2(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000002c0)={[{@subsystem='rlimit'}], [{@euid_eq={'euid', 0x3d, r7}}]}) 13:37:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:03 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="487fec864b24"]}]}, 0x28}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r4, {<r6=>r3}}, './file0\x00'}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x90, r7, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xdf00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x393}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x90}, 0x40090) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x1f0, r7, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf8a1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4fa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x63faa78}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "96544aaeaa5342e35419df23b55f5f1efc18d05463c092ea6f9a820e"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "fb8c6d9d40d2add1f66644c0479bfbd386607a60287e5dc1cc6389"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x403}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20004}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) r8 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000980), 0x28800, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x122a}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xcad}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r6) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r11, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x5, @bearer=@udp='udp:syz0\x00'}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0x66, 0x2, 0x6, 0x8, 0x0, 0x9, 0x800, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffdb, 0xa2}, 0x40100, 0x80000000, 0x9333, 0x2, 0xff23, 0x6, 0x80, 0x0, 0xf3e, 0x0, 0x2}, r8, 0x4, r5, 0x9) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x26, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d8f4655fd8f4655f0100ffff53ef010001000000d8f4655f000000000000000001000000000000000b000000800000000800000052470000620100000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e30343636343439353900"/192, 0xc0, 0x400}, {&(0x7f0000010100)="000000000000000000000000c8b70d3c99374a58baa2fffdfaacb391010000000c00000000000000d8f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="01000000000005000c0000000000000000000000040000004b00000000000000", 0x20, 0x560}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="02000000120000002200000060000f0003000400"/32, 0x20, 0x800}, {&(0x7f0000010500)="ffff0f00ff0f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009407090166696c652e636f6c64000000", 0x880, 0x1000}, {&(0x7f0000010e00)="0b0000000c0001022e00000002000000f40702022e2e00"/32, 0x20, 0x2000}, {&(0x7f0000010f00)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x2800}, {&(0x7f0000011000)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3000}, {&(0x7f0000011100)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x3800}, {&(0x7f0000011200)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4000}, {&(0x7f0000011300)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x4800}, {&(0x7f0000011400)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5000}, {&(0x7f0000011500)='\x00\x00\x00\x00\x00\b\x00'/32, 0x20, 0x5800}, {&(0x7f0000011600)="504d4d00504d4dffd8f4655f00000000647679756b6f762d676c6170746f70320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c6f6f7033340075782f746573742f73797a5f6d6f756e745f696d6167655f650500"/128, 0x80, 0x6000}, {&(0x7f0000011700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x6800}, {&(0x7f0000011800)="0200"/32, 0x20, 0x6c00}, {&(0x7f0000011900)="0300"/32, 0x20, 0x7000}, {&(0x7f0000011a00)="0400"/32, 0x20, 0x7400}, {&(0x7f0000011b00)="0500"/32, 0x20, 0x7800}, {&(0x7f0000011c00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x7c00}, {&(0x7f0000011d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x8000}, {&(0x7f0000011e00)="0200"/32, 0x20, 0x8400}, {&(0x7f0000011f00)="0300"/32, 0x20, 0x8800}, {&(0x7f0000012000)="0400"/32, 0x20, 0x8c00}, {&(0x7f0000012100)="ffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500"/2080, 0x820, 0x9000}, {&(0x7f0000012a00)="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000009800"/96, 0x60, 0x9c00}, {&(0x7f0000012b00)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d807050766696c653100"/64, 0x40, 0x10000}, {&(0x7f0000012c00)="000002ea0100000001000000270f240c000000000000000000000000000000000601f8070000000006000000779b539778617474723100000601f00700000000060000007498539778617474723200"/96, 0x60, 0x10800}, {&(0x7f0000012d00)="00000000000000000000000000000000786174747232000078617474723100000000000000000000d8f4655fd8f4655fd8f4655f00"/64, 0x40, 0x10fe0}, {&(0x7f0000012e00)="ed41000000080000d8f4655fd8f4655fd8f4655f00000000000004000400000000000800050000000af301000400000000000000000000000100000003000000", 0x40, 0x11080}, {&(0x7f0000012f00)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30100040000000000000000000000030000000d000000", 0x40, 0x11100}, {&(0x7f0000013000)="8081000000180000d8f4655fd8f4655fd8f4655f00000000000001000c00000010000800000000000af30200040000000000000000000000020000001000000002000000010000001300"/96, 0x60, 0x11180}, {&(0x7f0000013100)="c041000000400000d8f4655fd8f4655fd8f4655f00000000000002002000000000000800000000000af301000400000000000000000000000800000004000000", 0x40, 0x11500}, {&(0x7f0000013200)="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"/768, 0x300, 0x11580}, {&(0x7f0000013500)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x12000}, {&(0x7f0000013a00)='syzkallers\x00'/32, 0x20, 0x12800}, {&(0x7f0000013b00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x15800}], 0x0, &(0x7f0000013c00)) 13:37:03 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x13, r0, 0x0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) pipe(&(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) syz_io_uring_submit(r2, r5, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r7, 0x0, &(0x7f0000000000)='./file0\x00', 0x80, 0x145000, 0x23456}, 0x9) 13:37:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:37:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 1) [ 816.666826] loop7: detected capacity change from 0 to 262144 13:37:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 816.708932] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 816.715371] FAULT_INJECTION: forcing a failure. [ 816.715371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.719139] CPU: 1 PID: 6550 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 816.721214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.723732] Call Trace: [ 816.724524] dump_stack+0x107/0x167 [ 816.725639] should_fail.cold+0x5/0xa [ 816.726882] _copy_from_user+0x2e/0x1b0 [ 816.727573] ext4 filesystem being mounted at /syzkaller-testdir968119291/syzkaller.fU4efb/73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.728082] __copy_msghdr_from_user+0x91/0x4b0 [ 816.728100] ? __ia32_sys_shutdown+0x80/0x80 [ 816.732847] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.734592] ? __lock_acquire+0x1657/0x5b00 [ 816.736023] ? __lock_acquire+0xbb1/0x5b00 [ 816.737374] sendmsg_copy_msghdr+0xa1/0x160 [ 816.738704] ? do_recvmmsg+0x6d0/0x6d0 [ 816.739214] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.739885] ? lock_downgrade+0x6d0/0x6d0 [ 816.740436] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.741127] ___sys_sendmsg+0xc6/0x170 [ 816.741649] ? sendmsg_copy_msghdr+0x160/0x160 [ 816.742258] ? __fget_files+0x2cf/0x520 [ 816.742951] ? lock_downgrade+0x6d0/0x6d0 [ 816.744255] ? find_held_lock+0x2c/0x110 [ 816.745540] ? __fget_files+0x2f8/0x520 [ 816.746746] ? __fget_light+0xea/0x290 [ 816.747274] __sys_sendmsg+0xe5/0x1b0 [ 816.747781] ? __sys_sendmsg_sock+0x40/0x40 [ 816.748340] ? rcu_read_lock_any_held+0x75/0xa0 [ 816.748943] ? fput_many+0x2f/0x1a0 [ 816.749414] ? ksys_write+0x1a9/0x260 [ 816.749907] ? __ia32_sys_read+0xb0/0xb0 [ 816.750434] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.751866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.753492] ? trace_hardirqs_on+0x5b/0x180 [ 816.754770] do_syscall_64+0x33/0x40 [ 816.755262] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.755918] RIP: 0033:0x7f0f5aca2b19 [ 816.756400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.758978] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.761192] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 816.762860] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 816.763771] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.764679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.765595] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 816.772889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 13:37:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 2) [ 816.844642] FAULT_INJECTION: forcing a failure. [ 816.844642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.846303] CPU: 1 PID: 6558 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 816.847232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 816.848298] Call Trace: [ 816.848644] dump_stack+0x107/0x167 [ 816.849116] should_fail.cold+0x5/0xa [ 816.849610] _copy_from_user+0x2e/0x1b0 [ 816.850115] iovec_from_user+0x141/0x400 [ 816.850640] __import_iovec+0x67/0x590 [ 816.851874] ? __ia32_sys_shutdown+0x80/0x80 [ 816.853017] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.854388] import_iovec+0x83/0xb0 [ 816.855490] sendmsg_copy_msghdr+0x131/0x160 [ 816.856590] ? do_recvmmsg+0x6d0/0x6d0 [ 816.857602] ? lock_downgrade+0x6d0/0x6d0 [ 816.858702] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 816.860335] ___sys_sendmsg+0xc6/0x170 [ 816.861353] ? sendmsg_copy_msghdr+0x160/0x160 [ 816.862576] ? __fget_files+0x2cf/0x520 [ 816.863792] ? lock_downgrade+0x6d0/0x6d0 [ 816.864855] ? find_held_lock+0x2c/0x110 [ 816.865910] ? __fget_files+0x2f8/0x520 [ 816.867007] ? __fget_light+0xea/0x290 [ 816.868062] __sys_sendmsg+0xe5/0x1b0 [ 816.869015] ? __sys_sendmsg_sock+0x40/0x40 [ 816.870141] ? rcu_read_lock_any_held+0x75/0xa0 [ 816.871022] ? fput_many+0x2f/0x1a0 [ 816.871487] ? ksys_write+0x1a9/0x260 [ 816.871974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 816.872610] ? syscall_enter_from_user_mode+0x1d/0x50 [ 816.873264] ? trace_hardirqs_on+0x5b/0x180 [ 816.873813] do_syscall_64+0x33/0x40 [ 816.874300] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 816.875430] RIP: 0033:0x7f0f5aca2b19 [ 816.876384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 816.879934] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.880920] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 816.881851] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 816.883016] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 816.884936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.886785] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 13:37:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 9) dup2(r0, r1) [ 830.260643] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 830.262317] FAT-fs (loop1): unable to read boot sector 13:37:17 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r1=>r0, {0x7}}, './file0\x00'}) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}}) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='vfat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaa20086dd6096153f00082c0020010052000000000000000000000000ff0200000000000000000000000000018f00907800000000"], 0x0) r2 = fork() ptrace$setopts(0x4206, r2, 0x10001, 0x10002d) r3 = fork() ptrace$setopts(0x4206, r3, 0x10001, 0x9) ptrace(0x10, r3) tkill(r2, 0x37) ptrace(0x4208, r3) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/183) ptrace(0x8, r2) 13:37:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 3) 13:37:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:17 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readahead(0xffffffffffffffff, 0x0, 0x6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x860, &(0x7f00000013c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_fscache}, {@access_user}, {@privport}, {@cache_fscache}, {@version_L}, {@version_L}, {@cache_loose}], [{@func={'func', 0x3d, 'MODULE_CHECK'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@permit_directio}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x61, 0x36, 0x11c8b90079e55ab4, 0x33, 0x62, 0x32, 0x61], 0x2d, [0x39, 0x31, 0x39, 0x66], 0x2d, [0x33, 0x66, 0x36, 0x30], 0x2d, [0x65, 0x32, 0x62, 0x30], 0x2d, [0x33, 0x36, 0x34, 0x32, 0x38, 0x61, 0x64, 0x34]}}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000000}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f00000003c0)={{}, "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"}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000240)=0x4, 0x4) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80000) openat(r6, &(0x7f0000000280)='./file0\x00', 0x1e3a3a742eda21a1, 0x114) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:37:17 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x10e00, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(r0, &(0x7f0000000840)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000200)={0x80, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x80}}, 0x0) 13:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:17 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x0) lseek(r2, 0x0, 0x3) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x82) write$P9_RSETATTR(r3, &(0x7f00000001c0)={0x7, 0x1b, 0x2}, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r4, 0xf71ee000) openat(0xffffffffffffffff, 0x0, 0x36400, 0xe375d1901a7fcc3b) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000080)={0xd5, 0x3, 0x63c7, 0x80000001, 0x2, 0x100}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x77359400}, 0x1, 0x1, 0x1}, 0x7ff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x7b, 0x2}, 0x7) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) [ 830.332519] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 830.344155] FAT-fs (loop1): unable to read boot sector [ 830.350992] FAULT_INJECTION: forcing a failure. [ 830.350992] name failslab, interval 1, probability 0, space 0, times 0 [ 830.352511] CPU: 0 PID: 6578 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 830.352529] FAULT_INJECTION: forcing a failure. [ 830.352529] name failslab, interval 1, probability 0, space 0, times 0 [ 830.353341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.353356] Call Trace: [ 830.353376] dump_stack+0x107/0x167 [ 830.353392] should_fail.cold+0x5/0xa [ 830.356966] ? create_object.isra.0+0x3a/0xa20 [ 830.357529] should_failslab+0x5/0x20 [ 830.357996] kmem_cache_alloc+0x5b/0x310 [ 830.358495] ? SOFTIRQ_verbose+0x10/0x10 [ 830.359017] create_object.isra.0+0x3a/0xa20 [ 830.359549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 830.360170] kmem_cache_alloc_node+0x169/0x330 [ 830.360734] __alloc_skb+0x6d/0x5b0 [ 830.361183] ndisc_alloc_skb+0x134/0x320 [ 830.361678] ndisc_send_ns+0x177/0x860 [ 830.362153] ? pndisc_redo+0x20/0x20 [ 830.362624] ndisc_solicit+0x2cd/0x470 [ 830.363107] ? ndisc_send_ns+0x860/0x860 [ 830.363596] ? __skb_clone+0x586/0x770 [ 830.364074] ? ndisc_send_ns+0x860/0x860 [ 830.364570] neigh_probe+0xc4/0x110 [ 830.365011] __neigh_event_send+0x37c/0x1270 [ 830.365555] neigh_resolve_output+0x508/0x7f0 [ 830.366101] ? ip6_mtu+0x1bb/0x3d0 [ 830.366540] ip6_finish_output2+0xb23/0x1cf0 [ 830.367093] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 830.367701] ip6_output+0x3b8/0x7e0 [ 830.368156] ip6_local_out+0xb4/0x1a0 [ 830.368619] ip6_send_skb+0x112/0x460 [ 830.369086] udp_v6_send_skb+0x7aa/0x15b0 [ 830.369602] udpv6_sendmsg+0x2116/0x2ad0 [ 830.370098] ? ip_frag_init+0x350/0x350 [ 830.370590] ? udp_v6_push_pending_frames+0x360/0x360 [ 830.371270] ? _down_write_nest_lock+0x160/0x160 [ 830.371921] ? vmacache_update+0xce/0x140 [ 830.372495] ? do_user_addr_fault+0x5b0/0xc60 [ 830.373114] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.373842] ? asm_exc_page_fault+0x1e/0x30 [ 830.374434] ? sock_has_perm+0x1ea/0x280 [ 830.375020] ? __import_iovec+0x458/0x590 [ 830.375524] ? udp_v6_push_pending_frames+0x360/0x360 [ 830.376153] inet6_sendmsg+0x105/0x140 [ 830.376624] ? inet6_compat_ioctl+0x320/0x320 [ 830.377167] __sock_sendmsg+0xf2/0x190 [ 830.377639] ____sys_sendmsg+0x334/0x870 [ 830.378180] ? sock_write_iter+0x3d0/0x3d0 [ 830.378694] ? do_recvmmsg+0x6d0/0x6d0 [ 830.379190] ? SOFTIRQ_verbose+0x10/0x10 [ 830.379681] ? mark_lock+0xf5/0x2df0 [ 830.380136] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 830.380779] ___sys_sendmsg+0xf3/0x170 [ 830.381254] ? sendmsg_copy_msghdr+0x160/0x160 [ 830.381813] ? __fget_files+0x2cf/0x520 [ 830.382296] ? lock_downgrade+0x6d0/0x6d0 [ 830.382814] ? lock_downgrade+0x6d0/0x6d0 [ 830.383396] ? __fget_files+0x2f8/0x520 [ 830.383982] ? __fget_light+0xea/0x290 [ 830.384530] __sys_sendmmsg+0x195/0x470 [ 830.385080] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 830.385668] ? lock_downgrade+0x6d0/0x6d0 [ 830.386257] ? __mutex_unlock_slowpath+0xe1/0x600 [ 830.386928] ? wait_for_completion_io+0x270/0x270 [ 830.387593] ? rcu_read_lock_any_held+0x75/0xa0 [ 830.388233] ? vfs_write+0x354/0xb10 [ 830.388743] ? fput_many+0x2f/0x1a0 [ 830.389241] ? ksys_write+0x1a9/0x260 [ 830.389759] ? __ia32_sys_read+0xb0/0xb0 [ 830.390322] __x64_sys_sendmmsg+0x99/0x100 [ 830.390912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.391536] do_syscall_64+0x33/0x40 [ 830.391986] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.392607] RIP: 0033:0x7fbfd48dcb19 [ 830.393058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.395294] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 830.396218] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 830.397082] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 830.397946] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.398815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.399793] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 830.400800] CPU: 1 PID: 6597 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 830.401763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 830.402915] Call Trace: [ 830.403285] dump_stack+0x107/0x167 [ 830.403785] should_fail.cold+0x5/0xa [ 830.404311] ? __alloc_skb+0x6d/0x5b0 [ 830.404839] should_failslab+0x5/0x20 [ 830.405378] kmem_cache_alloc_node+0x55/0x330 [ 830.406005] __alloc_skb+0x6d/0x5b0 [ 830.406509] netlink_sendmsg+0x998/0xdf0 [ 830.407077] ? netlink_unicast+0x7f0/0x7f0 [ 830.407601] ? netlink_unicast+0x7f0/0x7f0 [ 830.408116] __sock_sendmsg+0x154/0x190 [ 830.408600] ____sys_sendmsg+0x70d/0x870 [ 830.409095] ? sock_write_iter+0x3d0/0x3d0 [ 830.409607] ? do_recvmmsg+0x6d0/0x6d0 [ 830.410085] ? SOFTIRQ_verbose+0x10/0x10 [ 830.410575] ? lock_downgrade+0x6d0/0x6d0 [ 830.411088] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 830.411720] ? SOFTIRQ_verbose+0x10/0x10 [ 830.412215] ___sys_sendmsg+0xf3/0x170 [ 830.412688] ? sendmsg_copy_msghdr+0x160/0x160 [ 830.413245] ? __fget_files+0x2cf/0x520 [ 830.413726] ? lock_downgrade+0x6d0/0x6d0 [ 830.414227] ? find_held_lock+0x2c/0x110 [ 830.414727] ? __fget_files+0x2f8/0x520 [ 830.415224] ? __fget_light+0xea/0x290 [ 830.415700] __sys_sendmsg+0xe5/0x1b0 [ 830.416163] ? __sys_sendmsg_sock+0x40/0x40 [ 830.416684] ? rcu_read_lock_any_held+0x75/0xa0 [ 830.417258] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 830.417891] ? syscall_enter_from_user_mode+0x1d/0x50 [ 830.418513] ? trace_hardirqs_on+0x5b/0x180 [ 830.419043] do_syscall_64+0x33/0x40 [ 830.419496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 830.420115] RIP: 0033:0x7f0f5aca2b19 [ 830.420565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 830.422839] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.423792] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 830.424653] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 830.425514] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 830.426375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.427250] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 13:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:17 executing program 6: signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xde0]}, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file2\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400e7070100600a000000f8", 0x16}, {0x0, 0x0, 0x8000000000000002}], 0x0, &(0x7f00000000c0)=ANY=[]) 13:37:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 830.574855] loop6: detected capacity change from 0 to 4194304 [ 830.585157] FAT-fs (loop6): bogus logical sector size 59136 [ 830.585875] FAT-fs (loop6): Can't find a valid FAT filesystem 13:37:17 executing program 7: r0 = epoll_create(0x719) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) dup2(r2, r1) 13:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:17 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0xca}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)=ANY=[@ANYBLOB="010000d1dcbef06375006300", @ANYBLOB="ff9d23b4c39731527e0042108d25000052"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r4=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r5=>0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r6=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r0, 0x14, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0) 13:37:31 executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, &(0x7f0000000000)=0x9, 0xffffffffffffffff, &(0x7f0000000640)=0x100000001, 0x8, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x2000}, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000700)=""/25, 0x19}], 0x2, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, r1, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000540)="57b765ad487c9fe826d494d6f4cade6b9b6f882e835bd7b8cd7daf218eaee555f523c9d23c35388c328c04707241bb84b407629a17f3b7f19374018665b398d4ed1ba9ff073a0b72a4a9bdda6c2414798126eef3c0a709f102dd0e932e992d18224b82d57df192d201a61fd75979a4ebe17ac0f33b32181e19525642e6772746c0550000000000ec6b62e62830fa16f2a1197f1b36356f13a44b8184399273465b66d700eb848cf6fcd45bb1326921e45d70e958fc3083f0718ab830896bb0b83010ba0fa0bae571b0454de894ffdda182bac68e4bb6e8d2fe055b609323ba109f973551c26e92c65b03", 0xea}, {&(0x7f0000000300)="8c8ae37261", 0x5}, {&(0x7f0000000340)="afc99c48f91115be2a43258db6b3bd5f7024bedfcc820ebf31924999c2b0509b1fe6c5a06eee94d6bffba0db9b61800919baf2464a59d692776e0373008089875217f300aa704c77ba7d368575ad2f3f2a5417721a20fb678ef47475388fc55eedc75b071ad03b933943210f080446926447c5214fa10f1ca2d7f2f5df4084b43d42b3646df247ed32847088245616863033b746a4853299831cb7b0690e8e3971b0a7db6caef9e491cd8442171928641646f0fe7cef502662a7652255d60dfb59f2e88d258d479e703cfcc4abd5c1253cba", 0xd2}], 0x3, 0x401, 0x70a586b4) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1d) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/65, 0x41) r2 = getpgid(0x0) timer_create(0x6, &(0x7f0000000240)={0x0, 0x34, 0x0, @tid=r2}, &(0x7f0000000880)=<r3=>0x0) clock_gettime(0x0, &(0x7f00000008c0)={<r4=>0x0, <r5=>0x0}) timer_settime(r3, 0x0, &(0x7f0000000900)={{r4, r5+60000000}}, &(0x7f0000001940)) timer_settime(r3, 0x0, &(0x7f00000004c0)={{}, {0x77359400}}, &(0x7f0000000500)) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000000000009000000000000000000000008000000010000000000000001000000000000000002000000000000e1ff00000000000000000000000000008800000000000000020e0000000000ddffffff010180000035c3f771b2b920a52e4d5a7e58048b75183f22755514ab02a74da6cd69cb3d1b20bda4"]) perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0xf6, 0x20, 0x0, 0x1f, 0x0, 0x56, 0x21606, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0x9}, 0x40c29, 0x563f0a0f, 0xffffffff, 0x7, 0x7, 0x76a9, 0x3, 0x0, 0x7, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xc) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:37:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x4, 0x0, 0x0, 0x55, 0x0, 0x8001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x32c0000000000, 0x7, 0x8, 0x0, 0x0, 0x0, 0xa000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x40001a9, 0x810) 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 4) 13:37:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 10) dup2(r0, r1) 13:37:31 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1a}, &(0x7f0000000040)=<r0=>0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_delete(r0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x20000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0xd}, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/224, &(0x7f0000000840)=[0xffffffffffffffff], 0x1}, 0x58) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0400f2ac2f8e4cf5f0615a41b2"], 0x4, 0x92a84b769ae0e8dc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=<r2=>0x0) capset(&(0x7f0000000240)={0x20080522, r2}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600410d0000000a0000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x4}, &(0x7f0000000600)=<r4=>0x0) timer_gettime(r4, &(0x7f0000000700)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:37:31 executing program 7: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x81}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x302, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x45}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x76}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40045) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x1000, 0x80, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r5, r6, 0x1000) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x1000, 0x80, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r7, r8, 0x1000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r5, r8}}, './file0\x00'}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r9, 0x4c06, 0x0) [ 844.140328] FAULT_INJECTION: forcing a failure. [ 844.140328] name failslab, interval 1, probability 0, space 0, times 0 [ 844.141720] CPU: 1 PID: 6645 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 844.142546] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.143571] Call Trace: [ 844.143899] dump_stack+0x107/0x167 [ 844.144347] should_fail.cold+0x5/0xa [ 844.144821] should_failslab+0x5/0x20 [ 844.145288] __kmalloc_node_track_caller+0x74/0x3b0 [ 844.145899] ? ndisc_alloc_skb+0x134/0x320 [ 844.146429] __alloc_skb+0xb1/0x5b0 [ 844.146879] ndisc_alloc_skb+0x134/0x320 [ 844.147396] ndisc_send_ns+0x177/0x860 [ 844.147896] ? pndisc_redo+0x20/0x20 [ 844.148400] ndisc_solicit+0x2cd/0x470 [ 844.148922] ? ndisc_send_ns+0x860/0x860 [ 844.149424] ? __skb_clone+0x586/0x770 [ 844.149908] ? ndisc_send_ns+0x860/0x860 [ 844.150409] neigh_probe+0xc4/0x110 [ 844.150852] __neigh_event_send+0x37c/0x1270 [ 844.151420] neigh_resolve_output+0x508/0x7f0 [ 844.151973] ? ip6_mtu+0x1bb/0x3d0 [ 844.152416] ip6_finish_output2+0xb23/0x1cf0 [ 844.152969] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 844.153581] ip6_output+0x3b8/0x7e0 [ 844.154037] ip6_local_out+0xb4/0x1a0 [ 844.154506] ip6_send_skb+0x112/0x460 [ 844.154990] udp_v6_send_skb+0x7aa/0x15b0 [ 844.155511] udpv6_sendmsg+0x2116/0x2ad0 [ 844.156010] ? ip_frag_init+0x350/0x350 [ 844.156503] ? udp_v6_push_pending_frames+0x360/0x360 [ 844.157129] ? _down_write_nest_lock+0x160/0x160 [ 844.157708] ? vmacache_update+0xce/0x140 [ 844.158218] ? do_user_addr_fault+0x5b0/0xc60 [ 844.158767] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 844.159439] ? asm_exc_page_fault+0x1e/0x30 [ 844.159966] ? sock_has_perm+0x1ea/0x280 [ 844.160483] ? __import_iovec+0x458/0x590 [ 844.160983] ? udp_v6_push_pending_frames+0x360/0x360 [ 844.161610] inet6_sendmsg+0x105/0x140 [ 844.162080] ? inet6_compat_ioctl+0x320/0x320 [ 844.162621] __sock_sendmsg+0xf2/0x190 [ 844.163110] ____sys_sendmsg+0x334/0x870 [ 844.163604] ? sock_write_iter+0x3d0/0x3d0 [ 844.164116] ? do_recvmmsg+0x6d0/0x6d0 [ 844.164595] ? mark_lock+0xf5/0x2df0 [ 844.165049] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 844.165680] ? __lock_acquire+0x1657/0x5b00 [ 844.166206] ___sys_sendmsg+0xf3/0x170 [ 844.166681] ? sendmsg_copy_msghdr+0x160/0x160 [ 844.167255] ? __fget_files+0x2cf/0x520 [ 844.167737] ? lock_downgrade+0x6d0/0x6d0 [ 844.168285] ? lock_downgrade+0x6d0/0x6d0 [ 844.168801] ? __fget_files+0x2f8/0x520 [ 844.169310] ? __fget_light+0xea/0x290 [ 844.169814] __sys_sendmmsg+0x195/0x470 [ 844.170326] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 844.170871] ? lock_downgrade+0x6d0/0x6d0 [ 844.171402] ? __mutex_unlock_slowpath+0xe1/0x600 [ 844.171993] ? wait_for_completion_io+0x270/0x270 [ 844.172577] ? rcu_read_lock_any_held+0x75/0xa0 [ 844.173141] ? vfs_write+0x354/0xb10 [ 844.173592] ? fput_many+0x2f/0x1a0 [ 844.174080] ? ksys_write+0x1a9/0x260 [ 844.174572] ? __ia32_sys_read+0xb0/0xb0 [ 844.175127] __x64_sys_sendmmsg+0x99/0x100 [ 844.175642] ? syscall_enter_from_user_mode+0x1d/0x50 [ 844.176263] do_syscall_64+0x33/0x40 [ 844.176714] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.177334] RIP: 0033:0x7fbfd48dcb19 [ 844.177785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.180098] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 844.181051] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 844.181910] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 844.182773] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.183657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 844.184527] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 [ 844.185486] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb 13:37:31 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r2, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), 0x0, 0x1, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x40}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb6", 0x5f, 0x5}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="25242c1f2e2c5b892c6861735f2c00"]) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x200) dup3(r7, r6, 0x80000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) lseek(0xffffffffffffffff, 0x5, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000005c0)='./file0\x00', 0x50) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:31 executing program 7: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x40}, 0x18) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x0, 0x4, 0x1ff}, {0x67e, 0x2, 0x83, 0x200000}, {0x200, 0x20, 0x1, 0x753}]}) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x77359400}, 0x1, 0x1}, 0x3f) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) [ 844.203805] FAULT_INJECTION: forcing a failure. [ 844.203805] name failslab, interval 1, probability 0, space 0, times 0 [ 844.216006] CPU: 0 PID: 6643 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 844.216889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.217929] Call Trace: [ 844.218273] dump_stack+0x107/0x167 [ 844.218736] should_fail.cold+0x5/0xa [ 844.219237] ? create_object.isra.0+0x3a/0xa20 [ 844.219815] should_failslab+0x5/0x20 [ 844.220277] kmem_cache_alloc+0x5b/0x310 [ 844.220770] create_object.isra.0+0x3a/0xa20 [ 844.221304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 844.221923] kmem_cache_alloc_node+0x169/0x330 [ 844.222490] __alloc_skb+0x6d/0x5b0 [ 844.222938] netlink_sendmsg+0x998/0xdf0 [ 844.223442] ? netlink_unicast+0x7f0/0x7f0 [ 844.223963] ? netlink_unicast+0x7f0/0x7f0 [ 844.224480] __sock_sendmsg+0x154/0x190 [ 844.224963] ____sys_sendmsg+0x70d/0x870 [ 844.225458] ? sock_write_iter+0x3d0/0x3d0 [ 844.225972] ? do_recvmmsg+0x6d0/0x6d0 [ 844.226451] ? lock_downgrade+0x6d0/0x6d0 [ 844.226966] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 844.227613] ___sys_sendmsg+0xf3/0x170 [ 844.228128] ? sendmsg_copy_msghdr+0x160/0x160 [ 844.228698] ? __fget_files+0x2cf/0x520 [ 844.229214] ? lock_downgrade+0x6d0/0x6d0 [ 844.229719] ? find_held_lock+0x2c/0x110 [ 844.230217] ? __fget_files+0x2f8/0x520 [ 844.230706] ? __fget_light+0xea/0x290 [ 844.231202] __sys_sendmsg+0xe5/0x1b0 [ 844.231664] ? __sys_sendmsg_sock+0x40/0x40 [ 844.232188] ? rcu_read_lock_any_held+0x75/0xa0 [ 844.232762] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 844.233401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 844.234025] ? trace_hardirqs_on+0x5b/0x180 [ 844.234548] do_syscall_64+0x33/0x40 [ 844.239049] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.239701] RIP: 0033:0x7f0f5aca2b19 [ 844.240187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.242410] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.243344] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 844.244209] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 844.245073] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.245936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.246800] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:31 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="b8495b294e84959505032e08443f471f8dbf50c0fb619e07c2716ff079d96b7ddb29cdb5e43d9395ddbd1e21e3af747ecce51a63022947e6a8a772c0cc68f47d397d21190d90054dcba98a2ad2b78b99ed00006f2effffffffcdd99574c48c8d2806004afa0a2453261374e4a1d879ea02120610fd56de20bdfa8b23933c8eff1bb240", 0x83}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) [ 844.295283] audit: type=1326 audit(1740749851.528:267): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd10f609b19 code=0x0 13:37:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 844.354427] loop1: detected capacity change from 0 to 8388096 13:37:31 executing program 6: syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0xb, 0x4, 0x0, 0x2, 0x74, 0x66, 0x0, 0x5, 0x11, 0x0, @local, @remote, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x0, 0xcb, 0x3, 0x0, [{@local, 0x4}, {@private=0xa010102, 0x800}]}, @timestamp_addr={0x44, 0xd, 0x41, 0x1, 0x3, [{@private=0xa010100, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e1f, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "5b6f94634231ec8ae3a4bc17afeca0994e0782c233699868", "ecb9343a25b3fa789d926251abcb039f4f97459de85de9a6e573ed1007fe3aeb"}}}}}}, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @remote, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@x25={0x805, {0x1, 0x8, 0x1, "b69a431274e564946c658b8ed458c127463231aa2563cc66f1e697b958f16b6b0ac15511008d68cc0ad69868a12e5c21ffbb37c449d21148b2ef9f4732691c75a481bb6dd483601110238f11fc0d8e3303c4de393606db072115f21474e0e51d242f275148e976fa15272f71"}}}}, &(0x7f00000000c0)={0x0, 0x1, [0xc5c, 0x4a1, 0x33d, 0x49c]}) 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 844.432883] audit: type=1326 audit(1740749851.666:268): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 844.435967] audit: type=1326 audit(1740749851.669:269): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 13:37:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 13:37:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 5) [ 844.535715] FAULT_INJECTION: forcing a failure. [ 844.535715] name failslab, interval 1, probability 0, space 0, times 0 [ 844.537200] CPU: 0 PID: 6679 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 844.538030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.539103] Call Trace: [ 844.539432] dump_stack+0x107/0x167 [ 844.539899] should_fail.cold+0x5/0xa [ 844.540364] should_failslab+0x5/0x20 [ 844.540828] __kmalloc_node_track_caller+0x74/0x3b0 [ 844.541427] ? netlink_sendmsg+0x998/0xdf0 [ 844.541945] __alloc_skb+0xb1/0x5b0 [ 844.542387] netlink_sendmsg+0x998/0xdf0 [ 844.542891] ? netlink_unicast+0x7f0/0x7f0 [ 844.543435] ? netlink_unicast+0x7f0/0x7f0 [ 844.544004] __sock_sendmsg+0x154/0x190 [ 844.544513] ____sys_sendmsg+0x70d/0x870 [ 844.545037] ? sock_write_iter+0x3d0/0x3d0 [ 844.545555] ? do_recvmmsg+0x6d0/0x6d0 [ 844.546040] ? lock_downgrade+0x6d0/0x6d0 [ 844.546548] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 844.547210] ___sys_sendmsg+0xf3/0x170 [ 844.547690] ? sendmsg_copy_msghdr+0x160/0x160 [ 844.548250] ? __fget_files+0x2cf/0x520 [ 844.548736] ? lock_downgrade+0x6d0/0x6d0 [ 844.549241] ? find_held_lock+0x2c/0x110 [ 844.549740] ? __fget_files+0x2f8/0x520 [ 844.550231] ? __fget_light+0xea/0x290 [ 844.550712] __sys_sendmsg+0xe5/0x1b0 [ 844.551192] ? __sys_sendmsg_sock+0x40/0x40 [ 844.551715] ? rcu_read_lock_any_held+0x75/0xa0 [ 844.552293] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 844.552939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 844.553572] ? trace_hardirqs_on+0x5b/0x180 [ 844.554101] do_syscall_64+0x33/0x40 [ 844.554564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.555211] RIP: 0033:0x7f0f5aca2b19 [ 844.555667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 844.557910] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 844.558837] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 844.559721] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 844.560591] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 844.561463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.562387] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 845.059181] audit: type=1326 audit(1740749852.289:270): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 845.063724] audit: type=1326 audit(1740749852.297:271): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 845.066500] audit: type=1326 audit(1740749852.297:272): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 845.069833] audit: type=1326 audit(1740749852.297:273): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 845.073536] audit: type=1326 audit(1740749852.297:274): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 845.076241] audit: type=1326 audit(1740749852.300:275): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd10f609b19 code=0x0 [ 845.079299] audit: type=1326 audit(1740749852.300:276): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6651 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 858.334791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 13:37:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 11) dup2(r0, r1) 13:37:45 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x28, 0x4, 0x1, 0x3f, 0x0, 0x4, 0x10000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7fff, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x40, 0x7d3, 0x1, 0x0, 0xffffffffffffff40, 0xffffffff, 0x9, 0x0, 0x9, 0x0, 0x99}, 0x0, 0x6, r1, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r5=>0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0x2}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c00"/35, @ANYRES32], 0x38}}], 0x1, 0x0) statx(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c8000000140000002cbd7000fbdbdf25fe8000000000000000000000000000aafe8000000000000000000000000000aa4e2100034e2300000200200087000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="b86b6e000000920300001600000001001025bd700028bd7000defc961100000108000b00000000004e0003006c7a6a6800e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000001e00000100"/131], 0xc8}}, 0x40040) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002400010000000000000000000000000600040f00000000"], 0x1c}}, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) fchownat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', r6, r7, 0x1000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) r8 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r8, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 13:37:45 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 13:37:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) 13:37:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 6) 13:37:45 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010, 0x84b, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x2) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) pkey_alloc(0x0, 0x0) pkey_free(0xffffffffffffffff) syz_io_uring_setup(0x60bc, &(0x7f00000000c0)={0x0, 0x224c, 0x20, 0x1, 0x343}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x3000008, r1) r2 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x9, 0x0, 0x0, 0x2, 0x54210, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x9e, 0x8}, 0x11a4, 0x1, 0x6, 0x9, 0xc1dd, 0xa30, 0x8, 0x0, 0x9, 0x0, 0x400}, r2, 0x200000000004, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8800000) 13:37:45 executing program 6: r0 = syz_io_uring_setup(0x13cb, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_io_uring_setup(0x47d3, &(0x7f0000000500)={0x0, 0xb25d, 0x8, 0x4, 0x2c5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x880, 0x0) syz_io_uring_setup(0x2fe4, &(0x7f00000002c0)={0x0, 0x6ddc, 0x10, 0x0, 0x190, 0x0, r5}, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000400), &(0x7f0000000480)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) splice(0xffffffffffffffff, &(0x7f0000000580)=0x3ff, r3, &(0x7f00000005c0)=0x9, 0x7, 0x8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000004c0)={0xc2db, 0x3, 0x6}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:37:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x0) [ 858.396326] FAULT_INJECTION: forcing a failure. [ 858.396326] name failslab, interval 1, probability 0, space 0, times 0 [ 858.397724] CPU: 1 PID: 6708 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 858.398556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.399592] Call Trace: [ 858.399965] dump_stack+0x107/0x167 [ 858.400408] should_fail.cold+0x5/0xa [ 858.401471] ? create_object.isra.0+0x3a/0xa20 [ 858.402879] should_failslab+0x5/0x20 [ 858.404366] kmem_cache_alloc+0x5b/0x310 [ 858.405836] create_object.isra.0+0x3a/0xa20 [ 858.407117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.408961] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 858.411221] ? netlink_sendmsg+0x998/0xdf0 [ 858.412913] __alloc_skb+0xb1/0x5b0 [ 858.414678] netlink_sendmsg+0x998/0xdf0 [ 858.415218] ? netlink_unicast+0x7f0/0x7f0 [ 858.415788] ? netlink_unicast+0x7f0/0x7f0 [ 858.416363] __sock_sendmsg+0x154/0x190 [ 858.418087] ____sys_sendmsg+0x70d/0x870 [ 858.419687] ? sock_write_iter+0x3d0/0x3d0 [ 858.421048] ? do_recvmmsg+0x6d0/0x6d0 [ 858.421613] ? lock_downgrade+0x6d0/0x6d0 [ 858.422420] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 858.423474] ___sys_sendmsg+0xf3/0x170 [ 858.424350] ? sendmsg_copy_msghdr+0x160/0x160 [ 858.425557] ? __fget_files+0x2cf/0x520 [ 858.426075] ? lock_downgrade+0x6d0/0x6d0 [ 858.426630] ? find_held_lock+0x2c/0x110 [ 858.429886] FAULT_INJECTION: forcing a failure. [ 858.429886] name failslab, interval 1, probability 0, space 0, times 0 [ 858.432134] ? __fget_files+0x2f8/0x520 [ 858.432151] ? __fget_light+0xea/0x290 [ 858.432224] __sys_sendmsg+0xe5/0x1b0 [ 858.432238] ? __sys_sendmsg_sock+0x40/0x40 [ 858.432249] ? rcu_read_lock_any_held+0x75/0xa0 [ 858.432331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.432345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.432355] ? trace_hardirqs_on+0x5b/0x180 [ 858.432426] do_syscall_64+0x33/0x40 [ 858.432441] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.432449] RIP: 0033:0x7f0f5aca2b19 [ 858.432461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.432544] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.432558] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 858.432565] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 858.432571] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.432578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.432584] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 858.472676] CPU: 0 PID: 6697 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 858.474331] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.476035] Call Trace: [ 858.476366] dump_stack+0x107/0x167 [ 858.476819] should_fail.cold+0x5/0xa [ 858.477330] ? create_object.isra.0+0x3a/0xa20 [ 858.477922] should_failslab+0x5/0x20 [ 858.478391] kmem_cache_alloc+0x5b/0x310 [ 858.478890] create_object.isra.0+0x3a/0xa20 [ 858.483486] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 858.484141] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 858.484788] ? ndisc_alloc_skb+0x134/0x320 [ 858.485339] __alloc_skb+0xb1/0x5b0 [ 858.485817] ndisc_alloc_skb+0x134/0x320 [ 858.486341] ndisc_send_ns+0x177/0x860 [ 858.486848] ? pndisc_redo+0x20/0x20 [ 858.487381] ndisc_solicit+0x2cd/0x470 [ 858.487869] ? ndisc_send_ns+0x860/0x860 [ 858.488561] ? __skb_clone+0x586/0x770 [ 858.488583] ? ndisc_send_ns+0x860/0x860 [ 858.488603] neigh_probe+0xc4/0x110 [ 858.490030] __neigh_event_send+0x37c/0x1270 [ 858.490579] neigh_resolve_output+0x508/0x7f0 [ 858.491180] ? ip6_mtu+0x1bb/0x3d0 [ 858.491634] ip6_finish_output2+0xb23/0x1cf0 [ 858.492185] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 858.492805] ip6_output+0x3b8/0x7e0 [ 858.493307] ip6_local_out+0xb4/0x1a0 [ 858.493780] ip6_send_skb+0x112/0x460 [ 858.494277] udp_v6_send_skb+0x7aa/0x15b0 [ 858.494798] udpv6_sendmsg+0x2116/0x2ad0 [ 858.495350] ? ip_frag_init+0x350/0x350 [ 858.495850] ? udp_v6_push_pending_frames+0x360/0x360 [ 858.496491] ? _down_write_nest_lock+0x160/0x160 [ 858.497077] ? vmacache_update+0xce/0x140 [ 858.497594] ? do_user_addr_fault+0x5b0/0xc60 [ 858.498146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.498797] ? asm_exc_page_fault+0x1e/0x30 [ 858.499373] ? sock_has_perm+0x1ea/0x280 [ 858.499895] ? __import_iovec+0x458/0x590 [ 858.500409] ? udp_v6_push_pending_frames+0x360/0x360 [ 858.501052] inet6_sendmsg+0x105/0x140 [ 858.501534] ? inet6_compat_ioctl+0x320/0x320 [ 858.502120] __sock_sendmsg+0xf2/0x190 [ 858.502606] ____sys_sendmsg+0x334/0x870 [ 858.503150] ? sock_write_iter+0x3d0/0x3d0 [ 858.503673] ? do_recvmmsg+0x6d0/0x6d0 [ 858.504159] ? mark_lock+0xf5/0x2df0 [ 858.504621] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 858.505257] ? __lock_acquire+0x1657/0x5b00 [ 858.505794] ___sys_sendmsg+0xf3/0x170 [ 858.506270] ? sendmsg_copy_msghdr+0x160/0x160 [ 858.506842] ? __fget_files+0x2cf/0x520 [ 858.510221] ? lock_downgrade+0x6d0/0x6d0 [ 858.510733] ? lock_downgrade+0x6d0/0x6d0 [ 858.511259] ? __fget_files+0x2f8/0x520 [ 858.511751] ? __fget_light+0xea/0x290 [ 858.512236] __sys_sendmmsg+0x195/0x470 [ 858.512727] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 858.513298] ? lock_downgrade+0x6d0/0x6d0 [ 858.513854] ? __mutex_unlock_slowpath+0xe1/0x600 [ 858.514495] ? wait_for_completion_io+0x270/0x270 [ 858.515114] ? rcu_read_lock_any_held+0x75/0xa0 [ 858.515730] ? vfs_write+0x354/0xb10 [ 858.516186] ? fput_many+0x2f/0x1a0 [ 858.516629] ? ksys_write+0x1a9/0x260 [ 858.517092] ? __ia32_sys_read+0xb0/0xb0 [ 858.517594] __x64_sys_sendmmsg+0x99/0x100 [ 858.518153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.518783] do_syscall_64+0x33/0x40 [ 858.519299] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.519926] RIP: 0033:0x7fbfd48dcb19 [ 858.520377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.522604] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 858.523567] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 858.524429] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 858.525290] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.526157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:37:45 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="000404"], 0x28) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, &(0x7f0000000640)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b80)={'wlan0\x00', <r9=>0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24004010) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="9f33f2d014f86e839fe53d5163f350c717985566495465838fa127797b4f3bf2212926d57a6c11ace1651c1bcbfafcbf03ddb7a467f0843548a6e9859c6abb2af623688a10ccf0c4423d10f346ca5fc21e786adb8bc6e330e389f995e754a685c7aaba6f5f57b65035ea77ab779359cb2a17e7483e3599f668bd946fb9ee1d84e2331922d51733c5a6f838e759bdf9", 0x8f}, {&(0x7f0000000140)="bbc791aa0762a225d3bf55c07e0f4716e9bb770cba9b976d412e71135d2b51bd564965d9ebed6c7fca92905ccb9ae7fd094622daaa9b4f9ee06d78e7f3576c1d5bc453473aa203a0792c076c151af61e73a4a50759e0d37051e0c9bf403ecc493cdfa1f1d6bf66318bd9007b81946ae9b595caa2", 0x74}, {&(0x7f0000000000)="ca4d9a51658729934d35edf01496ceacdebace6fe9dc779828a4b03a25b5c184952f0670557b003f", 0x28}, {&(0x7f0000000200)="910591011a447a9e57a7aa4841a943f7f5b360f469f88e8271fbfcdb853cfb25caa4662a832fa6ef8e68d5602e9d71495857c9333a1d157c849fc2902a206eabd6d94236a71cdeeac4c13d80d92fe9542691452909be11d31aeb3cbcc6aa235233b56ee8053967280ea59db267763136e4ecb49b9a2c109ae450c22fded537e3956250b2ba", 0x85}], 0x4}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000340)="e1739ff85652e47331c9dd899c8ec155310f208789598a1ece12fce71e316ee4ca34099a8bf5f0b1f8fbb666628b8b04f11672f68bb8cabe5e5b8445fffab214e644900db81280660f251d2be9488c9d14af74f061f7f5f25608cd793b89e0bd87a469ce30e744a701cecfbdd4e8d78d889be5cfac36a10a7eb2850a38cf0e27d223aa191180b2222274e1496e24e68b9c0f770c101e39280510c1800ae2de30edf98403bb9ebdda59d5619790ccbf91e4ba51f5e817e885249bc338aae5c081415d90d35044aac68ed0f244ae3dd51633e02e34341e2379b025162dadf36d67bc2bd151bcfdc71d972494c1f8ee8bd68ada9845973b", 0xf6}, {&(0x7f0000000480)="9d31ec810211028222ee9a8490b0b651e32b3c6ae89104d8148cc2ce6e86aa1a2902c5e25987de25a6cbe8193461edc0f3e6bb3cdeb07e2ce11ec51298af8b48653ce4d876e9b656af6cbc5b65a3b72bde2617d55cc64dfce34ed73092bc1cb6ad058ba3d13be309320a3944a93298f6f782f981a79efbb3a5170e733740257a721faf869429", 0x86}, {&(0x7f0000000540)="d8c4719d0d6070b03e5e0bb451a291bcd940e4b4a2304aedc27b9ad3ab101ee94464fd24b407d4e3ca90f0f3be56c8169d343ee0547f5eee056707e647c0d1f9fbd686eea9e99f6816618f518f08c2eaa187c903a59e2f865e75b6a93ab19b6fdb54ffd8854efddfcc05bc16c8ce95599c1ba913c7fb58b539104597b11b01aa48441b707d8259a27c1cb0434091dbb10b43c015d5dabf10f4ff5655254dca8238dff584dc6faf54902ad387f73a459bd702cc06e8fd88ec04809f8da1df5c0118015b74e86246896fab9c0fcdf4bda8f4", 0xd1}, {&(0x7f0000000640)}, {&(0x7f0000000680)="f88f1f8b5652a7c09cdca42a1506eee59337a21a65266df32aba9393cec700abf2dea02bf08c6930bd40a30364e8392031d8823a12991a2cccc7637d3c5c6bbcf5f53e59bec837e722ca9152641a", 0x4e}, {&(0x7f0000000700)="19abc32770c0bf93daa55cf3160b10a15d0619d1b145fa32e4cd1c8388554d2eabda50de74cf5cb6c8a70d27f8279c25734e319e78622b6d04b3087b25c81311cfcc999c35d7c0127ceb7238008a5ebf60d7e79b46b5c7195d57ba67ee20d1b94ccadc052996d552", 0x68}, {&(0x7f0000000780)="04f6a21d1cdb260171c481ef6c855c886adb63aab254a23d2c6c582df9b76cfd18fe8c95c5813e1d41efb46517ed93ff932480211caefd6f2a632cb9f546af3ca7276fff7775f1adae115016ac42785784d29fac7a35f9081c5a2b", 0x5b}], 0x7}}, {{&(0x7f0000000880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000008c0)="1b7fdb6eb84a4e82523bb3f0309f5d16b0f924c9efca998823c820f4884ae20dcb9a1f0bc51b36f9fa240f80d05f5bf4bc7cff0a7af3c9cc1e4e8f8b0c03929bdfaeb7cd64eb124058055da902c76ddd326e79f4cda1347b3a451a8869d7da847f038240091e04ade867aaac70b5d58c6aa045ac53c00477790f273fd46e294f50caa6f10fcb654e9b380ee64d0fd62154b124c6fa8fd028261f05ee960b337e6b779179876c90f44f602d090b", 0xad}, {&(0x7f0000000980)="0a4c77dd07c8094eb6448267fb6b61ca3e55e60f840d023397a7c68f7c365b2df494204664d70239", 0x28}], 0x2, &(0x7f0000000a00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x3, 0x4000040) [ 858.527018] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:37:45 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x40000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) ioctl$HIDIOCINITREPORT(r3, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) openat(r3, &(0x7f0000000040)='./file0\x00', 0x185041, 0x14) sendfile(r1, r0, 0x0, 0x10000007) 13:37:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 7) 13:37:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 858.641804] FAULT_INJECTION: forcing a failure. [ 858.641804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.643286] CPU: 0 PID: 6725 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 858.644111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 858.645110] Call Trace: [ 858.645437] dump_stack+0x107/0x167 [ 858.645879] should_fail.cold+0x5/0xa [ 858.646346] _copy_from_iter_full+0x201/0xa60 [ 858.646891] ? __virt_addr_valid+0x170/0x5d0 [ 858.651454] ? __check_object_size+0x319/0x440 [ 858.652008] netlink_sendmsg+0x879/0xdf0 [ 858.652500] ? netlink_unicast+0x7f0/0x7f0 [ 858.653017] ? netlink_unicast+0x7f0/0x7f0 [ 858.653531] __sock_sendmsg+0x154/0x190 [ 858.654010] ____sys_sendmsg+0x70d/0x870 [ 858.654503] ? sock_write_iter+0x3d0/0x3d0 [ 858.655013] ? do_recvmmsg+0x6d0/0x6d0 [ 858.655515] ? lock_downgrade+0x6d0/0x6d0 [ 858.656020] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 858.656661] ___sys_sendmsg+0xf3/0x170 [ 858.657137] ? sendmsg_copy_msghdr+0x160/0x160 [ 858.657694] ? __fget_files+0x2cf/0x520 [ 858.658179] ? lock_downgrade+0x6d0/0x6d0 [ 858.658680] ? find_held_lock+0x2c/0x110 13:37:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 858.659194] ? __fget_files+0x2f8/0x520 [ 858.659683] ? __fget_light+0xea/0x290 [ 858.660161] __sys_sendmsg+0xe5/0x1b0 [ 858.667610] ? __sys_sendmsg_sock+0x40/0x40 [ 858.668134] ? rcu_read_lock_any_held+0x75/0xa0 [ 858.668705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 858.669341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 858.669962] ? trace_hardirqs_on+0x5b/0x180 [ 858.670486] do_syscall_64+0x33/0x40 [ 858.670936] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 858.671571] RIP: 0033:0x7f0f5aca2b19 [ 858.672021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 858.674246] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 858.675181] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 858.676046] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 858.676907] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 858.677768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.678631] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 858.727614] selinux_netlink_send: 38 callbacks suppressed [ 858.727625] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35144 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.774259] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=34247 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.783644] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53893 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.800519] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=53481 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.825682] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35656 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.836952] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.844706] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=33608 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.856964] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35140 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.869418] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 [ 858.870936] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=51 sclass=netlink_xfrm_socket pid=6722 comm=syz-executor.1 13:37:59 executing program 1: r0 = socket$inet(0xa, 0x6, 0x40003) sendto(r0, 0x0, 0x0, 0x50, &(0x7f0000000140)=@l2tp6={0xa, 0x300, 0x0, @mcast2}, 0x80) 13:37:59 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @remote, 'sit0\x00'}}, 0x80) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x240e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext, 0x90200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r2, 0x6) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r2, 0x6) getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) unshare(0x48020200) 13:37:59 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, 0x0, 0x80) fallocate(r2, 0x0, 0x10001, 0x100) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x2}) r3 = io_uring_setup(0x65d7, &(0x7f00000001c0)={0x0, 0x3196, 0x4, 0x0, 0x20e, 0x0, r2}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/613], 0x256) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r3, 0xff800000000, 0x68a, 0x7}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 13:37:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:37:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 8) 13:37:59 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:37:59 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000600)='net/fib_triestat\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x1, 0x4c07, 0x3, 0x8}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x27c}}, './file0\x00'}) sendfile(r1, r0, &(0x7f0000000080)=0x2e, 0x35) syz_io_uring_setup(0x14fd, &(0x7f00000007c0)={0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000840), &(0x7f0000000880)) 13:37:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 12) dup2(r0, r1) 13:37:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 872.657016] selinux_netlink_send: 33 callbacks suppressed [ 872.657028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6758 comm=syz-executor.2 [ 872.673966] FAULT_INJECTION: forcing a failure. [ 872.673966] name failslab, interval 1, probability 0, space 0, times 0 [ 872.681501] CPU: 0 PID: 6755 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 872.683354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.685585] Call Trace: [ 872.686258] dump_stack+0x107/0x167 [ 872.687190] should_fail.cold+0x5/0xa [ 872.688401] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 872.690205] should_failslab+0x5/0x20 [ 872.691201] __kmalloc+0x72/0x390 [ 872.692264] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 872.693922] genl_family_rcv_msg_doit+0xda/0x330 [ 872.695180] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 872.697211] ? cap_capable+0x1cd/0x230 [ 872.698238] ? security_capable+0x95/0xc0 [ 872.699430] ? ns_capable+0xe2/0x110 [ 872.700420] genl_rcv_msg+0x33c/0x5a0 [ 872.701402] ? genl_get_cmd+0x480/0x480 [ 872.702425] ? nl80211_join_ocb+0x160/0x160 [ 872.703632] ? lock_release+0x680/0x680 [ 872.704684] ? netlink_deliver_tap+0xf4/0xcc0 [ 872.705869] netlink_rcv_skb+0x14b/0x430 [ 872.706937] ? genl_get_cmd+0x480/0x480 [ 872.712159] ? netlink_ack+0xab0/0xab0 [ 872.713235] ? netlink_deliver_tap+0x1c4/0xcc0 [ 872.714410] ? is_vmalloc_addr+0x7b/0xb0 [ 872.715401] genl_rcv+0x24/0x40 [ 872.715805] netlink_unicast+0x549/0x7f0 [ 872.716327] ? netlink_attachskb+0x870/0x870 [ 872.716920] netlink_sendmsg+0x90f/0xdf0 [ 872.717425] ? netlink_unicast+0x7f0/0x7f0 [ 872.717957] ? netlink_unicast+0x7f0/0x7f0 [ 872.718474] __sock_sendmsg+0x154/0x190 [ 872.718962] ____sys_sendmsg+0x70d/0x870 [ 872.719522] ? sock_write_iter+0x3d0/0x3d0 [ 872.720036] ? do_recvmmsg+0x6d0/0x6d0 [ 872.720517] ? lock_downgrade+0x6d0/0x6d0 [ 872.721074] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.721755] ___sys_sendmsg+0xf3/0x170 [ 872.722233] ? sendmsg_copy_msghdr+0x160/0x160 [ 872.722796] ? __fget_files+0x2cf/0x520 [ 872.723313] ? lock_downgrade+0x6d0/0x6d0 [ 872.723831] ? find_held_lock+0x2c/0x110 [ 872.724336] ? __fget_files+0x2f8/0x520 [ 872.724840] ? __fget_light+0xea/0x290 [ 872.725326] __sys_sendmsg+0xe5/0x1b0 [ 872.725825] ? __sys_sendmsg_sock+0x40/0x40 [ 872.726350] ? rcu_read_lock_any_held+0x75/0xa0 [ 872.726934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.727637] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.728264] ? trace_hardirqs_on+0x5b/0x180 [ 872.728825] do_syscall_64+0x33/0x40 [ 872.729293] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.729945] RIP: 0033:0x7f0f5aca2b19 [ 872.730397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.734863] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.741179] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 872.743255] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 872.745486] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.747674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.749772] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 872.765658] FAULT_INJECTION: forcing a failure. [ 872.765658] name failslab, interval 1, probability 0, space 0, times 0 [ 872.768504] CPU: 1 PID: 6752 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 872.770635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 872.773324] Call Trace: [ 872.774121] dump_stack+0x107/0x167 [ 872.775079] should_fail.cold+0x5/0xa [ 872.776104] should_failslab+0x5/0x20 [ 872.777156] __kmalloc_node_track_caller+0x74/0x3b0 [ 872.778508] ? ndisc_alloc_skb+0x134/0x320 [ 872.779697] __alloc_skb+0xb1/0x5b0 [ 872.780642] ndisc_alloc_skb+0x134/0x320 [ 872.781689] ndisc_send_ns+0x177/0x860 [ 872.782756] ? pndisc_redo+0x20/0x20 [ 872.783836] ndisc_solicit+0x2cd/0x470 [ 872.784865] ? ndisc_send_ns+0x860/0x860 [ 872.785931] ? __skb_clone+0x586/0x770 [ 872.787010] ? ndisc_send_ns+0x860/0x860 [ 872.788243] neigh_probe+0xc4/0x110 [ 872.789183] __neigh_event_send+0x37c/0x1270 [ 872.790326] neigh_resolve_output+0x508/0x7f0 [ 872.795567] ? ip6_mtu+0x1bb/0x3d0 [ 872.796539] ip6_finish_output2+0xb23/0x1cf0 [ 872.797708] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 872.799066] ip6_output+0x3b8/0x7e0 [ 872.800170] ip6_local_out+0xb4/0x1a0 [ 872.801149] ip6_send_skb+0x112/0x460 [ 872.802130] udp_v6_send_skb+0x7aa/0x15b0 [ 872.803224] udpv6_sendmsg+0x2116/0x2ad0 [ 872.803776] ? ip_frag_init+0x350/0x350 [ 872.804283] ? udp_v6_push_pending_frames+0x360/0x360 [ 872.804975] ? _down_write_nest_lock+0x160/0x160 [ 872.805599] ? vmacache_update+0xce/0x140 [ 872.806167] ? do_user_addr_fault+0x5b0/0xc60 [ 872.806741] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 872.807570] ? asm_exc_page_fault+0x1e/0x30 [ 872.808688] ? sock_has_perm+0x1ea/0x280 [ 872.809779] ? __import_iovec+0x458/0x590 [ 872.810869] ? udp_v6_push_pending_frames+0x360/0x360 [ 872.812400] inet6_sendmsg+0x105/0x140 [ 872.813423] ? inet6_compat_ioctl+0x320/0x320 [ 872.814656] __sock_sendmsg+0xf2/0x190 [ 872.815764] ____sys_sendmsg+0x334/0x870 [ 872.816812] ? sock_write_iter+0x3d0/0x3d0 [ 872.817896] ? do_recvmmsg+0x6d0/0x6d0 [ 872.818906] ? mark_lock+0xf5/0x2df0 [ 872.819610] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 872.820275] ? __lock_acquire+0x1657/0x5b00 [ 872.820805] ___sys_sendmsg+0xf3/0x170 [ 872.821284] ? sendmsg_copy_msghdr+0x160/0x160 [ 872.821846] ? __fget_files+0x2cf/0x520 [ 872.822332] ? lock_downgrade+0x6d0/0x6d0 [ 872.822842] ? lock_downgrade+0x6d0/0x6d0 [ 872.823497] ? __fget_files+0x2f8/0x520 [ 872.824601] ? __fget_light+0xea/0x290 [ 872.825658] __sys_sendmmsg+0x195/0x470 [ 872.826707] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 872.827943] ? lock_downgrade+0x6d0/0x6d0 [ 872.829124] ? __mutex_unlock_slowpath+0xe1/0x600 [ 872.830380] ? wait_for_completion_io+0x270/0x270 [ 872.831692] ? rcu_read_lock_any_held+0x75/0xa0 [ 872.832815] ? vfs_write+0x354/0xb10 [ 872.833714] ? fput_many+0x2f/0x1a0 [ 872.834601] ? ksys_write+0x1a9/0x260 [ 872.835629] ? __ia32_sys_read+0xb0/0xb0 [ 872.836594] __x64_sys_sendmmsg+0x99/0x100 [ 872.837587] ? syscall_enter_from_user_mode+0x1d/0x50 [ 872.838798] do_syscall_64+0x33/0x40 [ 872.839773] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 872.841096] RIP: 0033:0x7fbfd48dcb19 [ 872.841989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 872.847162] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 872.848164] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 872.849029] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 872.849897] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 872.850811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.852265] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 872.854325] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb 13:38:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x31, 0xc21, 0x0, 0x0, {}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private2}]}, 0x28}}, 0x0) 13:38:13 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000012c00)) openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x52d542, 0x110, 0xe}, 0x18) 13:38:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 13) dup2(r0, r1) 13:38:13 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:38:13 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x24, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x10}}, 0x24, 0x0) 13:38:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 9) 13:38:13 executing program 6: socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21, 0x3, 0x0, {0xfe}}, 0x14}}, 0x4000000) [ 886.352924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 886.355944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 13:38:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 886.367298] FAULT_INJECTION: forcing a failure. [ 886.367298] name failslab, interval 1, probability 0, space 0, times 0 [ 886.369086] CPU: 0 PID: 6784 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 886.370136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.371430] Call Trace: [ 886.371851] dump_stack+0x107/0x167 [ 886.372400] should_fail.cold+0x5/0xa [ 886.372972] ? create_object.isra.0+0x3a/0xa20 [ 886.373649] should_failslab+0x5/0x20 [ 886.374174] kmem_cache_alloc+0x5b/0x310 [ 886.374668] ? mark_lock+0xf5/0x2df0 [ 886.375120] create_object.isra.0+0x3a/0xa20 [ 886.375663] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 886.376284] __kmalloc+0x16e/0x390 [ 886.376723] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 886.377520] genl_family_rcv_msg_doit+0xda/0x330 [ 886.378118] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 886.378951] ? cap_capable+0x1cd/0x230 [ 886.379427] ? security_capable+0x95/0xc0 [ 886.380011] ? ns_capable+0xe2/0x110 [ 886.380540] genl_rcv_msg+0x33c/0x5a0 [ 886.381074] ? genl_get_cmd+0x480/0x480 [ 886.381648] ? nl80211_join_ocb+0x160/0x160 [ 886.382265] ? lock_release+0x680/0x680 [ 886.382816] ? netlink_deliver_tap+0xf4/0xcc0 [ 886.383459] netlink_rcv_skb+0x14b/0x430 [ 886.384022] ? genl_get_cmd+0x480/0x480 [ 886.384591] ? netlink_ack+0xab0/0xab0 [ 886.385155] ? netlink_deliver_tap+0x1c4/0xcc0 [ 886.385810] ? is_vmalloc_addr+0x7b/0xb0 [ 886.386406] genl_rcv+0x24/0x40 [ 886.386904] netlink_unicast+0x549/0x7f0 [ 886.387522] ? netlink_attachskb+0x870/0x870 [ 886.388072] netlink_sendmsg+0x90f/0xdf0 [ 886.388569] ? netlink_unicast+0x7f0/0x7f0 [ 886.389091] ? netlink_unicast+0x7f0/0x7f0 [ 886.389651] __sock_sendmsg+0x154/0x190 [ 886.390137] ____sys_sendmsg+0x70d/0x870 [ 886.390665] ? sock_write_iter+0x3d0/0x3d0 [ 886.391175] ? do_recvmmsg+0x6d0/0x6d0 [ 886.391953] ? lock_downgrade+0x6d0/0x6d0 [ 886.393026] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 886.394390] ___sys_sendmsg+0xf3/0x170 [ 886.394734] FAULT_INJECTION: forcing a failure. [ 886.394734] name failslab, interval 1, probability 0, space 0, times 0 [ 886.395424] ? sendmsg_copy_msghdr+0x160/0x160 [ 886.395446] ? __fget_files+0x2cf/0x520 [ 886.395477] ? lock_downgrade+0x6d0/0x6d0 [ 886.400027] ? find_held_lock+0x2c/0x110 [ 886.400533] ? __fget_files+0x2f8/0x520 [ 886.401026] ? __fget_light+0xea/0x290 [ 886.401507] __sys_sendmsg+0xe5/0x1b0 [ 886.401973] ? __sys_sendmsg_sock+0x40/0x40 [ 886.402515] ? rcu_read_lock_any_held+0x75/0xa0 [ 886.403128] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.403812] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.404433] ? trace_hardirqs_on+0x5b/0x180 [ 886.404956] do_syscall_64+0x33/0x40 [ 886.405405] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.406021] RIP: 0033:0x7f0f5aca2b19 [ 886.406475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.408788] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.409711] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 886.410606] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 886.411518] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.412377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.413239] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 886.414132] CPU: 1 PID: 6788 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 886.414975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 886.416034] Call Trace: [ 886.416363] dump_stack+0x107/0x167 [ 886.416803] should_fail.cold+0x5/0xa [ 886.417265] ? __lock_acquire+0x1657/0x5b00 [ 886.417792] ? create_object.isra.0+0x3a/0xa20 [ 886.418359] should_failslab+0x5/0x20 [ 886.418872] kmem_cache_alloc+0x5b/0x310 [ 886.419369] create_object.isra.0+0x3a/0xa20 [ 886.419971] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 886.420586] kmem_cache_alloc+0x159/0x310 [ 886.421093] ? ip6_route_output_flags_noref+0x310/0x310 [ 886.421737] dst_alloc+0x9e/0x5d0 [ 886.422160] ip6_dst_alloc+0x2e/0x110 [ 886.422619] icmp6_dst_alloc+0x6d/0x650 [ 886.423104] ndisc_send_skb+0x11fe/0x1860 [ 886.423659] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 886.424298] ? ndisc_redirect_rcv+0x5b0/0x5b0 [ 886.424842] ? trace_hardirqs_on+0x5b/0x180 [ 886.425375] ? __alloc_skb+0x388/0x5b0 [ 886.425845] ? memcpy+0x39/0x60 [ 886.426256] ndisc_send_ns+0x3a9/0x860 [ 886.426730] ? pndisc_redo+0x20/0x20 [ 886.427191] ndisc_solicit+0x2cd/0x470 [ 886.428030] ? ndisc_send_ns+0x860/0x860 [ 886.428641] ? __skb_clone+0x586/0x770 [ 886.429862] ? ndisc_send_ns+0x860/0x860 [ 886.430488] neigh_probe+0xc4/0x110 [ 886.431397] __neigh_event_send+0x37c/0x1270 [ 886.432544] neigh_resolve_output+0x508/0x7f0 [ 886.433701] ? ip6_mtu+0x1bb/0x3d0 [ 886.434628] ip6_finish_output2+0xb23/0x1cf0 [ 886.435743] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 886.436999] ip6_output+0x3b8/0x7e0 [ 886.437924] ip6_local_out+0xb4/0x1a0 [ 886.438900] ip6_send_skb+0x112/0x460 [ 886.439880] udp_v6_send_skb+0x7aa/0x15b0 [ 886.440928] udpv6_sendmsg+0x2116/0x2ad0 [ 886.441991] ? ip_frag_init+0x350/0x350 [ 886.442981] ? udp_v6_push_pending_frames+0x360/0x360 [ 886.444299] ? _down_write_nest_lock+0x160/0x160 [ 886.445482] ? vmacache_update+0xce/0x140 [ 886.446600] ? do_user_addr_fault+0x5b0/0xc60 [ 886.447770] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 886.449095] ? asm_exc_page_fault+0x1e/0x30 [ 886.450216] ? sock_has_perm+0x1ea/0x280 [ 886.451261] ? __import_iovec+0x458/0x590 [ 886.451880] ? udp_v6_push_pending_frames+0x360/0x360 [ 886.452508] inet6_sendmsg+0x105/0x140 [ 886.452979] ? inet6_compat_ioctl+0x320/0x320 [ 886.453523] __sock_sendmsg+0xf2/0x190 [ 886.453995] ____sys_sendmsg+0x334/0x870 [ 886.454490] ? sock_write_iter+0x3d0/0x3d0 [ 886.455000] ? do_recvmmsg+0x6d0/0x6d0 [ 886.455518] ? mark_lock+0xf5/0x2df0 [ 886.456643] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 886.458228] ? __lock_acquire+0x1657/0x5b00 [ 886.459525] ___sys_sendmsg+0xf3/0x170 [ 886.460701] ? sendmsg_copy_msghdr+0x160/0x160 [ 886.462135] ? __fget_files+0x2cf/0x520 [ 886.463348] ? lock_downgrade+0x6d0/0x6d0 [ 886.464624] ? lock_downgrade+0x6d0/0x6d0 [ 886.465925] ? __fget_files+0x2f8/0x520 [ 886.467122] ? __fget_light+0xea/0x290 [ 886.468312] __sys_sendmmsg+0x195/0x470 [ 886.469511] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 886.470854] ? lock_downgrade+0x6d0/0x6d0 [ 886.472123] ? __mutex_unlock_slowpath+0xe1/0x600 [ 886.473582] ? wait_for_completion_io+0x270/0x270 [ 886.475037] ? rcu_read_lock_any_held+0x75/0xa0 [ 886.476478] ? vfs_write+0x354/0xb10 [ 886.477604] ? fput_many+0x2f/0x1a0 [ 886.478693] ? ksys_write+0x1a9/0x260 [ 886.479858] ? __ia32_sys_read+0xb0/0xb0 [ 886.481091] __x64_sys_sendmmsg+0x99/0x100 [ 886.482372] ? syscall_enter_from_user_mode+0x1d/0x50 [ 886.484014] do_syscall_64+0x33/0x40 [ 886.485142] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 886.486689] RIP: 0033:0x7fbfd48dcb19 [ 886.487632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 886.492314] RSP: 002b:00007fbfd1e10188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 886.494163] RAX: ffffffffffffffda RBX: 00007fbfd49f00e0 RCX: 00007fbfd48dcb19 [ 886.495711] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 886.496566] RBP: 00007fbfd1e101d0 R08: 0000000000000000 R09: 0000000000000000 [ 886.497472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 886.498356] R13: 00007ffe760c114f R14: 00007fbfd1e10300 R15: 0000000000022000 [ 886.503040] loop2: detected capacity change from 0 to 2048 [ 886.556944] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 886.577241] loop2: detected capacity change from 0 to 2048 [ 886.582050] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities 13:38:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:27 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x0, 0xb7}, 0x43a40, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = syz_open_dev$vcsu(0x0, 0x200, 0x8000) sendfile(0xffffffffffffffff, r1, &(0x7f0000000080)=0xfffffffffffffff7, 0x1ff) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/55) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 13:38:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 899.919457] FAULT_INJECTION: forcing a failure. [ 899.919457] name failslab, interval 1, probability 0, space 0, times 0 [ 899.920894] CPU: 1 PID: 6806 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 899.921719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.922771] Call Trace: [ 899.923129] dump_stack+0x107/0x167 [ 899.923571] should_fail.cold+0x5/0xa [ 899.924054] ? __alloc_skb+0x6d/0x5b0 [ 899.924518] should_failslab+0x5/0x20 [ 899.924984] kmem_cache_alloc_node+0x55/0x330 [ 899.925528] __alloc_skb+0x6d/0x5b0 [ 899.925972] ? genl_rcv_msg+0x33c/0x5a0 [ 899.926458] netlink_ack+0x1ed/0xab0 [ 899.926919] ? nl80211_join_ocb+0x160/0x160 [ 899.927491] ? netlink_sendmsg+0xdf0/0xdf0 [ 899.928049] ? lock_release+0x680/0x680 [ 899.928530] ? netlink_deliver_tap+0xf4/0xcc0 [ 899.929082] netlink_rcv_skb+0x348/0x430 [ 899.929575] ? genl_get_cmd+0x480/0x480 [ 899.930057] ? netlink_ack+0xab0/0xab0 [ 899.930538] ? netlink_deliver_tap+0x1c4/0xcc0 [ 899.931094] ? is_vmalloc_addr+0x7b/0xb0 [ 899.931588] genl_rcv+0x24/0x40 [ 899.932007] netlink_unicast+0x549/0x7f0 [ 899.932506] ? netlink_attachskb+0x870/0x870 [ 899.933058] netlink_sendmsg+0x90f/0xdf0 [ 899.933558] ? netlink_unicast+0x7f0/0x7f0 [ 899.934118] ? netlink_unicast+0x7f0/0x7f0 [ 899.934648] __sock_sendmsg+0x154/0x190 [ 899.935137] ____sys_sendmsg+0x70d/0x870 [ 899.935646] ? sock_write_iter+0x3d0/0x3d0 [ 899.936159] ? do_recvmmsg+0x6d0/0x6d0 [ 899.936635] ? lock_downgrade+0x6d0/0x6d0 [ 899.937141] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 899.937784] ___sys_sendmsg+0xf3/0x170 [ 899.938308] ? sendmsg_copy_msghdr+0x160/0x160 [ 899.938877] ? __fget_files+0x2cf/0x520 [ 899.939388] ? lock_downgrade+0x6d0/0x6d0 [ 899.939902] ? find_held_lock+0x2c/0x110 [ 899.940405] ? __fget_files+0x2f8/0x520 [ 899.940894] ? __fget_light+0xea/0x290 [ 899.941380] __sys_sendmsg+0xe5/0x1b0 [ 899.941842] ? __sys_sendmsg_sock+0x40/0x40 [ 899.942366] ? rcu_read_lock_any_held+0x75/0xa0 [ 899.942948] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 899.943584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 899.944230] ? trace_hardirqs_on+0x5b/0x180 [ 899.944755] do_syscall_64+0x33/0x40 [ 899.945210] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 899.945827] RIP: 0033:0x7f0f5aca2b19 [ 899.946276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 899.948435] FAULT_INJECTION: forcing a failure. [ 899.948435] name failslab, interval 1, probability 0, space 0, times 0 [ 899.948556] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.950827] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 899.951702] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 899.952610] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 899.953506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 899.954368] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 899.955254] CPU: 0 PID: 6815 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 899.960029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 899.961108] Call Trace: [ 899.961428] dump_stack+0x107/0x167 [ 899.961872] should_fail.cold+0x5/0xa [ 899.962343] ? dst_cow_metrics_generic+0x48/0x1f0 [ 899.962930] should_failslab+0x5/0x20 [ 899.963391] kmem_cache_alloc_trace+0x55/0x320 [ 899.967982] dst_cow_metrics_generic+0x48/0x1f0 [ 899.968595] icmp6_dst_alloc+0x499/0x650 [ 899.969125] ndisc_send_skb+0x11fe/0x1860 [ 899.969626] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 899.970272] ? ndisc_redirect_rcv+0x5b0/0x5b0 [ 899.970816] ? trace_hardirqs_on+0x5b/0x180 [ 899.971350] ? __alloc_skb+0x388/0x5b0 [ 899.971840] ? memcpy+0x39/0x60 [ 899.972249] ndisc_send_ns+0x3a9/0x860 [ 899.972727] ? pndisc_redo+0x20/0x20 [ 899.973200] ndisc_solicit+0x2cd/0x470 [ 899.973675] ? ndisc_send_ns+0x860/0x860 [ 899.974165] ? __skb_clone+0x586/0x770 [ 899.974647] ? ndisc_send_ns+0x860/0x860 [ 899.975140] neigh_probe+0xc4/0x110 [ 899.975581] __neigh_event_send+0x37c/0x1270 [ 899.976146] neigh_resolve_output+0x508/0x7f0 [ 899.976691] ? ip6_mtu+0x1bb/0x3d0 [ 899.977129] ip6_finish_output2+0xb23/0x1cf0 [ 899.977674] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 899.978286] ip6_output+0x3b8/0x7e0 [ 899.978737] ip6_local_out+0xb4/0x1a0 [ 899.979248] ip6_send_skb+0x112/0x460 [ 899.979733] udp_v6_send_skb+0x7aa/0x15b0 [ 899.980275] udpv6_sendmsg+0x2116/0x2ad0 [ 899.980773] ? ip_frag_init+0x350/0x350 [ 899.981267] ? udp_v6_push_pending_frames+0x360/0x360 [ 899.981896] ? _down_write_nest_lock+0x160/0x160 [ 899.982475] ? vmacache_update+0xce/0x140 [ 899.982986] ? do_user_addr_fault+0x5b0/0xc60 [ 899.983573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 899.984263] ? asm_exc_page_fault+0x1e/0x30 [ 899.984787] ? sock_has_perm+0x1ea/0x280 [ 899.985301] ? __import_iovec+0x458/0x590 [ 899.985805] ? udp_v6_push_pending_frames+0x360/0x360 [ 899.986438] inet6_sendmsg+0x105/0x140 [ 899.986912] ? inet6_compat_ioctl+0x320/0x320 [ 899.987500] __sock_sendmsg+0xf2/0x190 [ 899.992022] ____sys_sendmsg+0x334/0x870 [ 899.992524] ? sock_write_iter+0x3d0/0x3d0 [ 899.993034] ? do_recvmmsg+0x6d0/0x6d0 [ 899.993511] ? mark_lock+0xf5/0x2df0 [ 899.993963] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 899.994595] ? __lock_acquire+0x1657/0x5b00 [ 899.995137] ___sys_sendmsg+0xf3/0x170 [ 899.995656] ? sendmsg_copy_msghdr+0x160/0x160 [ 899.996254] ? __fget_files+0x2cf/0x520 [ 899.996735] ? lock_downgrade+0x6d0/0x6d0 [ 899.997241] ? lock_downgrade+0x6d0/0x6d0 [ 899.997748] ? __fget_files+0x2f8/0x520 [ 899.998240] ? __fget_light+0xea/0x290 [ 899.998720] __sys_sendmmsg+0x195/0x470 [ 899.999209] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 899.999746] ? lock_downgrade+0x6d0/0x6d0 [ 900.000312] ? __mutex_unlock_slowpath+0xe1/0x600 [ 900.000906] ? wait_for_completion_io+0x270/0x270 [ 900.001523] ? rcu_read_lock_any_held+0x75/0xa0 [ 900.002084] ? vfs_write+0x354/0xb10 [ 900.002535] ? fput_many+0x2f/0x1a0 [ 900.002977] ? ksys_write+0x1a9/0x260 [ 900.003439] ? __ia32_sys_read+0xb0/0xb0 [ 900.003954] __x64_sys_sendmmsg+0x99/0x100 [ 900.004517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.005171] do_syscall_64+0x33/0x40 [ 900.005623] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.006243] RIP: 0033:0x7fbfd48dcb19 [ 900.006695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.008993] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.009947] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 900.010812] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 900.015749] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.016648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.017515] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:38:27 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@link_local={0x11}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp={0x44, 0x2c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 13:38:27 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB="ce6e6b903f844ddea00bbaab9848e023655a42908d26f56edb942602e802260b797faccda9d114b9034db774f807394a99f57edd80d3a631ee9d4d90e74ab75ed6fd0cfa3e510cb5cb1a2cd6f5b1950fa942a74ecbf7fd420b8c2168914ef47bfdce6efb1e3a0ed88561d52f25542fe1fed339e76ec46def6733d491575beb935ea3868666783a03334a680d30a0bb2092e27f4cf213aac366f7aadbf0417c206eb5852af2e4a482bce2ae7db03661f6ea5c25a9974c53717cb9293ae9d7902bf7f67cb09fd0c4ea90b54fb2b9d8b6e808c3088df602", @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c0000000000000000000000000000000000000000000000b6683e5a1a503f9cfd1d998d40f0bdfa70054f327fe409ea7ce456e4f1eec8710ea6b9735944d4f972b8c59fda5800e621a9ad"]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) listen(r1, 0xfffffeff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000240)) sendmsg$nl_generic(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x2e4, 0x33, 0x800, 0x70bd26, 0x25dfdbfc, {0x1b}, [@nested={0x1e3, 0x76, 0x0, 0x1, [@typed={0xd9, 0x79, 0x0, 0x0, @binary="52ae5a0e0ab186d3ffa552aa1cee406a264d0bf524eb4779597a5e5aaf98fc98e2e4dc15182dca8375f422c22f6c6ad0bcd0e75a2eaadf5cf49414bce18d32a0bb62f1e6587536bd6f076fc42a370ecc5ee0989597c4cdfb922d2ff62bd469d575cadc6b06f38f64f0b3484e2812711cb43e59943e437066bc6617213e8f623756d4bb4b810bbaad03b1dd25211dd890c7542f4c0aee57b144f5d2a9f1db31d97dfad82ca695d7028c19b0d9c134e0454a7a9b0a967bb950581648675611e0b94986a98b01f5efec0ee0b945557343b9f18058e9fa"}, @typed={0x4, 0x75}, @typed={0x8, 0x3fff, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic, @generic="506a406c5420e0db62c149c114ff5437b7458aef076bc4ed6dc3b8c2a7b3c36b21", @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x8}, @generic="222a6114ecccbc3758939fd97cca5b4a204abdda43c878da25d0f395b96b5e269137f5f37b14c1f47865b393be46cb3e4b39171676e3b95edf493d1289915e4a129c7d276d727a3538c067f62601ca63cb94fe2ae81bd3df6e74a399881efaa223185ec7425ef7b393145f680b8a897b777a01e15c53cb1062dacbdf3ab0f5dcb758008628e0a551b481a54b0a08f6f5c850700f483067a41bf18837ab5ab36ed4c25ae1cd58e4425d0b22d6319446d4df013a40e4d1f6861fb3c72c1281c780e712490ab22b"]}, @nested={0xec, 0x2c, 0x0, 0x1, [@generic="1a816a45717bad0664edf4da726b149927e8519f322571e0a9b04644b9f51ba33070eaa6f7264239ef99eb1f2750d3d6a6bb00f728ab4d851389b24d4a92bac14f8d4f8c1fc6a88f7f3c252a354e04f65ba2f3dc436da06b30447ad91128a2ede192c1a8668803ef0ac9eb1b8ea7576d2e77dc565ef35f7a40704b67d8b54f5860cf64c1ea0b17a4ccf5e9e4edc35a4ed92a8602cbfbff36c8dbda47e66911acb2df3e89761058f0ed0b75cd082b97e8ab1f13f4e105825dbe32c52974e9290a573bca5ebdb89480bc3253384a8064a580eaef4d539536916a8665e7b9a9228aa3a196b596d2044a"]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x40801}, 0x8b0) ioctl(r1, 0x4, &(0x7f0000000000)="3eeb4c7ec2cdc2147cf8a99a4257c6751e2489e225637e546a02e4cac7c53a917fd368b65c7ab53d163fd0de0d0ea7ac9d8aff281682b774c1d187dbac8200eb195236ff263828bb8a4a9e94577867aba78cec5a4d6c7772c316c42596fea018e64d28ebfb4059de44818abd6b056efaf85012e3fd7d34fc3b7c6a1e2faf5197f4a46ebe230c941d27d1e86159bd7d130f9c73f5d857c44cedb33c98733179d006e8ecd7066b751d49d97e916679881f0f") dup2(r3, r0) 13:38:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 10) 13:38:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 14) dup2(r0, r1) 13:38:27 executing program 6: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x151800, 0x22, 0x2}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x52, 0x101}, 0x14}}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000140)) r3 = syz_io_uring_complete(r2) faccessat2(r3, &(0x7f00000001c0)='./file0\x00', 0x160, 0x300) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x15f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0402000000000000002506f7ffff07003cf28e4aa64b61cf0f0249609700490a000008002c000400000008002b00810000000000b40400001bec3a5d08ca421c8bea780a00090030d345e5a8c9e41317003c000000000008000b00000000396a5869aafd984c067f2d44043bc9b762f64e136905b6433f4a899d9e18dd4d384c3882880733d7279fa0ee841fc4498f9d4dab32af5765688cb0796c282164351e35aa09635bee394b8a03e1f00a67bbb94c974b74c3c2e6e918ad5287abc5d769febcc245f9f86375ae0db22aafc212eb4ccd8de6987f2d9a82f455e4f56eba770c0beef1d09707d0af"], 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') pread64(r5, &(0x7f00000001c0)=""/122, 0x7a, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001800090100001c9d7e196a51317d0000000000000ac6000008000000000000009671b1be365293c801aca38a66d4fbde0d2c580868f0da68caa797f1549d199114b6623f986e7e7b6f17419ba6a1dec25944"], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, 0x0, 0x0) r7 = creat(&(0x7f0000000200)='./file0\x00', 0x3c) r8 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r8, 0x200, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000010) 13:38:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 11) 13:38:27 executing program 7: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x800) r2 = dup(r1) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ff020000ed08000300", @ANYRES32=r3, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x84, 0x20, 0x80, 0x1, 0x0, 0x0, 0x21060, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xa3, 0x3}, 0x200, 0xae, 0x1ff, 0x8, 0x2, 0x10000, 0xcd22, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xfffffffffffffffe}, 0x2000c011) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x7dab) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000040)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) vmsplice(r5, &(0x7f0000000480)=[{&(0x7f0000000380)="9107ad859038d3edddff94ec67f67291a21822c778aef1d8441082a48d48d808df993ffcc372f82b65ff8749dfaadc08e2c9f41cca3184dc56638ca6b0aa96a3a5a6b54ece6cd5fb30d28bf500d4a03c444f61a583e14791b720372f33e5a05b2f8a5d1cd243dc49d96b2a0cadee02ee5edab6d4578a423bf5b774c0ec8154914194c39f2e845252dfab3480616352c748fff638d142beb540d24c466ed0b185f62085a8dea89c400f9ffa052f68e63b98d42073d2f687e124d378b8b3ea92ccc895c80f371f2cf20038f44c2914ef9a8f", 0xd1}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 900.057529] FAULT_INJECTION: forcing a failure. [ 900.057529] name failslab, interval 1, probability 0, space 0, times 0 [ 900.058939] CPU: 1 PID: 6826 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 900.059799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.060802] Call Trace: [ 900.061127] dump_stack+0x107/0x167 [ 900.061574] should_fail.cold+0x5/0xa [ 900.062038] ? create_object.isra.0+0x3a/0xa20 [ 900.062642] should_failslab+0x5/0x20 [ 900.063106] kmem_cache_alloc+0x5b/0x310 [ 900.063633] create_object.isra.0+0x3a/0xa20 [ 900.064181] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 900.064805] __kmalloc+0x16e/0x390 [ 900.065250] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 900.066074] genl_family_rcv_msg_doit+0xda/0x330 [ 900.066686] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 900.067504] ? cap_capable+0x1cd/0x230 [ 900.067998] ? security_capable+0x95/0xc0 [ 900.068511] ? ns_capable+0xe2/0x110 [ 900.068976] genl_rcv_msg+0x33c/0x5a0 [ 900.069454] ? genl_get_cmd+0x480/0x480 [ 900.069947] ? nl80211_join_ocb+0x160/0x160 [ 900.070486] ? lock_release+0x680/0x680 [ 900.070969] ? netlink_deliver_tap+0xf4/0xcc0 [ 900.071521] netlink_rcv_skb+0x14b/0x430 [ 900.072036] ? genl_get_cmd+0x480/0x480 [ 900.072566] ? netlink_ack+0xab0/0xab0 [ 900.073047] ? netlink_deliver_tap+0x1c4/0xcc0 [ 900.073615] ? is_vmalloc_addr+0x7b/0xb0 [ 900.074110] genl_rcv+0x24/0x40 [ 900.074510] netlink_unicast+0x549/0x7f0 [ 900.075008] ? netlink_attachskb+0x870/0x870 [ 900.075597] netlink_sendmsg+0x90f/0xdf0 [ 900.076121] ? netlink_unicast+0x7f0/0x7f0 [ 900.076675] ? netlink_unicast+0x7f0/0x7f0 [ 900.077188] __sock_sendmsg+0x154/0x190 [ 900.077672] ____sys_sendmsg+0x70d/0x870 [ 900.078167] ? sock_write_iter+0x3d0/0x3d0 [ 900.078678] ? do_recvmmsg+0x6d0/0x6d0 [ 900.079155] ? lock_downgrade+0x6d0/0x6d0 [ 900.079728] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 900.080399] ___sys_sendmsg+0xf3/0x170 [ 900.080871] ? sendmsg_copy_msghdr+0x160/0x160 [ 900.081429] ? __fget_files+0x2cf/0x520 [ 900.081910] ? lock_downgrade+0x6d0/0x6d0 [ 900.082418] ? find_held_lock+0x2c/0x110 [ 900.082922] ? __fget_files+0x2f8/0x520 [ 900.083459] ? __fget_light+0xea/0x290 [ 900.083958] __sys_sendmsg+0xe5/0x1b0 [ 900.084447] ? __sys_sendmsg_sock+0x40/0x40 [ 900.084969] ? rcu_read_lock_any_held+0x75/0xa0 [ 900.085551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.086188] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.086863] ? trace_hardirqs_on+0x5b/0x180 [ 900.087396] do_syscall_64+0x33/0x40 [ 900.087868] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.088489] RIP: 0033:0x7f0f5aca2b19 [ 900.088936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.091220] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.092174] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 900.093037] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 900.093900] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.094813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.095721] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 13:38:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:38:27 executing program 6: add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a5480900000000000000dac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0x0) r0 = getegid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x5805, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setresgid(r0, r0, r0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[], 0x8) r2 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r2, &(0x7f0000ffc000/0x1000)=nil, 0x5000) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x2) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="10", 0xffd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="7f", 0x1}], 0x1}}], 0x28, 0x8080) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000480)) sendmsg$inet6(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x426e70380c1aadd5) r3 = request_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\xf7{]&\x00', 0x0) unshare(0x48020200) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "9534b98380ff17c266d9bd44260337f337aa5713bfb47b1931f464b2d23164e151aa7637cdeb05320825fc3a162d93c5c3022a514f5494dcc593405c5cfb59f7", 0x20}, 0x48, r3) setsockopt$inet6_IPV6_PKTINFO(r4, 0x29, 0x1a, 0x0, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000280)=0xc) 13:38:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:27 executing program 7: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x7, 0x5}}}}}}, 0x0) 13:38:27 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:38:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 12) [ 900.297634] FAULT_INJECTION: forcing a failure. [ 900.297634] name failslab, interval 1, probability 0, space 0, times 0 [ 900.299192] CPU: 1 PID: 6849 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 900.304052] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 900.305043] Call Trace: [ 900.305364] dump_stack+0x107/0x167 [ 900.305803] should_fail.cold+0x5/0xa [ 900.306266] should_failslab+0x5/0x20 [ 900.306746] __kmalloc_node_track_caller+0x74/0x3b0 [ 900.307370] ? netlink_ack+0x1ed/0xab0 [ 900.307888] __alloc_skb+0xb1/0x5b0 [ 900.308333] netlink_ack+0x1ed/0xab0 [ 900.308796] ? nl80211_join_ocb+0x160/0x160 [ 900.309316] ? netlink_sendmsg+0xdf0/0xdf0 [ 900.309832] ? lock_release+0x680/0x680 [ 900.310311] ? netlink_deliver_tap+0xf4/0xcc0 [ 900.310903] netlink_rcv_skb+0x348/0x430 [ 900.311400] ? genl_get_cmd+0x480/0x480 [ 900.311929] ? netlink_ack+0xab0/0xab0 [ 900.312409] ? netlink_deliver_tap+0x1c4/0xcc0 [ 900.312969] ? is_vmalloc_addr+0x7b/0xb0 [ 900.313463] genl_rcv+0x24/0x40 [ 900.313864] netlink_unicast+0x549/0x7f0 [ 900.314361] ? netlink_attachskb+0x870/0x870 [ 900.314913] netlink_sendmsg+0x90f/0xdf0 [ 900.315416] ? netlink_unicast+0x7f0/0x7f0 [ 900.315957] ? netlink_unicast+0x7f0/0x7f0 [ 900.316472] __sock_sendmsg+0x154/0x190 [ 900.316956] ____sys_sendmsg+0x70d/0x870 [ 900.317453] ? sock_write_iter+0x3d0/0x3d0 [ 900.317974] ? do_recvmmsg+0x6d0/0x6d0 [ 900.318455] ? lock_downgrade+0x6d0/0x6d0 [ 900.318965] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 900.319608] ___sys_sendmsg+0xf3/0x170 [ 900.320098] ? sendmsg_copy_msghdr+0x160/0x160 [ 900.320656] ? __fget_files+0x2cf/0x520 [ 900.321149] ? lock_downgrade+0x6d0/0x6d0 [ 900.321658] ? find_held_lock+0x2c/0x110 [ 900.322161] ? __fget_files+0x2f8/0x520 [ 900.322651] ? __fget_light+0xea/0x290 [ 900.323131] __sys_sendmsg+0xe5/0x1b0 [ 900.323592] ? __sys_sendmsg_sock+0x40/0x40 [ 900.328144] ? rcu_read_lock_any_held+0x75/0xa0 [ 900.328723] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 900.329357] ? syscall_enter_from_user_mode+0x1d/0x50 [ 900.329988] ? trace_hardirqs_on+0x5b/0x180 [ 900.330516] do_syscall_64+0x33/0x40 [ 900.330971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 900.331590] RIP: 0033:0x7f0f5aca2b19 [ 900.332105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 900.334341] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.335267] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 900.336154] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 900.337023] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 900.337886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 900.338752] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 13:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:41 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', <r3=>0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x820000, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r7, 0x80087601, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r8=>0x0}) sendmmsg$inet(r5, &(0x7f00000035c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0}}, {{&(0x7f0000001140)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @loopback}}}], 0x20}}], 0x2, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000100)={@mcast2, 0x18, r8}) fdatasync(0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 914.435507] FAULT_INJECTION: forcing a failure. [ 914.435507] name failslab, interval 1, probability 0, space 0, times 0 [ 914.437012] CPU: 1 PID: 6865 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 914.437866] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.438863] Call Trace: [ 914.439188] dump_stack+0x107/0x167 [ 914.439629] should_fail.cold+0x5/0xa [ 914.440114] ? create_object.isra.0+0x3a/0xa20 [ 914.440666] should_failslab+0x5/0x20 [ 914.441122] kmem_cache_alloc+0x5b/0x310 [ 914.441611] create_object.isra.0+0x3a/0xa20 [ 914.442139] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.442763] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 914.443377] ? netlink_ack+0x1ed/0xab0 [ 914.443877] __alloc_skb+0xb1/0x5b0 [ 914.444323] netlink_ack+0x1ed/0xab0 [ 914.444778] ? nl80211_join_ocb+0x160/0x160 [ 914.445303] ? netlink_sendmsg+0xdf0/0xdf0 [ 914.445868] ? lock_release+0x680/0x680 [ 914.446386] ? netlink_deliver_tap+0xf4/0xcc0 [ 914.446931] netlink_rcv_skb+0x348/0x430 [ 914.447422] ? genl_get_cmd+0x480/0x480 [ 914.447930] ? netlink_ack+0xab0/0xab0 [ 914.448407] ? netlink_deliver_tap+0x1c4/0xcc0 [ 914.448962] ? is_vmalloc_addr+0x7b/0xb0 [ 914.449498] genl_rcv+0x24/0x40 [ 914.449904] netlink_unicast+0x549/0x7f0 [ 914.450434] ? netlink_attachskb+0x870/0x870 [ 914.450979] netlink_sendmsg+0x90f/0xdf0 [ 914.451478] ? netlink_unicast+0x7f0/0x7f0 [ 914.452014] ? netlink_unicast+0x7f0/0x7f0 [ 914.452537] __sock_sendmsg+0x154/0x190 [ 914.453022] ____sys_sendmsg+0x70d/0x870 [ 914.453551] ? sock_write_iter+0x3d0/0x3d0 [ 914.454060] ? do_recvmmsg+0x6d0/0x6d0 [ 914.454532] ? lock_downgrade+0x6d0/0x6d0 [ 914.455036] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.455675] ___sys_sendmsg+0xf3/0x170 [ 914.456173] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.456778] ? __fget_files+0x2cf/0x520 [ 914.457268] ? lock_downgrade+0x6d0/0x6d0 [ 914.457793] ? find_held_lock+0x2c/0x110 [ 914.458293] ? __fget_files+0x2f8/0x520 [ 914.458780] ? __fget_light+0xea/0x290 [ 914.459258] __sys_sendmsg+0xe5/0x1b0 [ 914.464265] ? __sys_sendmsg_sock+0x40/0x40 [ 914.464820] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.465401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.466039] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.466662] ? trace_hardirqs_on+0x5b/0x180 [ 914.467189] do_syscall_64+0x33/0x40 [ 914.467690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 914.468350] RIP: 0033:0x7f0f5aca2b19 [ 914.468816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:38:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 13) 13:38:41 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:38:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 15) dup2(r0, r1) 13:38:41 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) execve(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'}) faccessat2(r1, &(0x7f00000000c0)='./file0\x00', 0x168, 0x1080) 13:38:41 executing program 7: perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x1000, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = gettid() r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsmount(r5, 0x0, 0x0) [ 914.471052] RSP: 002b:00007f0f58218188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e perf_event_open(0x0, r4, 0xb, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x2000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x7c}) syz_open_procfs(0x0, &(0x7f0000000580)='coredump_filter\x00') rt_sigqueueinfo(0x0, 0x7, &(0x7f0000000500)={0x37, 0xffff, 0x9d3f}) r6 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x1000000000000}, r6, 0x10, 0xffffffffffffffff, 0x0) ptrace(0x10, r6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000040), 0x4) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x6004, @fd, 0x7, 0x0, 0x0, 0xc}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x67ae, 0x0, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x3353, 0xfffffffd, 0x2, &(0x7f0000000100), 0x8) 13:38:41 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}, {0x3}, {0x7, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x1}]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x21c03, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002740), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r7=>0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x0, 0x0, {0xb}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x20}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000800)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'ip6gre0\x00', <r9=>0x0, 0x0, 0x7, 0x1, 0x100, 0x5, @private2, @mcast1, 0x8, 0x40, 0xba0, 0x5}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000a00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x94, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000840) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x2, r1, 0x6, 0x80000}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x464, r3, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x444, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff7, 0x9, 0x8, 0x3, 0x1, 0xda0, 0x400, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x19f5, 0xfff, 0x0, 0x7ff, 0x0, 0x6, 0x3f, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x3, 0x0, 0x101, 0xfffa, 0x400, 0xd44, 0xfff8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x8000, 0x5, 0x3ff, 0x6c3, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x2}, {0x0, 0xa}, {0x3, 0x7}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0xa}, {0x0, 0x1}, {0x7, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x2, 0x7}, {0x5}, {0x7, 0x5}, {0x3}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0x5, 0x3}, {0x7, 0x6}, {0x6}]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x24, 0x24, 0x6c, 0x18]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x2}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x9}, {0x7, 0xa}, {0x4, 0x3}, {0x0, 0x8}, {0x3, 0x8}, {0x3, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x7}, {0x0, 0x5}, {0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x6, 0x7}, {0x7, 0x8}, {0x4, 0x4}, {0x5, 0x3}, {0x0, 0x7}, {0x2, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x6}, {0x1, 0x9}, {0x2, 0x7}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x7}, {0x5, 0x1}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x7}, {0x2, 0x6}, {0x4, 0xa}, {}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x7}, {0x7}, {0x1, 0x7}, {0x3, 0x4}, {0x2, 0x8}, {0x4, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x1, 0x9}, {0x1, 0x1}, {0x7, 0x5}, {0x4, 0x4}, {0x7}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x4, 0xa}, {0x6, 0x8}, {0x5, 0x3}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x6}, {0x0, 0x3}, {0x6}, {0x4, 0x9}, {0x4, 0x6}, {}, {0x4, 0xa}, {0x6, 0x9}, {0x6, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x2, 0x2}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x7}, {0x5, 0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x1b, 0xb, 0x4, 0x3, 0x36, 0x1, 0x10, 0xc, 0x1b, 0x24, 0x36, 0x2, 0x5, 0x18, 0x48, 0x2, 0x1, 0x16, 0x77, 0x18, 0x12, 0x16, 0x1, 0xcda98720ef44240a, 0x1, 0x6c, 0x1b, 0x6, 0x2, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfeff, 0x9, 0x8, 0x1f, 0x8, 0x1, 0x80, 0x8]}}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x1, 0xaeac, 0x1000, 0xdc, 0xf7d, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x4, 0x3, 0x3, 0x200, 0x40, 0x5, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x18, 0xb, 0x6c, 0x5, 0x12, 0x6, 0x48, 0x3, 0x9, 0x6c, 0x4, 0x30, 0x30]}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x6}, {0x1, 0x9}, {0x3, 0x7}, {0x2, 0x1}, {0x7, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x6, 0x8}, {0x1, 0x1}, {0x2, 0x1}, {0x6}, {0x1, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x8}, {0x1, 0x7}, {0x5, 0x4}, {0x0, 0x8}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0xa}, {0x1}, {}, {0x1, 0x5}, {0x7, 0x6}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x1}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x24, 0x2, 0x4, 0x6, 0xc, 0x3, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0x1, 0x7fff, 0x5, 0x6, 0xda, 0xfffb]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x36, 0x24, 0x12, 0x3, 0x16, 0x9, 0xb, 0x14, 0x9, 0x48, 0x2, 0x16, 0x4, 0x2, 0x4, 0x4, 0x24, 0x1, 0x9, 0x6f, 0x30, 0x30, 0x30, 0x1]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x4, 0x1b, 0xb, 0x48, 0x42, 0xb, 0x30, 0x18, 0x24, 0x5, 0x16, 0x12, 0x4, 0x30, 0x7a, 0x5, 0x48, 0x3, 0xb, 0x4, 0xc, 0x6c, 0x5, 0x2, 0x24, 0x30, 0x30, 0x30, 0xc, 0x6]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x3, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x8}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x4, 0x1}, {0x6}, {0x6, 0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x4, 0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x6, 0x8}, {0x3, 0x9}, {0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x5}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x9}, {0x3}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x9}, {0x5}, {0x2, 0x1}, {0x2, 0x4}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x6}, {0x6, 0x2}, {0x2, 0x7}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x3, 0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x8}, {0x0, 0x1}, {0x2, 0xa}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x0, 0x20, 0x7, 0x0, 0x200, 0x238, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfec0, 0xb9f, 0x3, 0x7be, 0xa9a, 0xa4, 0x8000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0xfff, 0x401, 0x20, 0x3ff, 0x1, 0x0, 0x53]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7b2, 0x39, 0x10, 0x5, 0xbf4, 0xa9e6, 0x5a, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x24, 0x1, 0x66, 0x24, 0x2, 0x24, 0x30, 0x12, 0x12, 0x36, 0x48, 0xc, 0x12, 0x6, 0x2, 0xc, 0x30, 0x6b, 0x16, 0xb, 0xb, 0x2, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xbd44, 0x9, 0x64, 0x2c7, 0x5, 0xfffc, 0xa880]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x200, 0xfff9, 0x1ff, 0x81, 0x8000, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1b, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x5, 0x6, 0x2, 0xfff9, 0x100, 0x1]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x1, 0x38c1, 0x1, 0xd, 0x3, 0x7ff, 0x5]}}]}, @NL80211_BAND_5GHZ={0xb8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0xfe00, 0x3ff, 0x5, 0x8, 0x8, 0x4]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x3, 0x6c, 0x3, 0x12, 0x0, 0x5, 0x74, 0x60, 0x3, 0x5, 0x30, 0x48, 0x12, 0x6, 0x2, 0x5, 0x60, 0x5, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x8f1e, 0x8, 0x40, 0x5, 0x400, 0xa0f, 0xfa3e]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x6c, 0x30, 0x5, 0x24, 0x60, 0x30, 0x1, 0x3, 0x4, 0x2]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x1, 0x8}, {0x4, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0x5}, {0x3, 0xa}, {0x0, 0xa}, {0x3, 0x5}, {0x6, 0x1}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x8}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x9}, {0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x9}, {0x1, 0xa}, {0x0, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x2, 0x6}, {0x7, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x5, 0x9}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x5}, {0x2, 0x5}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x3, 0x7}, {0x3, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x5, 0x1}, {0x1, 0x5}, {0x5}, {0x1, 0x7}, {}, {0x7, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x2, 0x3, 0x2]}]}]}]}, 0x464}, 0x1, 0x0, 0x0, 0x4}, 0xc1) [ 914.475962] RAX: ffffffffffffffda RBX: 00007f0f5adb5f60 RCX: 00007f0f5aca2b19 [ 914.480673] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 914.481534] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.482404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.483310] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 914.513639] FAULT_INJECTION: forcing a failure. [ 914.513639] name failslab, interval 1, probability 0, space 0, times 0 13:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 914.515246] CPU: 1 PID: 6875 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 914.524562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.525564] Call Trace: [ 914.525890] dump_stack+0x107/0x167 [ 914.526334] should_fail.cold+0x5/0xa [ 914.526841] ? create_object.isra.0+0x3a/0xa20 [ 914.527401] should_failslab+0x5/0x20 [ 914.527880] kmem_cache_alloc+0x5b/0x310 [ 914.528381] create_object.isra.0+0x3a/0xa20 [ 914.528911] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.529530] kmem_cache_alloc_trace+0x151/0x320 [ 914.530105] dst_cow_metrics_generic+0x48/0x1f0 [ 914.530719] icmp6_dst_alloc+0x499/0x650 [ 914.531245] ndisc_send_skb+0x11fe/0x1860 [ 914.531776] ? __kmalloc_node_track_caller+0x1a6/0x3b0 [ 914.532435] ? ndisc_redirect_rcv+0x5b0/0x5b0 [ 914.532983] ? trace_hardirqs_on+0x5b/0x180 [ 914.533519] ? __alloc_skb+0x388/0x5b0 [ 914.533990] ? memcpy+0x39/0x60 [ 914.534398] ndisc_send_ns+0x3a9/0x860 [ 914.534925] ? pndisc_redo+0x20/0x20 [ 914.535394] ndisc_solicit+0x2cd/0x470 [ 914.535912] ? ndisc_send_ns+0x860/0x860 [ 914.536402] ? __skb_clone+0x586/0x770 [ 914.536881] ? ndisc_send_ns+0x860/0x860 [ 914.537373] neigh_probe+0xc4/0x110 [ 914.537813] __neigh_event_send+0x37c/0x1270 [ 914.538357] neigh_resolve_output+0x508/0x7f0 [ 914.538911] ? ip6_mtu+0x1bb/0x3d0 [ 914.539351] ip6_finish_output2+0xb23/0x1cf0 [ 914.539953] __ip6_finish_output.part.0+0x4f7/0xbc0 [ 914.540563] ip6_output+0x3b8/0x7e0 [ 914.541014] ip6_local_out+0xb4/0x1a0 [ 914.541478] ip6_send_skb+0x112/0x460 [ 914.541944] udp_v6_send_skb+0x7aa/0x15b0 [ 914.542457] udpv6_sendmsg+0x2116/0x2ad0 [ 914.543001] ? ip_frag_init+0x350/0x350 [ 914.543518] ? udp_v6_push_pending_frames+0x360/0x360 [ 914.544209] ? _down_write_nest_lock+0x160/0x160 [ 914.544794] ? vmacache_update+0xce/0x140 [ 914.545306] ? do_user_addr_fault+0x5b0/0xc60 [ 914.545852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.546499] ? asm_exc_page_fault+0x1e/0x30 [ 914.547069] ? sock_has_perm+0x1ea/0x280 [ 914.547621] ? __import_iovec+0x458/0x590 [ 914.552154] ? udp_v6_push_pending_frames+0x360/0x360 [ 914.552783] inet6_sendmsg+0x105/0x140 [ 914.553255] ? inet6_compat_ioctl+0x320/0x320 [ 914.553843] __sock_sendmsg+0xf2/0x190 [ 914.554318] ____sys_sendmsg+0x334/0x870 [ 914.554816] ? sock_write_iter+0x3d0/0x3d0 [ 914.555324] ? do_recvmmsg+0x6d0/0x6d0 [ 914.555811] ? mark_lock+0xf5/0x2df0 [ 914.556293] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.556927] ? __lock_acquire+0x1657/0x5b00 [ 914.557452] ___sys_sendmsg+0xf3/0x170 [ 914.557931] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.558490] ? __fget_files+0x2cf/0x520 [ 914.558970] ? lock_downgrade+0x6d0/0x6d0 [ 914.559480] ? lock_downgrade+0x6d0/0x6d0 [ 914.560006] ? __fget_files+0x2f8/0x520 [ 914.560497] ? __fget_light+0xea/0x290 [ 914.561024] __sys_sendmmsg+0x195/0x470 [ 914.561536] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 914.562070] ? lock_downgrade+0x6d0/0x6d0 [ 914.562591] ? __mutex_unlock_slowpath+0xe1/0x600 [ 914.563178] ? wait_for_completion_io+0x270/0x270 [ 914.563814] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.564382] ? vfs_write+0x354/0xb10 [ 914.564867] ? fput_many+0x2f/0x1a0 [ 914.565308] ? ksys_write+0x1a9/0x260 [ 914.565770] ? __ia32_sys_read+0xb0/0xb0 [ 914.566270] __x64_sys_sendmmsg+0x99/0x100 [ 914.566783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.567405] do_syscall_64+0x33/0x40 [ 914.567883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 914.568522] RIP: 0033:0x7fbfd48dcb19 [ 914.568992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.571218] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 914.572213] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 914.573110] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 914.573970] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.574830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.575728] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 914.603764] kauditd_printk_skb: 6 callbacks suppressed [ 914.603776] audit: type=1326 audit(1740749921.837:283): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d987c2b19 code=0x7ffc0000 13:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:41 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 914.608375] audit: type=1326 audit(1740749921.842:284): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9d987c2b19 code=0x7ffc0000 [ 914.628724] audit: type=1326 audit(1740749921.852:285): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6873 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce9c1d8b19 code=0x0 [ 914.635405] audit: type=1326 audit(1740749921.854:286): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d987c2b19 code=0x7ffc0000 [ 914.639600] audit: type=1326 audit(1740749921.854:287): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6867 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d987c2b19 code=0x7ffc0000 13:38:41 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x40, 0x7, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) r0 = gettid() capget(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000100)) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x1000002e, 0x2, @thr={&(0x7f0000000380)="046d91aabe8b59babf80879a918c2766328ef52030c386efa3c0656393ae2ee7a4b47e9bdde8e8b7c1a281b4dedccef9736d11a8c1303a6714e9969009d05b", &(0x7f00000004c0)="7ae662e921d48f4f924675059336348f18fd2b1bfb69dbe80402f0dd936eb90d84d6c60c1942ceb8a9813193e6941b55cfffa85565946e85b2904d2f4b55bbfa173209483d68863c55ac8834944119f1c1fe23b58d6dae0562abdf5b482d3f97a3c6ed0825b36a39424721099792a397536b185819b1d66895469d69bef92d75d35087540aea5bfa5b6688b47aa974ecc3922ab460f3de490000000000"}}, &(0x7f0000000340)=<r1=>0x0) capset(&(0x7f0000000180)={0x19980330, 0xffffffffffffffff}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0}) clock_gettime(0x0, &(0x7f0000000240)={<r5=>0x0, <r6=>0x0}) timer_settime(r1, 0x1, &(0x7f0000000040)={{r3, r4+60000000}, {r5, r6+10000000}}, &(0x7f0000000300)) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4004095}, 0x4040010) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) lseek(r2, 0xffffffff, 0x902f90f22c7c3cf) read(r2, &(0x7f0000000080)=""/65, 0x41) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 13:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 914.674607] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 914.678340] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) 13:38:41 executing program 6: r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x1, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x441, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000300), 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfe7}) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) 13:38:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) (fail_nth: 14) 13:38:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 914.745841] audit: type=1326 audit(1740749921.979:288): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6892 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d987c2b19 code=0x0 13:38:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 16) dup2(r0, r1) 13:38:42 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 914.788936] FAULT_INJECTION: forcing a failure. [ 914.788936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 914.790717] CPU: 0 PID: 6896 Comm: syz-executor.3 Not tainted 5.10.234 #1 [ 914.791593] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.792642] Call Trace: [ 914.792975] dump_stack+0x107/0x167 [ 914.793423] should_fail.cold+0x5/0xa [ 914.793904] _copy_to_user+0x2e/0x180 [ 914.794374] simple_read_from_buffer+0xcc/0x160 [ 914.794948] proc_fail_nth_read+0x198/0x230 [ 914.795476] ? proc_sessionid_read+0x230/0x230 [ 914.796066] ? security_file_permission+0xb1/0xe0 [ 914.796686] ? proc_sessionid_read+0x230/0x230 [ 914.797274] vfs_read+0x228/0x620 [ 914.797706] ksys_read+0x12d/0x260 [ 914.798140] ? vfs_write+0xb10/0xb10 [ 914.798601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.799240] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.799883] do_syscall_64+0x33/0x40 [ 914.800383] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 914.801041] RIP: 0033:0x7f0f5ac5569c [ 914.801495] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 914.803737] RSP: 002b:00007f0f58218170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.804676] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007f0f5ac5569c [ 914.805587] RDX: 000000000000000f RSI: 00007f0f582181e0 RDI: 0000000000000004 [ 914.806483] RBP: 00007f0f582181d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.806832] FAULT_INJECTION: forcing a failure. [ 914.806832] name failslab, interval 1, probability 0, space 0, times 0 [ 914.807341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.807366] R13: 00007ffcbc82e06f R14: 00007f0f58218300 R15: 0000000000022000 [ 914.811335] CPU: 1 PID: 6902 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 914.812183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 914.813231] Call Trace: [ 914.813553] dump_stack+0x107/0x167 [ 914.814002] should_fail.cold+0x5/0xa [ 914.814468] ? create_object.isra.0+0x3a/0xa20 [ 914.815027] should_failslab+0x5/0x20 [ 914.815491] kmem_cache_alloc+0x5b/0x310 [ 914.816008] create_object.isra.0+0x3a/0xa20 [ 914.816543] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 914.817173] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 914.817797] ? alloc_skb_with_frags+0x92/0x570 [ 914.818393] __alloc_skb+0xb1/0x5b0 [ 914.818839] alloc_skb_with_frags+0x92/0x570 [ 914.819386] sock_alloc_send_pskb+0x7af/0x930 [ 914.819950] ? sk_alloc+0x350/0x350 [ 914.820398] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.821047] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 914.821726] ? lock_chain_count+0x20/0x20 [ 914.822262] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 914.822876] ? ip6_mtu+0x1bb/0x3d0 [ 914.823311] ? lock_downgrade+0x6d0/0x6d0 [ 914.823826] ? ip_frag_init+0x350/0x350 [ 914.824319] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 914.824904] ? ip6_mtu+0x1e9/0x3d0 [ 914.825338] ? ip6_setup_cork+0xfb7/0x1740 [ 914.825854] ip6_make_skb+0x2de/0x4e0 [ 914.826316] ? ip_frag_init+0x350/0x350 [ 914.826804] ? ip_frag_init+0x350/0x350 [ 914.827289] ? ip6_push_pending_frames+0xf0/0xf0 [ 914.827884] ? ip6_dst_hoplimit+0x199/0x440 [ 914.828410] ? lock_downgrade+0x6d0/0x6d0 [ 914.828926] udpv6_sendmsg+0x20d3/0x2ad0 [ 914.829425] ? ip_frag_init+0x350/0x350 [ 914.829916] ? udp_v6_push_pending_frames+0x360/0x360 [ 914.830544] ? lock_chain_count+0x20/0x20 [ 914.831061] ? lock_acquire+0x197/0x470 [ 914.831546] ? find_held_lock+0x2c/0x110 [ 914.832056] ? lock_acquire+0x197/0x470 [ 914.832539] ? find_held_lock+0x2c/0x110 [ 914.833042] ? sock_has_perm+0x1ea/0x280 [ 914.833549] ? __import_iovec+0x458/0x590 [ 914.834054] ? udp_v6_push_pending_frames+0x360/0x360 [ 914.834684] inet6_sendmsg+0x105/0x140 [ 914.835159] ? inet6_compat_ioctl+0x320/0x320 [ 914.835704] __sock_sendmsg+0xf2/0x190 [ 914.836204] ____sys_sendmsg+0x334/0x870 [ 914.836706] ? sock_write_iter+0x3d0/0x3d0 [ 914.837256] ? do_recvmmsg+0x6d0/0x6d0 [ 914.837734] ? find_held_lock+0x2c/0x110 [ 914.838235] ___sys_sendmsg+0xf3/0x170 [ 914.838711] ? sendmsg_copy_msghdr+0x160/0x160 [ 914.839271] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 914.839930] ? _raw_spin_unlock_irq+0x1f/0x30 [ 914.840523] ? trace_hardirqs_on+0x5b/0x180 [ 914.841075] ? _raw_spin_unlock_irq+0x1f/0x30 [ 914.841628] ? finish_task_switch+0x126/0x5d0 [ 914.842170] ? finish_task_switch+0xef/0x5d0 [ 914.842705] ? __switch_to+0x572/0xf70 [ 914.843179] ? __switch_to_asm+0x3a/0x60 [ 914.843672] ? __switch_to_asm+0x34/0x60 [ 914.844218] ? __schedule+0x82c/0x1ea0 [ 914.844711] ? io_schedule_timeout+0x140/0x140 [ 914.845306] __sys_sendmmsg+0x195/0x470 [ 914.845792] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 914.846316] ? lock_downgrade+0x6d0/0x6d0 [ 914.846830] ? __mutex_unlock_slowpath+0xe1/0x600 [ 914.847420] ? wait_for_completion_io+0x270/0x270 [ 914.848037] ? rcu_read_lock_any_held+0x75/0xa0 [ 914.848600] ? vfs_write+0x354/0xb10 [ 914.849055] ? fput_many+0x2f/0x1a0 [ 914.849547] ? ksys_write+0x1a9/0x260 [ 914.850013] ? __ia32_sys_read+0xb0/0xb0 [ 914.850536] __x64_sys_sendmmsg+0x99/0x100 [ 914.851049] ? syscall_enter_from_user_mode+0x1d/0x50 [ 914.851675] do_syscall_64+0x33/0x40 [ 914.852141] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 914.852764] RIP: 0033:0x7fbfd48dcb19 [ 914.853257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 914.855536] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 914.856479] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 914.857393] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 914.858293] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 914.859158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 914.860041] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 915.354550] audit: type=1326 audit(1740749922.588:289): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6873 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce9c1d8b19 code=0x0 [ 915.561607] audit: type=1326 audit(1740749922.795:290): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=6892 comm="syz-executor.6" exe="/syz-executor.6" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d987c2b19 code=0x0 13:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:38:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = dup3(r1, r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r2, &(0x7f0000000100), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x32c) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) signalfd4(r2, &(0x7f0000000140)={[0x7]}, 0x8, 0x80800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_expedited', 0x22902, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x123a00, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[{0x1, 0x0, 0xff, 0xfffff00b}, {0x2, 0x0, 0x0, 0x20000}, {0x74bf, 0x7, 0x4, 0x4}]}, 0xffffffffffffff82) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="08e90200", @ANYBLOB="7c19ad811746236bb443903ea572954b0427a5e0f1323d1c8eb9308a4f1c8428d5663abffc3d81781f1fc29bdccdad185bed164093e9fffe39f6cded05668644eeb230e41422bb76d48048329a8f265afddca36635206ea582579bc3d02a94f6f13107e4bafe558d3197651bff5f6ae1", @ANYBLOB="44000000fbffffffffff0048000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x1ff) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) dup3(0xffffffffffffffff, r4, 0x80000) unshare(0x4a060400) 13:38:56 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000180)={0x0, 0x4, 0x7, 0xff, r3}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r4 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0xe7e, &(0x7f0000000500)={0x0, 0x92e1, 0x2, 0x3, 0x335, 0x0, r4}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000000300), &(0x7f0000000400)) syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, r6}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000000200)=<r7=>0x0, &(0x7f00000002c0)=<r8=>0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r9}}, 0x8) unshare(0x48020200) 13:38:56 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:38:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x8000) r1 = openat(r0, 0x0, 0x441080, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = inotify_init1(0x0) openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x2000003) stat(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}) setuid(r5) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x800, 0x2, &(0x7f00000003c0)=[{&(0x7f0000000180)="5c211a55600d9cc9f7e09d4a39c7b4b69062e6d273a84ba01f96862dc95d9968f3d66b067480b188729f27fed9e6a67c8c312dcf8bb5feabe1e0318f71598d70e5c61f66c3979d2695b1da276ec03711de919de6ff765da02ea3fd6e2dcd1435c31b42e247ae4a7fe4440897ece59cebfc1e97a7abb4cc21ce867cc1eb586dbb2f6b015a7ba7b7d2", 0x88, 0xb58}, {&(0x7f0000000240)="0acfaefe0ddf6128f3dc0b04aba3a95335fa57e11bf5ca4b709820662d80bbea266aeb1b90d172ffc5", 0x29, 0x9e51}], 0x10000, &(0x7f0000000580)=ANY=[@ANYBLOB='subj_type=[!(,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',permit_directio,permit_directio,fsuuid=\x001e1e11b-afc\x00-4c9\x00-0a79-e30bcf71,uid>', @ANYRESDEC=r5, @ANYBLOB=',appraise,audit,euid<', @ANYRESDEC, @ANYBLOB="329e"]) sendfile(r2, r3, 0x0, 0x100000001) lseek(r1, 0x3e740394, 0x4) setxattr$security_selinux(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x3) 13:38:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 17) dup2(r0, r1) 13:38:56 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'}) bind(r0, &(0x7f0000000100)=@in={0x2, 0x4e23, @private=0xa010102}, 0x80) r1 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) getdents64(r1, &(0x7f00000000c0)=""/28, 0x1c) getdents64(r1, &(0x7f00000014c0)=""/124, 0x7c) [ 929.099388] FAULT_INJECTION: forcing a failure. [ 929.099388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.101075] CPU: 0 PID: 6920 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 929.101947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.103018] Call Trace: [ 929.103373] dump_stack+0x107/0x167 [ 929.103851] should_fail.cold+0x5/0xa [ 929.104371] _copy_from_user+0x2e/0x1b0 [ 929.104900] __copy_msghdr_from_user+0x91/0x4b0 [ 929.105495] ? __ia32_sys_shutdown+0x80/0x80 [ 929.106074] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 929.106768] sendmsg_copy_msghdr+0xa1/0x160 [ 929.107333] ? do_recvmmsg+0x6d0/0x6d0 [ 929.107844] ? handle_mm_fault+0x9e9/0x3500 [ 929.108427] ? __lock_acquire+0x1657/0x5b00 [ 929.108991] ? find_held_lock+0x2c/0x110 [ 929.109569] ___sys_sendmsg+0xc6/0x170 [ 929.110113] ? sendmsg_copy_msghdr+0x160/0x160 [ 929.110707] ? vmacache_find+0x55/0x2a0 [ 929.111231] ? do_user_addr_fault+0x5b0/0xc60 [ 929.111820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 929.112510] ? exc_page_fault+0xca/0x1a0 [ 929.113021] ? trace_hardirqs_on+0x5b/0x180 [ 929.113576] ? exc_page_fault+0xca/0x1a0 [ 929.114146] ? asm_exc_page_fault+0x1e/0x30 [ 929.114731] __sys_sendmmsg+0x195/0x470 [ 929.115284] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 929.115843] ? lock_downgrade+0x6d0/0x6d0 [ 929.116422] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.117052] ? wait_for_completion_io+0x270/0x270 [ 929.117677] ? rcu_read_lock_any_held+0x75/0xa0 [ 929.118279] ? vfs_write+0x354/0xb10 [ 929.118760] ? fput_many+0x2f/0x1a0 [ 929.119236] ? ksys_write+0x1a9/0x260 [ 929.119733] ? __ia32_sys_read+0xb0/0xb0 [ 929.120286] __x64_sys_sendmmsg+0x99/0x100 [ 929.120832] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.121503] do_syscall_64+0x33/0x40 [ 929.121989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.122649] RIP: 0033:0x7fbfd48dcb19 [ 929.123176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.125567] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 929.126552] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 929.127469] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 929.128408] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.129328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.130250] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:38:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:38:56 executing program 1: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x0) r2 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) r3 = creat(&(0x7f0000000080)='./file1\x00', 0x18a) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r1) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) ftruncate(r3, 0xfffffffffffffffe) pkey_mprotect(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x8, r1) creat(&(0x7f00000000c0)='./file1\x00', 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mbind(&(0x7f0000fed000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x7, 0xdc, 0x5) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x7, &(0x7f0000ff0000/0x3000)=nil) pkey_mprotect(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x3000002, r1) fcntl$setstatus(r0, 0x4, 0x400) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 13:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:38:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 18) dup2(r0, r1) 13:38:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 929.426772] FAULT_INJECTION: forcing a failure. [ 929.426772] name failslab, interval 1, probability 0, space 0, times 0 [ 929.428389] CPU: 0 PID: 6954 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 929.429276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 929.430340] Call Trace: [ 929.430691] dump_stack+0x107/0x167 [ 929.431165] should_fail.cold+0x5/0xa [ 929.431661] ? __alloc_skb+0x6d/0x5b0 [ 929.432168] should_failslab+0x5/0x20 [ 929.432666] kmem_cache_alloc_node+0x55/0x330 [ 929.433213] ? __lock_acquire+0x1657/0x5b00 [ 929.433735] __alloc_skb+0x6d/0x5b0 [ 929.434179] alloc_skb_with_frags+0x92/0x570 [ 929.434720] sock_alloc_send_pskb+0x7af/0x930 [ 929.435268] ? sk_alloc+0x350/0x350 13:38:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 929.435712] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 929.444396] ? lock_chain_count+0x20/0x20 [ 929.444932] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 929.445598] ? ip6_mtu+0x1bb/0x3d0 [ 929.446107] ? lock_downgrade+0x6d0/0x6d0 [ 929.446673] ? ip_frag_init+0x350/0x350 [ 929.447198] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 929.447813] ? ip6_mtu+0x1e9/0x3d0 [ 929.448289] ? ip6_setup_cork+0xfb7/0x1740 [ 929.448840] ip6_make_skb+0x2de/0x4e0 [ 929.449339] ? ip_frag_init+0x350/0x350 [ 929.449870] ? ip_frag_init+0x350/0x350 [ 929.450386] ? ip6_push_pending_frames+0xf0/0xf0 [ 929.451055] ? ip6_dst_hoplimit+0x199/0x440 [ 929.451648] ? lock_downgrade+0x6d0/0x6d0 [ 929.452230] udpv6_sendmsg+0x20d3/0x2ad0 [ 929.452765] ? ip_frag_init+0x350/0x350 [ 929.453293] ? udp_v6_push_pending_frames+0x360/0x360 [ 929.453959] ? trace_hardirqs_on+0x5b/0x180 [ 929.454523] ? lock_acquire+0x197/0x470 [ 929.455041] ? find_held_lock+0x2c/0x110 [ 929.455577] ? lock_acquire+0x197/0x470 [ 929.456119] ? find_held_lock+0x2c/0x110 [ 929.456666] ? sock_has_perm+0x1ea/0x280 [ 929.457211] ? __import_iovec+0x458/0x590 [ 929.457796] ? udp_v6_push_pending_frames+0x360/0x360 [ 929.458480] inet6_sendmsg+0x105/0x140 [ 929.459006] ? inet6_compat_ioctl+0x320/0x320 [ 929.459598] __sock_sendmsg+0xf2/0x190 [ 929.460126] ____sys_sendmsg+0x334/0x870 [ 929.460658] ? sock_write_iter+0x3d0/0x3d0 [ 929.461202] ? do_recvmmsg+0x6d0/0x6d0 [ 929.461711] ? __lock_acquire+0x1657/0x5b00 [ 929.462275] ___sys_sendmsg+0xf3/0x170 [ 929.462781] ? sendmsg_copy_msghdr+0x160/0x160 [ 929.463390] ? vmacache_find+0x55/0x2a0 [ 929.463924] ? lock_acquire+0x197/0x470 [ 929.464458] ? find_held_lock+0x2c/0x110 [ 929.464989] ? __might_fault+0xd3/0x180 [ 929.465507] ? lock_downgrade+0x6d0/0x6d0 [ 929.466051] ? asm_exc_page_fault+0x1e/0x30 [ 929.466621] __sys_sendmmsg+0x195/0x470 [ 929.467140] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 929.467698] ? lock_downgrade+0x6d0/0x6d0 [ 929.468276] ? __mutex_unlock_slowpath+0xe1/0x600 [ 929.468903] ? wait_for_completion_io+0x270/0x270 [ 929.469537] ? rcu_read_lock_any_held+0x75/0xa0 [ 929.470140] ? vfs_write+0x354/0xb10 [ 929.470629] ? fput_many+0x2f/0x1a0 [ 929.471100] ? ksys_write+0x1a9/0x260 [ 929.471590] ? __ia32_sys_read+0xb0/0xb0 [ 929.476241] __x64_sys_sendmmsg+0x99/0x100 [ 929.476838] ? syscall_enter_from_user_mode+0x1d/0x50 [ 929.477522] do_syscall_64+0x33/0x40 [ 929.478045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 929.478730] RIP: 0033:0x7fbfd48dcb19 [ 929.479220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 929.481636] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 929.482621] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 929.483552] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 929.484497] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 929.485483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 929.486425] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 929.711823] loop2: detected capacity change from 0 to 80896 [ 929.717689] FAT-fs (loop2): Unrecognized mount option "subj_type=[!(" or missing value 13:39:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:39:11 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) setsockopt$inet6_tcp_int(r1, 0x6, 0x7, &(0x7f0000000040)=0x8, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1, 0x0, "ea9bcc8cf4fbaec8058ba111011a970fd411ad3bd71b6cb43d60d5bbf105424939b9da38f4f6199dc10165f06c70fa6c1309c7db19b3b52d286aa94c8ec5c29812b6f5b5213ca740dd57ba05e0d16833"}, 0xd8) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x0) 13:39:11 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="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", 0x4a9, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) perf_event_open(&(0x7f0000001500)={0x5, 0x80, 0x1, 0xfe, 0x8, 0xf4, 0x0, 0x9, 0x809, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f00000014c0), 0x4}, 0x410, 0xe00000000000, 0x6, 0x0, 0x80000001, 0xc38, 0x6, 0x0, 0x10000, 0x0, 0x9}, 0x0, 0xb, r1, 0x2) getpgrp(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x1000, 0x80, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r3, r4, 0x1000) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0xa7c, 0x1, &(0x7f0000000440)=[{&(0x7f0000000400)="0208ad0ceb61aa778acf684e", 0xc, 0x7387bb61}], 0x200c40, &(0x7f0000000480)={[{@huge_within_size}, {@gid={'gid', 0x3d, r4}}, {@huge_within_size}], [{@hash}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioprio_get$pid(0x2, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x84000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r5, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r6, 0x6801, 0x0) 13:39:11 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="80507896b8dd59a881179506090000006e733d2c3a2b20bad80eca3d", @ANYRESHEX, @ANYBLOB='\t\x00\x00\x00']) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) r3 = epoll_create1(0x80000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000009c0)=ANY=[@ANYBLOB="0ab002a9148bdda6ff90b40da6cf852761445e3ab309be7f44cc81e807e660b5d3ebeed594e0439971c0375b8090023d99a0c81e69e262e0ddfa128091b0c69f830f7883525e317e4f67644c41", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) futimesat(0xffffffffffffffff, &(0x7f0000000700)='./file1\x00', &(0x7f00000007c0)) execveat(r1, &(0x7f0000000280)='./file1\x00', &(0x7f00000005c0)=[&(0x7f00000002c0)='cache=mmap', &(0x7f0000000300)='fscontext', &(0x7f0000000440)='cache=mmap', &(0x7f0000000580)='$g\x00'], &(0x7f00000006c0)=[&(0x7f0000000600)='+]\xa1,!\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='&/,,\\\x00'], 0x400) execveat(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='trans=fd,', &(0x7f00000000c0)='cache=loose', &(0x7f0000000140)='fscontext', &(0x7f0000000180)='cache=mmap', &(0x7f0000000240)='$g\xa5e\xb4i\xc3Y\xd4\xa4n\xaa\ry\\r$\x16\xd0\xe27\x00\x00x\x15\xea\xc3,}\x17\xe5V\x8b&\x96\x00'], &(0x7f0000000940)=[&(0x7f0000000380)='h\x00', &(0x7f00000001c0)='9p\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)=']\'\x00'], 0x400) stat(&(0x7f0000000980)='./mnt\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480), 0x115549713482a633, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=unix,rootcontext=system_u,smackfsroot=prefer,fsmagic=0x0000000000000004,uid<', @ANYRESDEC, @ANYBLOB=',dont_measure,fowner>', @ANYRESDEC=r4, @ANYBLOB=',fsmagyc=0x0000001000000006,\x00']) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000400)={r1, 0x0, 0x6, 0x7}) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)={'L+', 0x1}, 0x16, 0x3) r5 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000100)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r5, 0x8000000) 13:39:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 19) dup2(r0, r1) 13:39:11 executing program 6: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x1a, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000240), 0x1, 0x20803) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0xbef4c000) fcntl$dupfd(r2, 0x406, r3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, <r4=>0x0, <r5=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{0x0, <r6=>0x0}, {0x0, <r7=>0x0}, {<r8=>0x0}, {0x0, <r9=>0x0}, {0x0, <r10=>0x0}, {0x0, <r11=>0x0}, {}, {0x0, <r12=>0x0}, {}, {0x0, <r13=>0x0}, {}, {<r14=>0x0, <r15=>0x0}, {}, {}, {0x0, <r16=>0x0}, {}, {0x0, <r17=>0x0}, {}, {0x0, <r18=>0x0}, {}, {<r19=>0x0}, {0x0, <r20=>0x0}, {0x0, <r21=>0x0}, {}, {0x0, <r22=>0x0}, {}, {}, {}, {<r23=>0x0}, {<r24=>0x0, <r25=>0x0}, {}, {}, {<r26=>0x0, <r27=>0x0}, {<r28=>0x0, <r29=>0x0}, {}, {0x0, <r30=>0x0}, {<r31=>0x0}, {}, {}, {}, {<r32=>0x0}, {}, {0x0, <r33=>0x0}, {}, {<r34=>0x0}, {<r35=>0x0}, {0x0, <r36=>0x0}, {0x0, <r37=>0x0}, {}, {}, {}, {<r38=>0x0, <r39=>0x0}, {0x0, <r40=>0x0}, {0x0, <r41=>0x0}, {0x0, <r42=>0x0}, {0x0, <r43=>0x0}, {<r44=>0x0, <r45=>0x0}, {}, {<r46=>0x0, <r47=>0x0}, {}, {0x0, <r48=>0x0}, {}, {0x0, <r49=>0x0}, {}, {<r50=>0x0}, {}, {<r51=>0x0}, {<r52=>0x0}, {}, {}, {<r53=>0x0}, {0x0, <r54=>0x0}, {}, {}, {<r55=>0x0, <r56=>0x0}, {}, {}, {<r57=>0x0, <r58=>0x0}, {}, {}, {}, {<r59=>0x0}, {<r60=>0x0}, {}, {<r61=>0x0}, {<r62=>0x0}, {0x0, <r63=>0x0}, {<r64=>0x0}, {}, {}, {<r65=>0x0}, {}, {}, {<r66=>0x0, <r67=>0x0}, {0x0, <r68=>0x0}, {}, {}, {0x0, <r69=>0x0}, {<r70=>0x0}, {}, {}, {<r71=>0x0}, {}, {<r72=>0x0}, {0x0, <r73=>0x0}, {}, {0x0, <r74=>0x0}, {0x0, <r75=>0x0}, {}, {<r76=>0x0, <r77=>0x0}, {}, {}, {<r78=>0x0}, {0x0, <r79=>0x0}, {<r80=>0x0}, {}, {}, {<r81=>0x0}, {<r82=>0x0}, {<r83=>0x0, <r84=>0x0}, {}, {<r85=>0x0, <r86=>0x0}, {}, {0x0, <r87=>0x0}, {}, {<r88=>0x0, <r89=>0x0}, {}, {0x0, <r90=>0x0}, {}, {<r91=>0x0, <r92=>0x0}, {0x0, <r93=>0x0}, {<r94=>0x0, <r95=>0x0}, {}, {}, {}, {<r96=>0x0, <r97=>0x0}, {}, {}, {<r98=>0x0}, {}, {}, {}, {0x0, <r99=>0x0}, {}, {<r100=>0x0, <r101=>0x0}, {<r102=>0x0, <r103=>0x0}, {}, {<r104=>0x0, <r105=>0x0}, {<r106=>0x0}, {0x0, <r107=>0x0}, {}, {0x0, <r108=>0x0}, {<r109=>0x0}, {}, {0x0, <r110=>0x0}, {<r111=>0x0}, {}, {<r112=>0x0}, {<r113=>0x0}, {}, {}, {}, {}, {<r114=>0x0}, {<r115=>0x0, <r116=>0x0}, {}, {0x0, <r117=>0x0}, {}, {}, {<r118=>0x0}, {0x0, <r119=>0x0}, {}, {<r120=>0x0}, {<r121=>0x0}, {<r122=>0x0}, {}, {<r123=>0x0}, {0x0, <r124=>0x0}, {}, {<r125=>0x0}, {}, {0x0, <r126=>0x0}, {<r127=>0x0, <r128=>0x0}, {<r129=>0x0}, {0x0, <r130=>0x0}, {}, {0x0, <r131=>0x0}, {}, {}, {}, {0x0, <r132=>0x0}, {}, {<r133=>0x0}, {0x0, <r134=>0x0}, {0x0, <r135=>0x0}, {<r136=>0x0}, {<r137=>0x0}, {0x0, <r138=>0x0}, {0x0, <r139=>0x0}, {<r140=>0x0}, {<r141=>0x0}, {0x0, <r142=>0x0}, {}, {}, {<r143=>0x0}, {<r144=>0x0}, {<r145=>0x0, <r146=>0x0}, {0x0, <r147=>0x0}, {0x0, <r148=>0x0}, {}, {0x0, <r149=>0x0}, {}, {}, {}, {0x0, <r150=>0x0}, {0x0, <r151=>0x0}, {<r152=>0x0, <r153=>0x0}, {0x0, <r154=>0x0}, {}, {}, {0x0, <r155=>0x0}, {}, {}, {}, {0x0, <r156=>0x0}, {}, {0x0, <r157=>0x0}, {}, {0x0, <r158=>0x0}, {<r159=>0x0}, {}, {0x0, <r160=>0x0}, {0x0, r5}, {0x0, <r161=>0x0}, {0x0, <r162=>0x0}, {}, {0x0, <r163=>0x0}, {<r164=>0x0}, {<r165=>0x0, <r166=>0x0}, {}, {<r167=>0x0, <r168=>0x0}, {<r169=>0x0, <r170=>0x0}, {}, {<r171=>0x0, <r172=>0x0}, {}, {<r173=>0x0}, {}, {}, {<r174=>0x0, <r175=>0x0}, {0x0, <r176=>0x0}, {<r177=>0x0}, {}, {0x0, <r178=>0x0}, {0x0, <r179=>0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000067380)={0x9e, [{r51}, {}, {0x0, r87}, {r174}, {0x0, r54}, {}, {}, {r51, r139}, {0x0, r69}, {}, {r65, r75}, {0x0, r12}, {r91}, {}, {}, {0x0, r47}, {0x0, r58}, {0x0, r17}, {0x0, r25}, {0x0, r175}, {}, {0x0, r12}, {r164}, {}, {0x0, r107}, {r127, r170}, {}, {}, {}, {0x0, r63}, {}, {0x0, r146}, {0x0, r6}, {}, {0x0, r97}, {0x0, r86}, {r88}, {}, {r100, r16}, {r113}, {r19}, {}, {0x0, r162}, {}, {}, {r152, r42}, {0x0, r6}, {0x0, r36}, {0x0, r163}, {r141}, {r96}, {}, {r4, r41}, {r141, r95}, {r82, r172}, {0x0, r97}, {}, {r133}, {}, {r137, r43}, {r78, r95}, {0x0, r68}, {0x0, r79}, {}, {r26}, {0x0, r103}, {r85, r49}, {0x0, r48}, {0x0, r126}, {0x0, r108}, {}, {}, {r94, r101}, {}, {r66, r37}, {r53}, {}, {r94}, {r118, r10}, {r109}, {}, {}, {r52}, {r8, r73}, {}, {}, {}, {r62}, {}, {r60, r166}, {0x0, r9}, {}, {r115, r116}, {0x0, r138}, {}, {}, {}, {r125}, {0x0, r151}, {r96, r40}, {r143, r27}, {}, {0x0, r142}, {r32, r90}, {}, {r136}, {0x0, r41}, {0x0, r153}, {r165}, {r81}, {}, {}, {0x0, r119}, {r129, r67}, {r167, r179}, {r38, r176}, {0x0, r27}, {}, {0x0, r74}, {}, {}, {}, {r24}, {}, {}, {}, {r70}, {0x0, r160}, {r59}, {}, {}, {0x0, r155}, {0x0, r161}, {}, {}, {0x0, r21}, {0x0, r15}, {}, {r152, r11}, {r122, r20}, {}, {}, {r169}, {0x0, r105}, {0x0, r148}, {0x0, r77}, {0x0, r147}, {r129}, {r23}, {r61}, {r71}, {}, {0x0, r47}, {}, {r57}, {r55, r154}, {0x0, r56}, {}, {}, {0x0, r158}, {}, {r35, r29}, {}, {r98}, {0x0, r150}, {}, {r50}, {}, {r173}, {}, {}, {}, {}, {r145, r128}, {}, {0x0, r134}, {}, {r140, r22}, {0x0, r33}, {r121, r45}, {r24, r84}, {}, {0x0, r13}, {0x0, r39}, {0x0, r89}, {}, {r31, r21}, {r70, r45}, {0x0, r92}, {0x0, r41}, {}, {r64}, {0x0, r18}, {0x0, r69}, {r34, r168}, {}, {}, {r177, r156}, {}, {0x0, r154}, {}, {}, {r46}, {}, {r159}, {}, {r111}, {}, {}, {r72}, {r112, r132}, {0x0, r33}, {r114}, {r104, r110}, {}, {}, {0x0, r117}, {}, {}, {r72}, {r171}, {r123}, {0x0, r131}, {}, {}, {}, {}, {r76, r135}, {}, {}, {0x0, r93}, {r35}, {}, {0x0, r49}, {r28}, {0x0, r178}, {r23, r172}, {0x0, r99}, {0x0, r130}, {0x0, r6}, {r50}, {r129}, {r120}, {r129, r149}, {0x0, r7}, {r14, r124}, {r102}, {}, {r80}, {r106}, {r83, r33}, {r144}, {0x0, r48}, {0x0, r30}, {r44}], 0x7f, "63b75a947eb782"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e380)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r157}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x40, "2aee4ced9c0309"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={<r180=>0x0, ""/256, <r181=>0x0, <r182=>0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={<r183=>0x0, <r184=>0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [{}, {}, {0x0, r182}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r180}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r183}, {}, {}, {}, {}, {}, {}, {}, {}, {r184}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r180}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r184}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r182}, {0x0, r183}, {}, {}, {}, {}, {0x0, r183}, {}, {}, {}, {0x0, r183}, {}, {}, {}, {}, {}, {}, {}, {0x0, r183}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r182}, {}, {r180}, {}, {}, {}, {}, {}, {}, {}, {0x0, r183}, {}, {}, {r184}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r182}, {}, {}, {}, {}, {}, {0x0, r182}, {}, {}, {}, {}, {}, {}, {}, {r180}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r183}, {}, {}, {}, {}, {0x0, r182}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r184}, {r181}], 0x4, "9755154351ac9a"}) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003a00c5d500000000000004000a0002006803f51792af8281ca583f0895e6321cef6b331118ffa3a5bc5b758c90cf4924a9da3a39fcafd018e8dfab23b63c332ae029f596740f51537d78c5e97d2611dca6fb2735a0d77bf01eafe8ed177fdcbc9fb37f7bf5e39490a0e4961c7995bff433070e294ff400000000"], 0x14}}, 0x0) 13:39:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 944.148467] loop7: detected capacity change from 0 to 135266304 13:39:11 executing program 2: flock(0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000300)=""/79, 0x4f) openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0004}, {0x7ff, 0x1, 0x2, 0x6000}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000004c0)={0x0, 0x7ff, 0x81}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000280)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) [ 944.173459] FAULT_INJECTION: forcing a failure. [ 944.173459] name failslab, interval 1, probability 0, space 0, times 0 [ 944.174978] CPU: 1 PID: 6981 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 944.175848] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.178115] Call Trace: [ 944.178446] dump_stack+0x107/0x167 [ 944.178895] should_fail.cold+0x5/0xa [ 944.179372] ? create_object.isra.0+0x3a/0xa20 [ 944.180048] should_failslab+0x5/0x20 [ 944.180668] kmem_cache_alloc+0x5b/0x310 [ 944.181258] ? consume_skb+0x11d/0x2b0 [ 944.181810] ? __neigh_event_send+0x37c/0x1270 [ 944.182455] create_object.isra.0+0x3a/0xa20 [ 944.183084] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.183797] kmem_cache_alloc_node+0x169/0x330 [ 944.184473] __alloc_skb+0x6d/0x5b0 [ 944.184993] alloc_skb_with_frags+0x92/0x570 [ 944.185617] sock_alloc_send_pskb+0x7af/0x930 [ 944.186232] ? sk_alloc+0x350/0x350 [ 944.186679] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 944.187315] ? lock_chain_count+0x20/0x20 [ 944.187824] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 944.188462] ? ip6_mtu+0x1bb/0x3d0 [ 944.188895] ? lock_downgrade+0x6d0/0x6d0 [ 944.189397] ? ip_frag_init+0x350/0x350 [ 944.189882] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 944.190464] ? ip6_mtu+0x1e9/0x3d0 [ 944.190894] ? ip6_setup_cork+0xfb7/0x1740 [ 944.191406] ip6_make_skb+0x2de/0x4e0 [ 944.191863] ? ip_frag_init+0x350/0x350 [ 944.192515] ? ip_frag_init+0x350/0x350 [ 944.192996] ? ip6_push_pending_frames+0xf0/0xf0 [ 944.193575] ? ip6_dst_hoplimit+0x199/0x440 [ 944.194097] ? lock_downgrade+0x6d0/0x6d0 [ 944.194612] udpv6_sendmsg+0x20d3/0x2ad0 [ 944.195107] ? ip_frag_init+0x350/0x350 [ 944.195596] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.196311] ? trace_hardirqs_on+0x5b/0x180 [ 944.196844] ? lock_acquire+0x197/0x470 [ 944.197324] ? find_held_lock+0x2c/0x110 [ 944.197829] ? lock_acquire+0x197/0x470 [ 944.198314] ? find_held_lock+0x2c/0x110 [ 944.198821] ? sock_has_perm+0x1ea/0x280 [ 944.199333] ? __import_iovec+0x458/0x590 [ 944.199837] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.201002] inet6_sendmsg+0x105/0x140 [ 944.201935] ? inet6_compat_ioctl+0x320/0x320 [ 944.203005] __sock_sendmsg+0xf2/0x190 [ 944.203921] ____sys_sendmsg+0x334/0x870 [ 944.205093] ? sock_write_iter+0x3d0/0x3d0 [ 944.206152] ? do_recvmmsg+0x6d0/0x6d0 [ 944.207092] ? handle_mm_fault+0x9e9/0x3500 [ 944.208150] ? __lock_acquire+0x1657/0x5b00 [ 944.209415] ? find_held_lock+0x2c/0x110 [ 944.210385] ___sys_sendmsg+0xf3/0x170 [ 944.211322] ? sendmsg_copy_msghdr+0x160/0x160 [ 944.212338] ? vmacache_find+0x55/0x2a0 [ 944.212833] ? do_user_addr_fault+0x5b0/0xc60 [ 944.213386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 944.214022] ? exc_page_fault+0xca/0x1a0 [ 944.214516] ? trace_hardirqs_on+0x5b/0x180 [ 944.215050] ? exc_page_fault+0xca/0x1a0 [ 944.215555] ? asm_exc_page_fault+0x1e/0x30 [ 944.216115] __sys_sendmmsg+0x195/0x470 [ 944.216639] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 944.217161] ? lock_downgrade+0x6d0/0x6d0 [ 944.217672] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.218256] ? wait_for_completion_io+0x270/0x270 [ 944.218840] ? rcu_read_lock_any_held+0x75/0xa0 [ 944.219400] ? vfs_write+0x354/0xb10 [ 944.219850] ? fput_many+0x2f/0x1a0 [ 944.220325] ? ksys_write+0x1a9/0x260 [ 944.220789] ? __ia32_sys_read+0xb0/0xb0 [ 944.221285] __x64_sys_sendmmsg+0x99/0x100 [ 944.221794] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.222420] do_syscall_64+0x33/0x40 [ 944.222873] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.223494] RIP: 0033:0x7fbfd48dcb19 [ 944.223946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.226209] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.227135] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 944.228002] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 944.228911] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.229778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.230641] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:39:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 944.270334] loop2: detected capacity change from 0 to 16776704 13:39:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 20) dup2(r0, r1) 13:39:11 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r2, {<r6=>0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000080)=0xc0) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000580)=@md5={0x1, "7303148c1dc507aeb9bc7d5695fd6a7c"}, 0x11, 0x1) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="b09456e1cc1abe3be01b5ab628f4f34a9a6cc65a92f9877ae3771e21d09c820335483bdc14c4696a6b7661a1c0cd40bf760bbd9d7976fb11c6db4c32f90d212b2447c78c0bb70e2341b9135a36e3d037b1", 0x51, 0xffffffffffffffff}, {&(0x7f00000003c0)="734392bf111e34ad89833539b8bc9d0c90f5905723c06cb62a77178037bdf869a9e9f9cf93423b1c6c08e00a09fffd1739e62303500b707c15a15ce9cff7d35d67b8f1929ea5dbb86e30efc44374d16ea8b43e80ec4d305a95b6b85adc47c8abfc", 0x61, 0x3e}, {&(0x7f0000000440)="ffdd14b2d545b969616d54fa413948ca8c884e05a5e0b29fda45678de5b6ea9b32040cfbe28f87c93cf898c2624a360384a71f96dc79194b8c9cf744da855ca0b5aaf22f51db7f7c1cf4850f245977421e5f993e2c5e97146ac61139caedb63455f06e0ac29e00f522a151c2774de3ac62b0621adbe8f1cbca71952a01bd410dbd0731eb96367acfaef362026b898c9311a95951a302f26d1b3d3c6fb59470b3ce9e99d98277d23940f8e92a64207f20951d9407895b748c482f265db1ff0ac5", 0xc0, 0x5}], 0x21, &(0x7f0000000600)={[{'-$'}, {'rfdno'}, {'9p\x00'}, {'[\x89'}], [{@euid_eq={'euid', 0x3d, r6}}, {@audit}, {@appraise_type}]}) setsockopt$inet6_udp_int(r5, 0x11, 0xa, &(0x7f00000005c0)=0x6, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000100)) close_range(r7, 0xffffffffffffffff, 0x0) r8 = dup2(r7, r7) ioctl$HIDIOCINITREPORT(r8, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) [ 944.296279] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 944.296279] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 944.296279] 13:39:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x34}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 944.366459] FAULT_INJECTION: forcing a failure. [ 944.366459] name failslab, interval 1, probability 0, space 0, times 0 [ 944.367946] CPU: 1 PID: 7009 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 944.368800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.369836] Call Trace: [ 944.370185] dump_stack+0x107/0x167 [ 944.370639] should_fail.cold+0x5/0xa [ 944.371138] should_failslab+0x5/0x20 [ 944.371605] __kmalloc_node_track_caller+0x74/0x3b0 [ 944.372246] ? alloc_skb_with_frags+0x92/0x570 [ 944.372803] __alloc_skb+0xb1/0x5b0 [ 944.373246] alloc_skb_with_frags+0x92/0x570 [ 944.373785] sock_alloc_send_pskb+0x7af/0x930 [ 944.374332] ? sk_alloc+0x350/0x350 [ 944.374777] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 944.375409] ? lock_chain_count+0x20/0x20 [ 944.375914] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 944.376549] ? ip6_mtu+0x1bb/0x3d0 [ 944.376979] ? lock_downgrade+0x6d0/0x6d0 [ 944.377482] ? ip_frag_init+0x350/0x350 [ 944.377965] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 944.378543] ? ip6_mtu+0x1e9/0x3d0 [ 944.378970] ? ip6_setup_cork+0xfb7/0x1740 [ 944.379480] ip6_make_skb+0x2de/0x4e0 [ 944.379936] ? ip_frag_init+0x350/0x350 [ 944.380450] ? ip_frag_init+0x350/0x350 [ 944.380936] ? ip6_push_pending_frames+0xf0/0xf0 [ 944.381511] ? ip6_dst_hoplimit+0x199/0x440 [ 944.382029] ? lock_downgrade+0x6d0/0x6d0 [ 944.382544] udpv6_sendmsg+0x20d3/0x2ad0 [ 944.383039] ? ip_frag_init+0x350/0x350 [ 944.383806] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.384465] ? lock_acquire+0x197/0x470 [ 944.384945] ? find_held_lock+0x2c/0x110 [ 944.385441] ? lock_acquire+0x197/0x470 [ 944.385920] ? find_held_lock+0x2c/0x110 [ 944.386419] ? sock_has_perm+0x1ea/0x280 [ 944.386658] EXT4-fs (loop2): mounted filesystem without journal. Opts: noacl,,errors=continue [ 944.386925] ? __import_iovec+0x458/0x590 [ 944.388581] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.389212] inet6_sendmsg+0x105/0x140 [ 944.389686] ? inet6_compat_ioctl+0x320/0x320 [ 944.390231] __sock_sendmsg+0xf2/0x190 [ 944.390705] ____sys_sendmsg+0x334/0x870 [ 944.391199] ? sock_write_iter+0x3d0/0x3d0 [ 944.391712] ? do_recvmmsg+0x6d0/0x6d0 [ 944.392238] ? __lock_acquire+0x1657/0x5b00 [ 944.392777] ___sys_sendmsg+0xf3/0x170 [ 944.393249] ? sendmsg_copy_msghdr+0x160/0x160 [ 944.393798] ? vmacache_find+0x55/0x2a0 [ 944.394285] ? lock_acquire+0x197/0x470 [ 944.394763] ? find_held_lock+0x2c/0x110 [ 944.395257] ? __might_fault+0xd3/0x180 [ 944.395743] ? lock_downgrade+0x6d0/0x6d0 [ 944.396272] ? asm_exc_page_fault+0x1e/0x30 [ 944.396803] __sys_sendmmsg+0x195/0x470 [ 944.397287] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 944.397809] ? lock_downgrade+0x6d0/0x6d0 [ 944.398323] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.398908] ? wait_for_completion_io+0x270/0x270 [ 944.399494] ? rcu_read_lock_any_held+0x75/0xa0 [ 944.400056] ? vfs_write+0x354/0xb10 [ 944.400537] ? fput_many+0x2f/0x1a0 [ 944.400978] ? ksys_write+0x1a9/0x260 [ 944.401438] ? __ia32_sys_read+0xb0/0xb0 [ 944.401934] __x64_sys_sendmmsg+0x99/0x100 [ 944.402446] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.403073] do_syscall_64+0x33/0x40 [ 944.403522] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.404159] RIP: 0033:0x7fbfd48dcb19 [ 944.404622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.406846] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.407766] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 944.408655] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 944.409515] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.410374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.411231] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:39:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:11 executing program 7: chdir(0x0) openat(0xffffffffffffffff, 0x0, 0x806c1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x80900, 0x140) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) pipe(&(0x7f0000000580)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3, 0x0) openat(r2, &(0x7f0000000340)='./file2\x00', 0x0, 0x0) r3 = mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) poll(&(0x7f0000000240), 0x0, 0x5) clock_gettime(0x0, &(0x7f0000000180)) mq_timedsend(r3, &(0x7f0000000380)="7524ca4b82904f5e1c18b4c04ce445ceeac6ca6a4c08b3ebf9b927f6074a2067ecc2518caebb91e96d382dbe8efd71ac8e8f85d6e67f41773ed5c03513057eed164792a358031c3427df0024e19c6dae07df23b719f5cf37c360887f900361c3c692280fc411b918b26b79dc0eda1d7a18210d60e289ad6ef78cb22f2f1f3c5c69e0e77b7d0afd76c7f895f20ca563daacee65400c11b5648a04c16afc900ce02e6fccbd510547d6cce3975d8122c7a9b96213e908", 0x51, 0xaf, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = accept(r1, &(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000140)=0x80) sendfile(r5, r4, &(0x7f0000000240), 0xffffffffffffffe0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000280)='./file1\x00', 0x2) openat(r6, &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x0) 13:39:11 executing program 1: mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='H']}]}, 0x24}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r3, @ANYBLOB="1e002dbd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000200000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001dc6e657464657673696d0000000f0002006e657464657673696d30000018000300010000000e0001006e657464657673696d0000000f0002ce286d08985d3a006e657464657673696d300000080003c506136992"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x54, r3, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17, 0xa8, @random="56e6842c6a049a25f4b3912d0830221114fdcb"}]}, 0x54}}, 0x0) inotify_init1(0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x128) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0xfc, 0x0, 0x4307, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000380)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x400000) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)={0xb4, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffc01}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x84}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000810}, 0x1) [ 944.424241] loop6: detected capacity change from 0 to 8388096 13:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r0, 0x2001000) r1 = memfd_create(&(0x7f0000000340)='\x00', 0x0) ftruncate(r1, 0x2001000) r2 = socket$unix(0x1, 0x1, 0x0) sendfile(r2, r1, 0x0, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) lseek(r3, 0x100000000, 0x1) sendfile(r1, r0, 0x0, 0x420003) 13:39:11 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 21) dup2(r0, r1) 13:39:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000210c00000000040000001c000100000000007b880000080002"], 0x24}}, 0x0) [ 944.600893] FAULT_INJECTION: forcing a failure. [ 944.600893] name failslab, interval 1, probability 0, space 0, times 0 [ 944.602469] CPU: 0 PID: 7037 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 944.603348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 944.604451] Call Trace: [ 944.604779] dump_stack+0x107/0x167 [ 944.605229] should_fail.cold+0x5/0xa [ 944.605695] ? create_object.isra.0+0x3a/0xa20 [ 944.606253] should_failslab+0x5/0x20 [ 944.606716] kmem_cache_alloc+0x5b/0x310 [ 944.607231] create_object.isra.0+0x3a/0xa20 [ 944.607795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 944.608489] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 944.609108] ? alloc_skb_with_frags+0x92/0x570 [ 944.609663] __alloc_skb+0xb1/0x5b0 [ 944.610109] alloc_skb_with_frags+0x92/0x570 [ 944.610645] sock_alloc_send_pskb+0x7af/0x930 [ 944.611200] ? sk_alloc+0x350/0x350 [ 944.611648] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 944.612331] ? lock_chain_count+0x20/0x20 [ 944.612838] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 944.613447] ? ip6_mtu+0x1bb/0x3d0 [ 944.613875] ? lock_downgrade+0x6d0/0x6d0 [ 944.614384] ? ip_frag_init+0x350/0x350 [ 944.614868] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 944.615450] ? ip6_mtu+0x1e9/0x3d0 [ 944.615878] ? ip6_setup_cork+0xfb7/0x1740 [ 944.616437] ip6_make_skb+0x2de/0x4e0 [ 944.616897] ? ip_frag_init+0x350/0x350 [ 944.617387] ? ip_frag_init+0x350/0x350 [ 944.617869] ? ip6_push_pending_frames+0xf0/0xf0 [ 944.618448] ? ip6_dst_hoplimit+0x199/0x440 [ 944.618968] ? lock_downgrade+0x6d0/0x6d0 [ 944.619481] udpv6_sendmsg+0x20d3/0x2ad0 [ 944.619974] ? ip_frag_init+0x350/0x350 [ 944.620508] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.621133] ? trace_hardirqs_on+0x5b/0x180 [ 944.621707] ? lock_acquire+0x197/0x470 [ 944.622193] ? find_held_lock+0x2c/0x110 [ 944.622701] ? lock_acquire+0x197/0x470 [ 944.623184] ? find_held_lock+0x2c/0x110 [ 944.623682] ? sock_has_perm+0x1ea/0x280 [ 944.624218] ? __import_iovec+0x458/0x590 [ 944.624735] ? udp_v6_push_pending_frames+0x360/0x360 [ 944.625364] inet6_sendmsg+0x105/0x140 [ 944.625835] ? inet6_compat_ioctl+0x320/0x320 [ 944.626379] __sock_sendmsg+0xf2/0x190 [ 944.626848] ____sys_sendmsg+0x334/0x870 [ 944.627342] ? sock_write_iter+0x3d0/0x3d0 [ 944.627851] ? do_recvmmsg+0x6d0/0x6d0 [ 944.628366] ? __lock_acquire+0x1657/0x5b00 [ 944.628898] ___sys_sendmsg+0xf3/0x170 [ 944.629374] ? sendmsg_copy_msghdr+0x160/0x160 [ 944.629922] ? vmacache_find+0x55/0x2a0 [ 944.630411] ? lock_acquire+0x197/0x470 [ 944.630888] ? find_held_lock+0x2c/0x110 [ 944.631385] ? __might_fault+0xd3/0x180 [ 944.631865] ? lock_downgrade+0x6d0/0x6d0 [ 944.632413] ? asm_exc_page_fault+0x1e/0x30 [ 944.632947] __sys_sendmmsg+0x195/0x470 [ 944.633432] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 944.633952] ? lock_downgrade+0x6d0/0x6d0 [ 944.634465] ? __mutex_unlock_slowpath+0xe1/0x600 [ 944.635049] ? wait_for_completion_io+0x270/0x270 [ 944.635634] ? rcu_read_lock_any_held+0x75/0xa0 [ 944.636228] ? vfs_write+0x354/0xb10 [ 944.636693] ? fput_many+0x2f/0x1a0 [ 944.637135] ? ksys_write+0x1a9/0x260 [ 944.637597] ? __ia32_sys_read+0xb0/0xb0 [ 944.638092] __x64_sys_sendmmsg+0x99/0x100 [ 944.638608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 944.639240] do_syscall_64+0x33/0x40 [ 944.639694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 944.640353] RIP: 0033:0x7fbfd48dcb19 [ 944.640804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 944.643036] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.643958] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 944.644858] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 944.645725] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 944.646587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 944.647452] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:39:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:39:25 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:25 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x1f, 0x0, 0x7f, 0x3, 0x0, 0x401, 0x244, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x1000, 0x9e8a}, 0x1000, 0x0, 0xbc, 0x7, 0x0, 0x4, 0x800, 0x0, 0x400, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x121042, 0xa3) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') openat(r3, &(0x7f0000000080)='./file0\x00', 0x80, 0x4) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000040)='7', 0x1}], 0x1) syz_open_procfs(0x0, &(0x7f0000000700)='clear_refs\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40094}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) r4 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x60001) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x42808, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@cache_mmap}]}}) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r1, 0x0) 13:39:25 executing program 6: rt_sigtimedwait(&(0x7f00000000c0), 0x0, &(0x7f0000000100), 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) 13:39:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:25 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r4=>r3, 0x0, 0x0, 0x9}) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000009001f00706879310000000005002000010000000c000500000000"], 0x34}}, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000002) r6 = memfd_create(&(0x7f0000000340)='\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) pwritev2(r6, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) finit_module(r6, 0x0, 0x0) close_range(r4, r6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10288160}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000001", @ANYRES16=0x0, @ANYBLOB="010026bd7000fcdbdf25080000000800340000100000050029003f00000005002d0000000000080032000900000005003800010000000a00090070201920282e000008003b0036f9ffff0500290001000000"], 0x58}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000040) 13:39:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 22) dup2(r0, r1) 13:39:25 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000540)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffddfffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@acl}]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB='$', @ANYRES32=0x0, @ANYBLOB="080011667ac90993fd", @ANYBLOB], 0x54, 0x3) r4 = syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x1, 0xffffffff, 0x11b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000002c0)=<r5=>0x0) dup(r4) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r4, 0x8000000) syz_io_uring_submit(r6, r5, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x889c7cb2ceb4d95c, 0x0, 0x0, 0x1}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x505200, 0x9b, 0x1}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x23456}, 0x9) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) mount(&(0x7f00000003c0)=@filename='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f00000004c0)='exfat\x00', 0x10680a, &(0x7f0000000500)='}\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0/file0\x00', 0x3, 0x3, &(0x7f0000000340)=[{&(0x7f00000000c0), 0x0, 0xffffffffffff0001}, {&(0x7f0000000180)="d043ab809a1e19d728d9397160718fa0df1445b884da85c56c3cb3d27e2324ecd1ecc25905afe360c37fc1e2b9f86dda6ab72871011c54882219481d8f0b8286635753318f2474c21ce295c51c59b403fd98c217c186927ad1e844dacf50fa78b602074d3d2e23adeb54118c7d77aaa92034dfe9c3846efc24c329da9d0b0fba164097db31fc2c92d2468f40511b486a0df76d791626ffdeb87871fdefe9c8105bb729298fc8b646b999fbb43cbe2670082ddd226960b34d296b0f7fa971cd5c346f11525099d495f944f772c1ceec41b5d805c18a4773ecd13f88c2e6602141e6a98f92cea9", 0xe6, 0x7fffffff}, {&(0x7f0000000280)="341d9f8f8e43e179044404f9ef1be5dd353b6e26f07785acd4cb61b27303bd062b0d8d53c0303d2e075075b2f6d82ea56774db42e3cb01aeae31ea9ef178bfb7b38d2390484e82e1608a328238815097ca176b29a0a444e369f15bf6ce97151662b16d4beba1eaa307123f51e034ee2479f3aa76b54a1e3a15a57d934418ae97ca3d7df649427b5ef110f730c037439a453d8c5dee418881e6", 0x99}], 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d312c757466383d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c73686f72746e616d653d77696e39352c6f626a5f726f6c653d2db4502e2e7b212a265e2c646f6e745f61707072616973652c61707072616973652c726f6f74636f6e746578743d73746166665f752c7375626a5f747970653d272a2c7365636c6162653cc65db3833b045b19efa8cedcb576eeb0fe84d8a29d2a548c7809bdc1cbe6c8a31002ccc10d56daf374bc5f313428cfe8884019e3a8237c09d654b8800ac0680dc726f538adabf402f9a341a0af24e6f6e9984ed1e68e489d3b59578299e3b42be1df14c66685c96dcddcd1566409b94d758b295ba1f9ae23572d55d97eac21b6716f8058b06df285952acbd7a8485893f14be56ca63d5b9c3672bc7e22bbd2008db265a700"/371, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) [ 958.711649] loop2: detected capacity change from 0 to 135266304 [ 958.783546] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,,errors=continue 13:39:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 958.815692] FAULT_INJECTION: forcing a failure. [ 958.815692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.818891] CPU: 1 PID: 7065 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 958.821102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 958.823701] Call Trace: [ 958.824546] dump_stack+0x107/0x167 [ 958.825704] should_fail.cold+0x5/0xa [ 958.826887] _copy_from_user+0x2e/0x1b0 [ 958.828119] __copy_msghdr_from_user+0x91/0x4b0 [ 958.829586] ? __ia32_sys_shutdown+0x80/0x80 [ 958.830985] ? udp_v6_push_pending_frames+0x360/0x360 [ 958.832673] ? inet6_sendmsg+0xbd/0x140 [ 958.833902] ? inet6_compat_ioctl+0x320/0x320 [ 958.835371] ? __sock_sendmsg+0x55/0x190 [ 958.836642] sendmsg_copy_msghdr+0xa1/0x160 [ 958.837975] ? do_recvmmsg+0x6d0/0x6d0 [ 958.839176] ? __lock_acquire+0x1657/0x5b00 [ 958.840584] ___sys_sendmsg+0xc6/0x170 [ 958.841822] ? sendmsg_copy_msghdr+0x160/0x160 [ 958.843230] ? vmacache_find+0x55/0x2a0 [ 958.844525] ? lock_acquire+0x197/0x470 [ 958.845787] ? find_held_lock+0x2c/0x110 [ 958.847043] ? __might_fault+0xd3/0x180 [ 958.848267] ? lock_downgrade+0x6d0/0x6d0 [ 958.849596] ? asm_exc_page_fault+0x1e/0x30 [ 958.850950] __sys_sendmmsg+0x195/0x470 [ 958.852178] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 958.857548] ? lock_downgrade+0x6d0/0x6d0 [ 958.858840] ? __mutex_unlock_slowpath+0xe1/0x600 [ 958.860344] ? wait_for_completion_io+0x270/0x270 [ 958.861842] ? rcu_read_lock_any_held+0x75/0xa0 [ 958.863286] ? vfs_write+0x354/0xb10 [ 958.868950] ? fput_many+0x2f/0x1a0 [ 958.870158] ? ksys_write+0x1a9/0x260 [ 958.871334] ? __ia32_sys_read+0xb0/0xb0 [ 958.872612] __x64_sys_sendmmsg+0x99/0x100 [ 958.873920] ? syscall_enter_from_user_mode+0x1d/0x50 [ 958.875517] do_syscall_64+0x33/0x40 [ 958.876685] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 958.878364] RIP: 0033:0x7fbfd48dcb19 [ 958.879509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 958.884262] Module has invalid ELF structures [ 958.889404] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 958.889417] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 958.889424] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 958.889431] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 958.889437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.889444] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 958.893179] audit: type=1400 audit(1740749966.117:291): avc: denied { module_load } for pid=7062 comm="syz-executor.7" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=1107 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 13:39:26 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) [ 959.002872] Module has invalid ELF structures 13:39:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 23) dup2(r0, r1) 13:39:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xa43, 0x0) r2 = syz_io_uring_setup(0x7dbe, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/61, 0x3d}, {&(0x7f0000000040), 0x40000000}, {&(0x7f0000000340)=""/164, 0xa4}], 0x3) r3 = pidfd_open(0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0xa000, 0x48) flock(r1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x100000001) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r5, 0x8, 0x0, 0x8000) bind(r5, &(0x7f0000000640)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x80) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40004, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r6, 0x0, 0x80000001) 13:39:40 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="0171c200000000000000000086dd6096033f00303a00fc020000000000000000000000000000ff1200000000000000000000000000010200907800000000600009e60000000000000000000000000000ffffac1e0001fe8000000000000000000000000000bb"], 0x0) syz_emit_ethernet(0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="0000081ba81b00ed0015d40000000000000000"], &(0x7f0000000180)={0x1, 0x4, [0x108, 0xb7e, 0xd85, 0xf2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb7d1, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() setpgid(0x0, r1) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x8, 0x7f, 0x1, 0x7a, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0xc300, 0x4, 0x1ff, 0x4, 0xfffffffffffffff9, 0x4, 0x7fff, 0x0, 0xffff0001, 0x0, 0x2f}, r1, 0x4, r0, 0x2) r2 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000ffc000/0x2000)=nil], &(0x7f00000002c0), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x6) ptrace(0x8, r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaa28c3ffb4f19910046008100480008060001080006040002bbbbbbbbbbb3e0000002218cad541720ac1414aa"], &(0x7f0000000140)={0x1, 0x1, [0xb65, 0x6cb, 0xe93, 0x2f8]}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x412100, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000237}, 0x11000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x50111, 0xffffffffffffffff, 0x3) ptrace$getenv(0x4201, r1, 0xba, &(0x7f0000000200)) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x80010, 0xffffffffffffffff, 0x5) 13:39:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:40 executing program 7: ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002c80)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000018800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="20001a080000000000000000fb92da006e6bf4dc8f1c690ae9d445e9dc107e1d59363993e24c5830835026f8c74ff5b5c693137670b370a6d820339fc0adfe39198154b1b9717841cf5c9eee06d048987820e8b1144ee9b56c7559f8b7214c1bfdbcacf53b14c9b539d54de8b4b344f77543937280857341a8a0fc6fc049554663a76b3e316395d115825abaa2261def61d42718cf96c5ae20281d5f2a3a46b6af5e20ca03", @ANYRES32, @ANYRES32, @ANYRES32], 0x20}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2008cce45a7a000408200000000000000000001ef6499460088221e63b88d1799a863e4ee1b47bcf23d95402ae66836ec95e896615824bc1c5e0d0b5045fc95302a08a96ca7284b0ff31cb91fe321424077e78874af9af257d722c4b10d7fa168fcf735a78e3a26220af0f313db8f3390ddc542b7962d366c9877333294330a472a9a78aa7816056027c35cd2c480a600e3f0f1b"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x4048880) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x1, @any, 0x100}, 0xe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0x4208, r0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r2, 0x3f, 0x0, 0x9107, 0x5, 0x1, {0x0, r3}}, 0x5) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000000)={{}, 0x10001, 0x7ff, 0x800}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 13:39:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:39:40 executing program 6: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = clone3(&(0x7f0000004600)={0x10800000, 0x0, 0x0, 0x0, {}, &(0x7f0000000280)=""/78, 0x4e, &(0x7f0000000300)=""/44, 0x0}, 0x58) r2 = fork() r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) fork() fork() sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001780)=ANY=[@ANYBLOB="1416168c1630001fe9", @ANYRES16=r5, @ANYBLOB="0500000000c6b6da0000000000031b00000800030008ab8d0d55f2f4242a1616704177600df32ed0268562297463bb95ebb3a6b2", @ANYRES32=r4, @ANYBLOB="3d6739968c9845"], 0x2c}}, 0x0) fadvise64(r3, 0xdd, 0x6, 0x5) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xff, 0x8, 0x8, 0x7, 0x0, 0x7fff, 0x0, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x8500, 0x7fff, 0x8aa, 0x4, 0x8, 0x4, 0x9, 0x0, 0x9ef, 0x0, 0x2}, r1, 0x8, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x727f, &(0x7f0000000100)={0x0, 0xaacb, 0x1, 0x3, 0x36e}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000380)) r7 = syz_io_uring_setup(0xc8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x0) preadv(r7, &(0x7f00000016c0)=[{&(0x7f00000004c0)=""/245, 0xf5}, {&(0x7f00000005c0)=""/232, 0xe8}, {&(0x7f0000000400)=""/55, 0x37}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x4, 0x400, 0x7fff) syz_io_uring_submit(r6, 0x0, &(0x7f00000003c0)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0xb8de60669ce4db6f, 0x1, {0x0, r10}}, 0x60) ptrace(0x10, r2) r11 = fork() kcmp(r1, r11, 0x1, 0xffffffffffffffff, r0) 13:39:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 973.079693] FAULT_INJECTION: forcing a failure. [ 973.079693] name failslab, interval 1, probability 0, space 0, times 0 [ 973.081128] CPU: 1 PID: 7124 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 973.082042] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.083134] Call Trace: [ 973.083482] dump_stack+0x107/0x167 [ 973.083949] should_fail.cold+0x5/0xa [ 973.084438] ? __alloc_skb+0x6d/0x5b0 [ 973.084927] should_failslab+0x5/0x20 [ 973.085393] kmem_cache_alloc_node+0x55/0x330 [ 973.085941] ? __lock_acquire+0x1657/0x5b00 [ 973.086471] __alloc_skb+0x6d/0x5b0 [ 973.086942] alloc_skb_with_frags+0x92/0x570 [ 973.087515] sock_alloc_send_pskb+0x7af/0x930 [ 973.088102] ? sk_alloc+0x350/0x350 [ 973.088574] ? perf_trace_lock+0xac/0x490 [ 973.089083] ? lock_chain_count+0x20/0x20 [ 973.089589] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 973.090200] ? ip6_mtu+0x1bb/0x3d0 [ 973.090629] ? lock_downgrade+0x6d0/0x6d0 [ 973.091175] ? ip_frag_init+0x350/0x350 [ 973.091665] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 973.092278] ? ip6_mtu+0x1e9/0x3d0 [ 973.092722] ? ip6_setup_cork+0xfb7/0x1740 [ 973.093236] ip6_make_skb+0x2de/0x4e0 [ 973.093694] ? ip_frag_init+0x350/0x350 [ 973.094184] ? ip_frag_init+0x350/0x350 [ 973.094668] ? ip6_push_pending_frames+0xf0/0xf0 [ 973.095288] ? ip6_dst_hoplimit+0x199/0x440 [ 973.095825] ? lock_downgrade+0x6d0/0x6d0 [ 973.096357] udpv6_sendmsg+0x20d3/0x2ad0 [ 973.096871] ? ip_frag_init+0x350/0x350 [ 973.097359] ? udp_v6_push_pending_frames+0x360/0x360 [ 973.097980] ? __lockdep_reset_lock+0x180/0x180 [ 973.098550] ? __lockdep_reset_lock+0x180/0x180 [ 973.099164] ? lock_acquire+0x197/0x470 [ 973.099646] ? find_held_lock+0x2c/0x110 [ 973.100177] ? sock_has_perm+0x1ea/0x280 [ 973.100704] ? __import_iovec+0x458/0x590 [ 973.101212] ? udp_v6_push_pending_frames+0x360/0x360 [ 973.101839] inet6_sendmsg+0x105/0x140 [ 973.102311] ? inet6_compat_ioctl+0x320/0x320 [ 973.102853] __sock_sendmsg+0xf2/0x190 [ 973.103370] ____sys_sendmsg+0x334/0x870 [ 973.103884] ? sock_write_iter+0x3d0/0x3d0 [ 973.104409] ? do_recvmmsg+0x6d0/0x6d0 [ 973.104902] ? __lock_acquire+0x1657/0x5b00 [ 973.105434] ___sys_sendmsg+0xf3/0x170 [ 973.105906] ? sendmsg_copy_msghdr+0x160/0x160 [ 973.106459] ? vmacache_find+0x55/0x2a0 [ 973.106957] ? __lockdep_reset_lock+0x180/0x180 [ 973.107555] ? lock_acquire+0x197/0x470 [ 973.108041] ? find_held_lock+0x2c/0x110 [ 973.108561] ? __might_fault+0xd3/0x180 [ 973.109045] ? lock_downgrade+0x6d0/0x6d0 [ 973.109549] ? asm_exc_page_fault+0x1e/0x30 [ 973.110090] __sys_sendmmsg+0x195/0x470 [ 973.110579] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 973.111146] ? lock_downgrade+0x6d0/0x6d0 [ 973.111667] ? __mutex_unlock_slowpath+0xe1/0x600 [ 973.112283] ? wait_for_completion_io+0x270/0x270 [ 973.116900] ? rcu_read_lock_any_held+0x75/0xa0 [ 973.117466] ? vfs_write+0x354/0xb10 [ 973.117916] ? fput_many+0x2f/0x1a0 [ 973.118357] ? ksys_write+0x1a9/0x260 [ 973.118817] ? __ia32_sys_read+0xb0/0xb0 [ 973.119313] __x64_sys_sendmmsg+0x99/0x100 [ 973.119825] ? syscall_enter_from_user_mode+0x1d/0x50 [ 973.120446] do_syscall_64+0x33/0x40 [ 973.120917] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 973.121539] RIP: 0033:0x7fbfd48dcb19 [ 973.122012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.124301] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 973.125247] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 973.126115] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 973.127010] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 973.127923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.128818] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 13:39:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a8b01342e006859}, 0x0) 13:39:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:40 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080), 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 24) dup2(r0, r1) [ 973.264127] loop2: detected capacity change from 0 to 33559552 [ 973.273868] FAULT_INJECTION: forcing a failure. [ 973.273868] name failslab, interval 1, probability 0, space 0, times 0 [ 973.275502] CPU: 1 PID: 7142 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 973.281101] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 973.282104] Call Trace: [ 973.282478] dump_stack+0x107/0x167 [ 973.282923] should_fail.cold+0x5/0xa [ 973.283416] ? create_object.isra.0+0x3a/0xa20 [ 973.283972] should_failslab+0x5/0x20 [ 973.284440] kmem_cache_alloc+0x5b/0x310 [ 973.284955] create_object.isra.0+0x3a/0xa20 [ 973.285490] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 973.286110] kmem_cache_alloc_node+0x169/0x330 [ 973.286676] __alloc_skb+0x6d/0x5b0 [ 973.287123] alloc_skb_with_frags+0x92/0x570 [ 973.287707] sock_alloc_send_pskb+0x7af/0x930 [ 973.288296] ? sk_alloc+0x350/0x350 [ 973.288765] ? perf_trace_lock+0xac/0x490 [ 973.289270] ? lock_chain_count+0x20/0x20 [ 973.289780] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 973.290397] ? ip6_mtu+0x1bb/0x3d0 [ 973.290831] ? lock_downgrade+0x6d0/0x6d0 [ 973.291337] ? ip_frag_init+0x350/0x350 [ 973.291847] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 973.292483] ? ip6_mtu+0x1e9/0x3d0 [ 973.292925] ? ip6_setup_cork+0xfb7/0x1740 [ 973.293442] ip6_make_skb+0x2de/0x4e0 [ 973.293904] ? ip_frag_init+0x350/0x350 [ 973.294398] ? ip_frag_init+0x350/0x350 [ 973.294883] ? ip6_push_pending_frames+0xf0/0xf0 [ 973.295506] ? ip6_dst_hoplimit+0x199/0x440 [ 973.296034] ? lock_downgrade+0x6d0/0x6d0 [ 973.296604] udpv6_sendmsg+0x20d3/0x2ad0 [ 973.297101] ? ip_frag_init+0x350/0x350 [ 973.297590] ? udp_v6_push_pending_frames+0x360/0x360 [ 973.298213] ? __lockdep_reset_lock+0x180/0x180 [ 973.298787] ? __lockdep_reset_lock+0x180/0x180 [ 973.299358] ? lock_acquire+0x197/0x470 [ 973.299840] ? find_held_lock+0x2c/0x110 [ 973.300347] ? sock_has_perm+0x1ea/0x280 [ 973.300888] ? __import_iovec+0x458/0x590 [ 973.301432] ? udp_v6_push_pending_frames+0x360/0x360 [ 973.302062] inet6_sendmsg+0x105/0x140 [ 973.302537] ? inet6_compat_ioctl+0x320/0x320 [ 973.303082] __sock_sendmsg+0xf2/0x190 [ 973.303558] ____sys_sendmsg+0x334/0x870 [ 973.304055] ? sock_write_iter+0x3d0/0x3d0 [ 973.304583] ? do_recvmmsg+0x6d0/0x6d0 [ 973.305061] ? __lock_acquire+0x1657/0x5b00 [ 973.305644] ___sys_sendmsg+0xf3/0x170 [ 973.306123] ? sendmsg_copy_msghdr+0x160/0x160 [ 973.306702] ? vmacache_find+0x55/0x2a0 [ 973.307189] ? __lockdep_reset_lock+0x180/0x180 [ 973.307760] ? lock_acquire+0x197/0x470 [ 973.308245] ? find_held_lock+0x2c/0x110 [ 973.308762] ? __might_fault+0xd3/0x180 [ 973.309246] ? lock_downgrade+0x6d0/0x6d0 [ 973.309750] ? asm_exc_page_fault+0x1e/0x30 [ 973.310290] __sys_sendmmsg+0x195/0x470 [ 973.310777] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 973.311303] ? lock_downgrade+0x6d0/0x6d0 [ 973.311821] ? __mutex_unlock_slowpath+0xe1/0x600 [ 973.312411] ? wait_for_completion_io+0x270/0x270 [ 973.313016] ? rcu_read_lock_any_held+0x75/0xa0 [ 973.313629] ? vfs_write+0x354/0xb10 [ 973.314085] ? fput_many+0x2f/0x1a0 [ 973.314565] ? ksys_write+0x1a9/0x260 [ 973.315028] ? __ia32_sys_read+0xb0/0xb0 [ 973.315527] __x64_sys_sendmmsg+0x99/0x100 [ 973.316041] ? syscall_enter_from_user_mode+0x1d/0x50 [ 973.316690] do_syscall_64+0x33/0x40 [ 973.317145] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 973.317808] RIP: 0033:0x7fbfd48dcb19 [ 973.318284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 973.320554] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 973.321530] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 973.322432] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 973.323298] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 973.324165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.325046] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:39:40 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x3395047e, 0x0, 0x0, 0x40002, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x82040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0x1}, 0x1, 0x8000, 0x0, 0x8, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup3(r0, r1, 0x80000) r3 = accept4$bt_l2cap(r2, &(0x7f0000000080), &(0x7f0000000340)=0xe, 0x80000) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r1, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x220000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x800000000010000, 0xffffffff, 0x8, 0x401}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00'}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), 0xffffffffffffffff) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) r7 = getpid() r8 = syz_open_procfs(r7, &(0x7f0000000440)='net/if_inet6\x00') mkdirat$cgroup(r8, &(0x7f0000000180)='syz0\x00', 0x1ff) readv(r8, &(0x7f0000003700)=[{&(0x7f0000000200)=""/208, 0xd0}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000380)=""/51, 0x33}, {&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000003640)=""/128, 0x80}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000001c0)=""/57, 0x39}], 0x8) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:39:40 executing program 7: r0 = syz_mount_image$vfat(&(0x7f0000000e80), &(0x7f0000000ec0)='./file0\x00', 0x0, 0x0, &(0x7f0000003180), 0x0, &(0x7f0000003240)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}]}) r1 = signalfd4(r0, &(0x7f0000000000)={[0x3]}, 0x8, 0x800) openat(r1, &(0x7f0000000040)='./file0\x00', 0x208000, 0x102) [ 973.393976] FAT-fs (loop7): bogus number of reserved sectors [ 973.394820] FAT-fs (loop7): Can't find a valid FAT filesystem [ 973.434220] FAT-fs (loop7): bogus number of reserved sectors [ 973.434988] FAT-fs (loop7): Can't find a valid FAT filesystem [ 973.733245] loop2: detected capacity change from 0 to 33559552 13:39:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:39:55 executing program 2: ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000180)=0x4) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000290000000000002925", 0x59, 0x87ff}], 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC]) 13:39:55 executing program 6: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="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"]) openat2(r1, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)={0x4e483, 0x101}, 0x18) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000100), &(0x7f0000000280)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/pata_sch', 0x0, 0x23) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/87, 0x57) 13:39:55 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r0 = gettid() syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpgid(r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x20140, 0x0) r3 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x39, 0x10, 0x70bd2d, 0x25dfdbfc, {0x1f}, [@typed={0x8, 0x13, 0x0, 0x0, @pid=r1}, @typed={0xc, 0x61, 0x0, 0x0, @u64=0xffff}, @typed={0x4, 0x3e}, @nested={0x1c, 0xd, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd=r2}, @typed={0x8, 0x67, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x13, 0x0, 0x0, @pid=r3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x14040010}, 0x4008080) kexec_load(0x3, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 13:39:55 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 25) dup2(r0, r1) 13:39:55 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="cd656d69f282f46caedc9da09676f7d5fb29e8f4e5806ac5ea118e763750a9", 0x1f) r1 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x7d626255542dd515, 0x80, 0x1, 0x40, 0x40, 0x80, 0x0, 0x6, 0x0, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2000, 0x3, 0x7, 0x3, 0x10001, 0x8, 0x9, 0x0, 0x1, 0x0, 0x401}, 0x0, 0x3, r0, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="03000000000000000a00000000000000ff010000000000000000000000360001000000ed00000000000000000000000000000000000000000000000062f81d5ba1e67f490db76a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000ff01000000000000000000000000000100"/199], 0x110) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f0000000380)='./file0\x00', 0x24000, 0x20) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) close_range(r1, r5, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) unshare(0x48020200) 13:39:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 988.157555] loop2: detected capacity change from 0 to 69120 13:39:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x127, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 988.182800] loop6: detected capacity change from 0 to 33559552 [ 988.215135] audit: type=1400 audit(1740749995.448:292): avc: denied { relabelfrom } for pid=7184 comm="syz-executor.6" name="" dev="pipefs" ino=26677 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 13:39:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 1) [ 988.256973] FAULT_INJECTION: forcing a failure. [ 988.256973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.258628] CPU: 0 PID: 7202 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 988.259475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.260597] Call Trace: [ 988.260936] dump_stack+0x107/0x167 [ 988.261377] should_fail.cold+0x5/0xa [ 988.261939] _copy_from_user+0x2e/0x1b0 [ 988.262445] __copy_msghdr_from_user+0x91/0x4b0 [ 988.263070] ? __ia32_sys_shutdown+0x80/0x80 [ 988.263657] ? perf_trace_lock+0xac/0x490 13:39:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0xc8d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffa000/0x6000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x20, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xa, 0x16, 0x0, 0x1, [@generic='\x00\x00\x00\x00\x00\x00']}]}, 0x20}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x80000001, 0x1, &(0x7f0000000000)="da9d7bce7228a4cf1ff05e8c5cda6285dde5c79d4f0456ab476f6dde3073d4845be356b73bd769d8dd0cc6b66736dd71e9cb3665121d61cd2b1d1bef94b8dc5a9fbaec46386e041256011e6387337e40037e65cf86861429e0293599ea3944e2bd6a09f16fb734440de9aa", 0x7fffffff, 0x0, 0x0, {0x2, r7}}, 0x40) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x5, @multicast1}, 0x10) io_uring_enter(r4, 0x4ff9, 0xd486, 0x2, &(0x7f00000000c0)={[0x7f]}, 0x8) [ 988.264155] ? __lock_acquire+0x1657/0x5b00 [ 988.265615] ? __lock_acquire+0xbb1/0x5b00 [ 988.266157] sendmsg_copy_msghdr+0xa1/0x160 [ 988.266759] ? do_recvmmsg+0x6d0/0x6d0 [ 988.267237] ? perf_trace_lock+0xac/0x490 [ 988.267365] FAULT_INJECTION: forcing a failure. [ 988.267365] name failslab, interval 1, probability 0, space 0, times 0 [ 988.267806] ? lock_downgrade+0x6d0/0x6d0 [ 988.269797] ? __lockdep_reset_lock+0x180/0x180 [ 988.270372] ___sys_sendmsg+0xc6/0x170 [ 988.270932] ? sendmsg_copy_msghdr+0x160/0x160 [ 988.271539] ? __fget_files+0x2cf/0x520 [ 988.272032] ? lock_downgrade+0x6d0/0x6d0 [ 988.272612] ? find_held_lock+0x2c/0x110 [ 988.273138] ? __fget_files+0x2f8/0x520 [ 988.273718] ? __fget_light+0xea/0x290 [ 988.274203] __sys_sendmsg+0xe5/0x1b0 [ 988.274745] ? __sys_sendmsg_sock+0x40/0x40 [ 988.275270] ? rcu_read_lock_any_held+0x75/0xa0 [ 988.275888] ? fput_many+0x2f/0x1a0 [ 988.276335] ? ksys_write+0x1a9/0x260 [ 988.276881] ? __ia32_sys_read+0xb0/0xb0 [ 988.277381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 988.278113] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.278822] ? trace_hardirqs_on+0x5b/0x180 [ 988.279348] do_syscall_64+0x33/0x40 [ 988.279854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 988.280479] RIP: 0033:0x7fb9560b7b19 [ 988.281018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.283380] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.284394] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 988.285376] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 988.286339] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 988.287252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.288172] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 988.293225] CPU: 1 PID: 7189 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 988.294089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 988.295096] Call Trace: [ 988.295424] dump_stack+0x107/0x167 [ 988.295911] should_fail.cold+0x5/0xa [ 988.296408] should_failslab+0x5/0x20 [ 988.296931] __kmalloc_node_track_caller+0x74/0x3b0 [ 988.297538] ? alloc_skb_with_frags+0x92/0x570 [ 988.298096] __alloc_skb+0xb1/0x5b0 [ 988.298541] alloc_skb_with_frags+0x92/0x570 [ 988.299082] sock_alloc_send_pskb+0x7af/0x930 [ 988.299664] ? sk_alloc+0x350/0x350 [ 988.300129] ? perf_trace_lock+0xac/0x490 [ 988.300641] ? lock_chain_count+0x20/0x20 [ 988.301185] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 988.301799] ? ip6_mtu+0x1bb/0x3d0 [ 988.302232] ? lock_downgrade+0x6d0/0x6d0 [ 988.302741] ? ip_frag_init+0x350/0x350 [ 988.303241] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 988.303877] ? ip6_mtu+0x1e9/0x3d0 [ 988.304311] ? ip6_setup_cork+0xfb7/0x1740 [ 988.304878] ip6_make_skb+0x2de/0x4e0 [ 988.305340] ? ip_frag_init+0x350/0x350 [ 988.305830] ? ip_frag_init+0x350/0x350 [ 988.306316] ? ip6_push_pending_frames+0xf0/0xf0 [ 988.306896] ? ip6_dst_hoplimit+0x199/0x440 [ 988.307419] ? lock_downgrade+0x6d0/0x6d0 [ 988.307983] udpv6_sendmsg+0x20d3/0x2ad0 [ 988.308496] ? ip_frag_init+0x350/0x350 [ 988.309037] ? udp_v6_push_pending_frames+0x360/0x360 [ 988.309662] ? __lockdep_reset_lock+0x180/0x180 [ 988.310233] ? __lockdep_reset_lock+0x180/0x180 [ 988.310801] ? lock_acquire+0x197/0x470 [ 988.311282] ? find_held_lock+0x2c/0x110 [ 988.311834] ? sock_has_perm+0x1ea/0x280 [ 988.312351] ? __import_iovec+0x458/0x590 [ 988.312898] ? udp_v6_push_pending_frames+0x360/0x360 [ 988.313531] inet6_sendmsg+0x105/0x140 [ 988.314005] ? inet6_compat_ioctl+0x320/0x320 [ 988.314554] __sock_sendmsg+0xf2/0x190 [ 988.315071] ____sys_sendmsg+0x334/0x870 [ 988.315585] ? sock_write_iter+0x3d0/0x3d0 [ 988.316102] ? do_recvmmsg+0x6d0/0x6d0 [ 988.316576] ? __lock_acquire+0x1657/0x5b00 [ 988.317127] ___sys_sendmsg+0xf3/0x170 [ 988.317601] ? sendmsg_copy_msghdr+0x160/0x160 [ 988.318157] ? vmacache_find+0x55/0x2a0 [ 988.318671] ? __lockdep_reset_lock+0x180/0x180 [ 988.319263] ? lock_acquire+0x197/0x470 [ 988.319767] ? find_held_lock+0x2c/0x110 [ 988.320264] ? __might_fault+0xd3/0x180 [ 988.320760] ? lock_downgrade+0x6d0/0x6d0 [ 988.321266] ? asm_exc_page_fault+0x1e/0x30 [ 988.321802] __sys_sendmmsg+0x195/0x470 [ 988.322293] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 988.322858] ? lock_downgrade+0x6d0/0x6d0 [ 988.323384] ? __mutex_unlock_slowpath+0xe1/0x600 [ 988.324003] ? wait_for_completion_io+0x270/0x270 [ 988.324592] ? rcu_read_lock_any_held+0x75/0xa0 [ 988.325173] ? vfs_write+0x354/0xb10 [ 988.325625] ? fput_many+0x2f/0x1a0 [ 988.326067] ? ksys_write+0x1a9/0x260 [ 988.326530] ? __ia32_sys_read+0xb0/0xb0 [ 988.327078] __x64_sys_sendmmsg+0x99/0x100 [ 988.327625] ? syscall_enter_from_user_mode+0x1d/0x50 [ 988.328253] do_syscall_64+0x33/0x40 [ 988.328719] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 988.329349] RIP: 0033:0x7fbfd48dcb19 [ 988.329802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 988.332107] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 988.333046] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 988.333916] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 988.334826] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 988.335721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 988.336586] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:39:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:39:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10402, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x3, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) fcntl$setlease(r1, 0x400, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) sendfile(r2, r0, 0x0, 0x7f) 13:39:55 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:39:55 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}, {0x0}, {&(0x7f0000011600)="504d4d00504d4dff", 0x8, 0x4400}], 0x10, &(0x7f0000000040)=ANY=[]) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='ext4\x00', 0x40, &(0x7f00000002c0)='ext4\x00') fspick(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x7, 0x840) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x4}}, './cgroup/cgroup.procs\x00'}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r3, r3) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000740)=0xe8) chown(&(0x7f0000000380)='./file0\x00', r4, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) r5 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) openat(r5, &(0x7f0000000340)='./file0\x00', 0x1, 0x1) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x1000, 0x80, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r6, r7, 0x1000) mount$cgroup(0x0, &(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000080), 0x1040c07, &(0x7f0000000540)={[{}], [{@appraise_type}, {@appraise}, {@fowner_gt={'fowner>', r6}}, {@smackfsfloor}]}) [ 988.524816] loop2: detected capacity change from 0 to 262144 [ 988.563909] EXT4-fs error (device loop2): ext4_fill_super:4967: inode #2: comm syz-executor.2: iget: special inode unallocated [ 988.565716] EXT4-fs (loop2): get root inode failed [ 988.566575] EXT4-fs (loop2): mount failed [ 988.589881] loop2: detected capacity change from 0 to 262144 [ 988.595679] EXT4-fs (loop2): Unrecognized mount option "/dev/autofs" or missing value 13:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x500, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:10 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 26) dup2(r0, r1) 13:40:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = timerfd_create(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a16ec78d9e009940ff4b9bee1501d8a7d91a8a6c255683633f96aa56c14d40c5644c25e8e4adab45e7b596b796d212ec796f5d332f44158386c83933bca1032e93d4098e4789e28e6839f795510feaae58268dfd34568eb655580fb6f81d48294fce7"]}, @devid=r4}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000240)={r4, "1d043b96fb91d3495e0b2e9d72672509"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000002c0)={r4, 0x8, 0x1}) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000240)) 13:40:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 2) 13:40:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x46e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x80000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00c5d5000000000000000000000200080000000000000052dc87d898e29c641bcd2eca125a741a9e711c423099e22cbd1faed440fbbcce07630ec6cfe15384b8bcde6d51f5d3f723cdfb24904e0511b2179b5069e54de57a62200609d10c642187cb76fbac9837739cfb3dc3f0ad925140145512029d04a06deaaaa0e76e42778841ffbbfce6ec3ff78e0078c99028a122751c66eb42e928009e2b1d7694240633d0260135678ec69078cd8cf5eda815fa112ca80028327aa1a5a90fe9412094b7cd709956ca7c5f9346a6bc1b89"], 0x1c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1b1000, 0x0) ftruncate(r0, 0x1000003) fcntl$lock(r0, 0x25, &(0x7f0000000240)={0x0, 0x2, 0x8001, 0x9, 0xffffffffffffffff}) syncfs(0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000000c0), 0x4, 0x20000) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x81001) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x7ff}, {0x5}]}, 0x14, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x5005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000180), 0x5}, 0x800, 0x0, 0x200, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 13:40:10 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000280)={0x5df4bfe3, 0x7, 0x4, 0x7fff, 0x7}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000009c0)={0x0, <r1=>0x0}) setpgid(0x0, r1) r2 = signalfd(r0, &(0x7f0000000100)={[0x2]}, 0x8) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x9, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x2, 0x100}, 0x0, 0x3598b8b3, 0x9, 0x0, 0x0, 0x4, 0x1, 0x0, 0x55c, 0x0, 0x5}, r1, 0x2, r2, 0x8) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r3}, &(0x7f0000000340)=<r4=>0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') pread64(r5, &(0x7f00000001c0)=""/133, 0x85, 0x57f) read(r5, &(0x7f00000002c0)=""/122, 0x7a) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1b, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timer_create(0x4, &(0x7f0000000400)={0x0, 0x3d, 0x0, @tid=r1}, &(0x7f0000000440)) timer_gettime(r4, &(0x7f00000000c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:10 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00', <r1=>0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r1, 0x2f, 0x6, 0xf5, 0x295faaa0, 0x30, @remote, @empty, 0x1, 0x700, 0x3, 0xffffafaf}}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) syz_io_uring_setup(0x446f, &(0x7f0000000040)={0x0, 0x1969, 0x10, 0x2, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000540)) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff080000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000b0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x5, 0x81, 0x20, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x20, 0x8, 0x147, 0xfffffe00}}) [ 1003.039848] FAULT_INJECTION: forcing a failure. ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000056b00)={{<r3=>0x0, 0x8, 0x7, 0x9, 0x3, 0x5, 0x6, 0xffff, 0x3, 0x1, 0x0, 0x2, 0x3f, 0x1000, 0x5}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={<r4=>0x0, ""/256, <r5=>0x0, <r6=>0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3, r6}], 0x7f, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x7, [], 0x4, "9755154351ac9a"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) [ 1003.039848] name failslab, interval 1, probability 0, space 0, times 0 [ 1003.049582] CPU: 1 PID: 7237 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1003.050417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.051422] Call Trace: [ 1003.051750] dump_stack+0x107/0x167 [ 1003.052195] should_fail.cold+0x5/0xa [ 1003.052672] ? create_object.isra.0+0x3a/0xa20 [ 1003.053246] should_failslab+0x5/0x20 [ 1003.053742] kmem_cache_alloc+0x5b/0x310 [ 1003.054241] create_object.isra.0+0x3a/0xa20 [ 1003.054773] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1003.055393] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1003.056010] ? alloc_skb_with_frags+0x92/0x570 [ 1003.056616] __alloc_skb+0xb1/0x5b0 [ 1003.057079] alloc_skb_with_frags+0x92/0x570 [ 1003.057652] sock_alloc_send_pskb+0x7af/0x930 [ 1003.058205] ? sk_alloc+0x350/0x350 [ 1003.058655] ? perf_trace_lock+0xac/0x490 [ 1003.059160] ? lock_chain_count+0x20/0x20 [ 1003.059671] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1003.060283] ? ip6_mtu+0x1bb/0x3d0 [ 1003.060729] ? lock_downgrade+0x6d0/0x6d0 [ 1003.061919] ? ip_frag_init+0x350/0x350 [ 1003.062965] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1003.064232] ? ip6_mtu+0x1e9/0x3d0 [ 1003.065234] ? ip6_setup_cork+0xfb7/0x1740 [ 1003.066427] ip6_make_skb+0x2de/0x4e0 [ 1003.067419] ? ip_frag_init+0x350/0x350 [ 1003.068492] ? ip_frag_init+0x350/0x350 [ 1003.069774] ? ip6_push_pending_frames+0xf0/0xf0 [ 1003.071020] ? ip6_dst_hoplimit+0x199/0x440 [ 1003.072146] ? lock_downgrade+0x6d0/0x6d0 [ 1003.073076] udpv6_sendmsg+0x20d3/0x2ad0 [ 1003.073607] ? ip_frag_init+0x350/0x350 [ 1003.074097] ? udp_v6_push_pending_frames+0x360/0x360 [ 1003.074722] ? __lockdep_reset_lock+0x180/0x180 [ 1003.075295] ? __lockdep_reset_lock+0x180/0x180 [ 1003.075866] ? lock_acquire+0x197/0x470 [ 1003.076349] ? find_held_lock+0x2c/0x110 [ 1003.077001] ? sock_has_perm+0x1ea/0x280 [ 1003.078084] ? __import_iovec+0x458/0x590 [ 1003.079187] ? udp_v6_push_pending_frames+0x360/0x360 [ 1003.080587] inet6_sendmsg+0x105/0x140 [ 1003.081804] ? inet6_compat_ioctl+0x320/0x320 [ 1003.082973] __sock_sendmsg+0xf2/0x190 [ 1003.083987] ____sys_sendmsg+0x334/0x870 [ 1003.085185] ? sock_write_iter+0x3d0/0x3d0 [ 1003.086229] ? do_recvmmsg+0x6d0/0x6d0 [ 1003.087156] ? __lock_acquire+0x1657/0x5b00 [ 1003.088193] ___sys_sendmsg+0xf3/0x170 [ 1003.089213] ? sendmsg_copy_msghdr+0x160/0x160 [ 1003.090364] ? vmacache_find+0x55/0x2a0 [ 1003.091330] ? __lockdep_reset_lock+0x180/0x180 [ 1003.092449] ? lock_acquire+0x197/0x470 [ 1003.093625] ? find_held_lock+0x2c/0x110 [ 1003.094728] ? __might_fault+0xd3/0x180 [ 1003.095757] ? lock_downgrade+0x6d0/0x6d0 [ 1003.096845] ? asm_exc_page_fault+0x1e/0x30 [ 1003.098315] __sys_sendmmsg+0x195/0x470 [ 1003.099393] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1003.100521] ? lock_downgrade+0x6d0/0x6d0 [ 1003.101832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1003.102281] FAULT_INJECTION: forcing a failure. [ 1003.102281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.103147] ? wait_for_completion_io+0x270/0x270 [ 1003.103163] ? rcu_read_lock_any_held+0x75/0xa0 [ 1003.108684] ? vfs_write+0x354/0xb10 [ 1003.109849] ? fput_many+0x2f/0x1a0 [ 1003.110810] ? ksys_write+0x1a9/0x260 [ 1003.111847] ? __ia32_sys_read+0xb0/0xb0 [ 1003.112983] __x64_sys_sendmmsg+0x99/0x100 [ 1003.114085] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.115441] do_syscall_64+0x33/0x40 [ 1003.116406] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.117991] RIP: 0033:0x7fbfd48dcb19 [ 1003.118955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.126309] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1003.127266] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1003.128125] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1003.129017] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.129929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1003.130823] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 1003.131703] CPU: 0 PID: 7241 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1003.132535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1003.133571] Call Trace: [ 1003.133919] dump_stack+0x107/0x167 [ 1003.134365] should_fail.cold+0x5/0xa [ 1003.134862] _copy_from_user+0x2e/0x1b0 [ 1003.135345] iovec_from_user+0x141/0x400 [ 1003.135840] __import_iovec+0x67/0x590 [ 1003.136310] ? __ia32_sys_shutdown+0x80/0x80 [ 1003.136897] ? perf_trace_lock+0xac/0x490 [ 1003.137426] import_iovec+0x83/0xb0 [ 1003.137895] sendmsg_copy_msghdr+0x131/0x160 [ 1003.138427] ? do_recvmmsg+0x6d0/0x6d0 [ 1003.138901] ? lock_downgrade+0x6d0/0x6d0 [ 1003.139403] ? __lockdep_reset_lock+0x180/0x180 [ 1003.139974] ___sys_sendmsg+0xc6/0x170 [ 1003.140449] ? sendmsg_copy_msghdr+0x160/0x160 [ 1003.141072] ? __fget_files+0x2cf/0x520 [ 1003.141588] ? lock_downgrade+0x6d0/0x6d0 [ 1003.142092] ? find_held_lock+0x2c/0x110 [ 1003.142595] ? __fget_files+0x2f8/0x520 [ 1003.143081] ? __fget_light+0xea/0x290 [ 1003.143558] __sys_sendmsg+0xe5/0x1b0 [ 1003.144019] ? __sys_sendmsg_sock+0x40/0x40 [ 1003.144538] ? rcu_read_lock_any_held+0x75/0xa0 [ 1003.145113] ? fput_many+0x2f/0x1a0 [ 1003.145569] ? ksys_write+0x1a9/0x260 [ 1003.146067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1003.146739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1003.147364] ? trace_hardirqs_on+0x5b/0x180 [ 1003.147891] do_syscall_64+0x33/0x40 [ 1003.148341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1003.148971] RIP: 0033:0x7fb9560b7b19 [ 1003.149420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1003.151680] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1003.152598] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1003.153470] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1003.154382] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1003.155275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 13:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x600, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:10 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 1003.156133] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1003.199313] ALSA: seq fatal error: cannot create timer (-22) 13:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x700, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:10 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 13:40:10 executing program 7: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = timerfd_create(0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f00000001c0)=ANY=[@ANYBLOB="591a16ec78d9e009940ff4b9bee1501d8a7d91a8a6c255683633f96aa56c14d40c5644c25e8e4adab45e7b596b796d212ec796f5d332f44158386c83933bca1032e93d4098e4789e28e6839f795510feaae58268dfd34568eb655580fb6f81d48294fce7"]}, @devid=r4}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000240)={r4, "1d043b96fb91d3495e0b2e9d72672509"}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000002c0)={r4, 0x8, 0x1}) r8 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000240)) 13:40:10 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, 0x0, &(0x7f0000000480)=0x2a) getsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:40:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x60, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@mmap}, {@mmap}, {@mmap}, {@version_u}, {@version_u}, {@cache_none}, {@access_client}, {@version_9p2000}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r1, {0x3}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r4, 0xf504, 0x0) close(0xffffffffffffffff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x2}, 0x18) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r5, 0x890b, &(0x7f0000000040)={{}, {0x0, @local}, 0x0, {0x2, 0x0, @empty}, 'dummy0\x00'}) syncfs(r1) 13:40:10 executing program 1: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x21) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000280)=""/46, 0x2e) getdents64(r2, &(0x7f00000001c0)=""/76, 0x4c) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x80186803, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000500)={{0x1, 0x1, 0x18, r1, {r2}}, './file1\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d91e31b7892f71f3ac842db783e431d605372ea606c253e7c4ff3d013e13614b38210b49077cca3b953d867fd849b8fe2ff2f49a2849f897aa0aa580d9181e218f7c241c047d0a0ef6ba946c262de8447d2ec926ffc3aaadd9660fff9cea9b11f2ff3704df391d2bdb33465bfa785d15ef405e901c59cb0dfc75ae84a5ce85db5f2f363979cb753db158729cd7ca20d8cb5989348", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=mmap,cache=loose,noextend,nodevmap,dont_appraise,dont_measure,subj_type=,dont_measure,fscontext=system_u,fsmagic=0x000000000000008c,uid=', @ANYRESDEC=r3, @ANYBLOB="2c6175c3c94cbf7bc6339972bd2f6469742c726f6f64636f6e746578743d757365725f752c01"]) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x6a) ppoll(&(0x7f0000000000)=[{r5, 0x108}], 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r5) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3e8, 0x300, 0x70bd2b, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}}, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1003.366275] ALSA: seq fatal error: cannot create timer (-22) [ 1003.422828] 9pnet: Insufficient options for proto=fd 13:40:28 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x10800, 0x101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r1, 0x0, 0x10001, 0x100) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 13:40:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 3) 13:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf00, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:28 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0) r3 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000180)={r3, 0x0, 0x800, 0x2}) r4 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x7, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x9, 0x9, 0x1, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r5, r4, 0x0) syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x0, 0x3, 0x256}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps\x00') syz_io_uring_setup(0x67c, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000380)) pipe2(&(0x7f00000014c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0xc000) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/consoles\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000850) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r1, r9, &(0x7f00000001c0)=0x9, 0x80) 13:40:28 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) preadv2(r0, 0x0, 0x0, 0x0, 0x8000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000240)=""/219, 0xdb}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x27, 0x4}, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x31c3, 0xf1e7, 0x0, &(0x7f0000000000)={[0x9]}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) dup(r1) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x14802, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000100)=0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c00210c00000000000000000a000000000000000000000014009203fc0200"/48], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = openat(r5, &(0x7f0000000080)='./file0\x00', 0x201, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0x1}) ioctl$TIOCGPTLCK(r6, 0x80045439, &(0x7f0000000200)) 13:40:28 executing program 6: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ec}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x4, 0x800, 0x12345}, 0x1) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2074, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 13:40:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 27) dup2(r0, r1) [ 1021.278764] FAULT_INJECTION: forcing a failure. [ 1021.278764] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.285355] CPU: 1 PID: 7307 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1021.287035] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1021.289105] Call Trace: [ 1021.289775] dump_stack+0x107/0x167 [ 1021.290689] should_fail.cold+0x5/0xa [ 1021.291648] ? __alloc_skb+0x6d/0x5b0 [ 1021.292819] should_failslab+0x5/0x20 [ 1021.301191] kmem_cache_alloc_node+0x55/0x330 [ 1021.302295] __alloc_skb+0x6d/0x5b0 [ 1021.303202] netlink_sendmsg+0x998/0xdf0 [ 1021.304210] ? netlink_unicast+0x7f0/0x7f0 [ 1021.305295] ? netlink_unicast+0x7f0/0x7f0 [ 1021.306364] __sock_sendmsg+0x154/0x190 [ 1021.307371] ____sys_sendmsg+0x70d/0x870 [ 1021.308378] ? sock_write_iter+0x3d0/0x3d0 [ 1021.309515] ? do_recvmmsg+0x6d0/0x6d0 [ 1021.310469] ? lock_downgrade+0x6d0/0x6d0 [ 1021.311478] ? __lockdep_reset_lock+0x180/0x180 [ 1021.312617] ___sys_sendmsg+0xf3/0x170 [ 1021.313694] ? sendmsg_copy_msghdr+0x160/0x160 [ 1021.314842] ? __fget_files+0x2cf/0x520 [ 1021.315847] ? lock_downgrade+0x6d0/0x6d0 [ 1021.316890] ? find_held_lock+0x2c/0x110 [ 1021.317501] ? __fget_files+0x2f8/0x520 [ 1021.318011] ? __fget_light+0xea/0x290 [ 1021.318504] __sys_sendmsg+0xe5/0x1b0 [ 1021.318985] ? __sys_sendmsg_sock+0x40/0x40 [ 1021.319528] ? rcu_read_lock_any_held+0x75/0xa0 [ 1021.320130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1021.320788] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1021.325463] ? trace_hardirqs_on+0x5b/0x180 [ 1021.326009] do_syscall_64+0x33/0x40 [ 1021.326479] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1021.327122] RIP: 0033:0x7fb9560b7b19 [ 1021.327592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1021.329893] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.330847] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1021.331737] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1021.332624] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1021.333533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.334425] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x2701, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:28 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:28 executing program 1: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 13:40:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:28 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}, {&(0x7f0000000500)="602533f94d6c8889ba3c6cecb1b61047e22a64199f0f3c49c92ef6ac5876951966bc673c2d44b843074ee9f44be3b457627e35f20da044511e2f57f74732c895a3898fd933c4b80a2827a77d597a216c0a97960295adb8d94b23b42aaebf0bd4b4f57b3a40cedf6649d0162deeb999c4d99215d037fe3f4a8ff78d35fcc0a56aba2134d8009d1ead23afd7067ec7331ff601d221bc8fe0d3ac0a2002c22b444ca9bda8ffd014caf005bb229b80a1885c41d41c59ec45d9ef78f968dab9f0fc075a137d1fc7f64bf43565d01e6a8e2d1cc7ad24e6212f2885969932fb7b169238c2fa977bdb2511b07a6112b1b5c7484de9d4413ce05b9a53a38d9b01b55a80ffa51a2c5d03bc2d0fee3921e7ed5b4a5f9950f2211bc1076ccef29a79380c2b242d9868ed8ce8961728ac1ff90b1b381f26a21de9836f9a48002e5353dfcc31b2c2a15faeffbe3f24eade1e567f915b2cdb49f3edfc2db2629f9f7faec7a8c7e7c5e5920f7047bba8eefa5f5b0daff31c39f481a7a13f16d486c0980264c388ce178ad41f39115664daf290f963897bdf6e084160f9420e26e389e8bbed78a55452513a9f1edd7a8ba5bb0d141cbedc0ff628a781fa94750c913d5247ece04173c999b503fae3a1d362f308811f326fc76c5ce47a9b0a66a1fbc95a7f665e01aa923f11bbca4a2f6ae7f8532b880f9f83db30b1681242cda02bf03cb2bf3afaa1662af430a7f8b2bb4944bed0252d31c0710590a300c220bb23d114a2be8297d240298599c8c0594e0b324d89e6a6ae5bd8b451f0eba2ff895967e43426dd67e9f89682fa553f9228ccfabb5710419827058d6bbfe137500d1d8746dbfe93a8bb520e42405a85b66c9e0b8b3065d7efa91229ff311ead9185d7e5a6b7d1a3c959d9a031aeec59831d236fb5e4e5191bea4c4c7ce1c07e62749331e9d82b2c1f1f68fee17525b14d364d8b0642360ee4afece853d04dd7b7c5af5ae6bbd4279390057262e750dafabedca86b410185a51b06de6aed023a2d31caf0290541c59c2ae9a034e417bab88a50d2cfd847997df7ac6461cd4baa1edb7508fa1557cc5c4840832f817cdd33d35c4d8bbc5447973b768383e07680e72ab5b21e77c022358cd3ef24589a4bb65520f3ef7f31ec9e5f7f640fa6c8f145efe73d2dc8a079df71556f2f2c15fc527aea6b189afb6e2a51be39d36256ef9236b668fc70b191403d4131ea6f7b0e463e473f6f343649f2410c44305d0261f1845e3985c33c90fc1c427b178b19b4c4ba31f6deb1d309c2f0fcf689b41d86a2834c77c394b017ccdd8cacfb7ca0ffa24d52b18869698758fa695becdea2d713ecd6cc39cdeafef6aa947ef8c418087fa6c00eb5f36bc743cc858619042766ae817e75aad0058a54bca5dafea4fe589e08235be98c8fbda40b322b002d2725e09c13398ebc51ecedd049e70480abc536c397821d16d433dc5271e7052a16f2e9c511af95789d95bb60d52b867ec318534a1ebd333da930eaa1e8b769c06201edb21f7a7356dd3397309e9120daf1f75b2de73b69b5d83ffcbba106d8426fe39d7e6a261ed8d4f610917bb26a7a5b08aadb7a7539229ee251b242d2d5ea319cca690f5ce12db6ce1b326b91def81e5baffdb6abc26b6aebecd5d0946b022d193d1d21162b048f3af3ba867ef0def3afaf6f7e07ced4d6483fd16af86bddb3f00cc0d4998d86fc1243aa08ab9c46635843b2f862fc9fa5daa708d494af1671aa8d578b67c5879634211c6db634055dab84d1f1335990ea2075a00922bcbe2261cd32390d3315b8aedc0c0a14a026df745c2e27197cc5cb369cdab99db85157628be51d7d3df13e68c4e1c5d3cf550411b0c66d7cf097fd42b1c13f3f1989b8f1491e3a47c37402465ad3411d9c817b1b8b3e85ee53baf05b2a4395005f6c850fd3d036e251c08234883d3ed188551fa3b6faccf6e3731f6c328614fe93e1fa43335f8e99ecfa45d46f25a1672a6f36e8f2eb5dffdb1319552d9b977b38a6ea634a973ae37463e54a5c414500c080ff809428893ab02673b98bb1f459e046ce86e665d77b787f66178680025568e7ecfa2f53ff44cec4cfef534fef39099fa854dda2eb7e26392fa2f7ea83eb1fc9cb3564bf4e6919999059241d12f66b528bff2ed049b4c80aa7b6fd014d049e5cbec4af20e4c2769d9c11a84568f6f243fdf36133fa61e767c3c1e03158b161d15ad6094cf4d371a8b981344a68ded8f7bbb2922f3b174df52151fe569c3ee317e257f96c7924d45231a7518dfe424bc3a75bb79f7713aba4a7dd2b742b99800a32bbd26b5253f925f45e87f92544fb9f470868c8a9616e8109dacc07b29a7d56f94d8d511dc1d7962a2f7558dc0b278d70239a1166d155b946b086cc2cb855299e459132d3a4994ca3e105fe481d4230639cfeff4fa812841c844a07645fd33b4e796260da119e1762b8c9c853d7409983b7643fafe1718592ea22bfe1cd3227fa5751944eaeea91251c77c87eeeed4ce3095386d5796ea8d48414aa9c03d55f023b6fadd817899e53e68868fab9e2524dca8583b9714873afdfbbb1f1053c559b41a55a96f7008d416bcab4c508c7d27be82e94b4ba5a08dcda9ea1019de335a23f84836394a7371596f2087858fc0579af893379ac3a8d010eb35ca19f682b380489dfb9f4d976da44b8e511e3ebd76dbda1f0e89044378db9404ccdf499ffb0f8ced54599f96cc3ba9c0c46cb233548426cc899e135dadd8503b775788ca2a9fc611fffba8c451571f41bcc8c24da387216c71424651b812b1e44cfd17261d31a97caf5331b31f14e0b5f05f740cd7e81d8f0f9c70be3ebd1dd6b307e47768175a3c13e8bf48bdac086b93a1a731c8b45ef8c78c211cfdc815dbcc83f6feccd7731ddc0859fe262603608047c49a3e5e8a147285196efb5d9678abd62a1cf4c7c1e85c788351762032faaebfba4e5aa78e390d8bd31302f39564d9fe4d19208e0a77cfecd53eb6100f8b1986cef6f35d010cd382b9e4fee1398400c16b5baca28cf6ef5f049d69eaa541c5293e2661e99388440a05b9c38bb75109672b545ae760995c35a38feb9c203a82ba5ec55b242270aed928e1bbec210384a29e3068d42aee5ed6d3367812f1202f9c13c34fe619bd933ab5e342341e51fb44d9756960bdd681b0e4a597a08244488cb70ba6a3ce2402c63b4250cbd56bef9824e391b0cd3f6b1d15e36136129b976570cb89a1c870a9394443b3b618cb372904312611d77c230110eb4b0e17fa6da0b6fd289cb768085d20abc67ad679b68d7b8981c47487c58c768f8a77fa2bb62fdfc2587b0bcce66390dc80284c211781d229e3dfc0c313fc24e564ca701d43c8d31b59b5b667df56d76277075ab94b46dcbf1aba47ee9e4c1caf236767b93faef69038550ac89df3e63f9b65a5b45218fe97ea7c4f4ce7b412d9d0802703a185d45312ddc0bbd4f1e6215d8586405450edb8e9536c68b9e95caa4b1b1ca8991462f5cb51775289227fa3476358bb3a262ec7439884054cd0c213978dc26f6039f25041438fbc6f96045d813ba55f23922ca20b2391227da26d078dfa9ca9c8a1db8967b88d46cd7e7ab3bbb17189f3103fab5b4fc3b87c41fda5aac307c593f976b7c8478e58ce7962d90dfcf264f774d6d43ed20966cb3a104fb0b720c6c92a8a5371af537424364aa54ca84ead239aa747e9b2a72fb595bc4e888883efd2bec39aee42c8885f450912bd8aa63ca14ab79fe2ccd392602954fd887a67eaf11fe11b1d94ceba63a7bb180cb9e0139f59bbfb580a3d574121556c6fce6054640c57493f78b55cd8cad715dd65e50101feaf04d11d5590a8ba309c316d109fc71357e105fa604feb73de5b8b74af1d7a04701fa8485856b18dcfd99deca51dd4784c80a0e", 0xad5, 0x7da}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0xc00}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0xc1) r3 = getpgrp(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6, 0xe5, 0x5, 0xef, 0x0, 0x5, 0x420, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x80000001, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x2144, 0x6, 0x0, 0x0, 0x7, 0x0, 0x800, 0x0, 0x4, 0x0, 0x81}, r3, 0x4, r2, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r6 = fcntl$dupfd(r5, 0x0, r4) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001200210c0000000000000000000000000c0000000000fb1c17b033f681fb2f00000039d9f7c199ee4a52e0008d2b1144cfbd6e63a795f4876400000000100000ffff00000000"], 0x34}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) ioprio_get$pid(0x2, 0x0) [ 1021.629006] loop2: detected capacity change from 0 to 41948160 [ 1021.659870] FAULT_INJECTION: forcing a failure. [ 1021.659870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.661583] CPU: 0 PID: 7314 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1021.662488] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1021.663524] Call Trace: [ 1021.663867] dump_stack+0x107/0x167 [ 1021.664328] should_fail.cold+0x5/0xa [ 1021.664818] _copy_from_user+0x2e/0x1b0 [ 1021.665344] __copy_msghdr_from_user+0x91/0x4b0 [ 1021.665981] ? __ia32_sys_shutdown+0x80/0x80 [ 1021.666571] ? udp_v6_push_pending_frames+0x360/0x360 [ 1021.667228] ? inet6_sendmsg+0xbd/0x140 [ 1021.667732] ? inet6_compat_ioctl+0x320/0x320 [ 1021.668296] ? __sock_sendmsg+0x55/0x190 [ 1021.668811] sendmsg_copy_msghdr+0xa1/0x160 [ 1021.669380] ? do_recvmmsg+0x6d0/0x6d0 [ 1021.669877] ? __lock_acquire+0x1657/0x5b00 [ 1021.670432] ___sys_sendmsg+0xc6/0x170 [ 1021.670927] ? sendmsg_copy_msghdr+0x160/0x160 [ 1021.671509] ? vmacache_find+0x55/0x2a0 [ 1021.672013] ? __lockdep_reset_lock+0x180/0x180 [ 1021.672655] ? lock_acquire+0x197/0x470 [ 1021.673187] ? find_held_lock+0x2c/0x110 [ 1021.673742] ? __might_fault+0xd3/0x180 [ 1021.674242] ? lock_downgrade+0x6d0/0x6d0 [ 1021.674767] ? asm_exc_page_fault+0x1e/0x30 [ 1021.675322] __sys_sendmmsg+0x195/0x470 [ 1021.675873] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1021.676437] ? lock_downgrade+0x6d0/0x6d0 [ 1021.676993] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1021.677626] ? wait_for_completion_io+0x270/0x270 [ 1021.678240] ? rcu_read_lock_any_held+0x75/0xa0 [ 1021.678825] ? vfs_write+0x354/0xb10 [ 1021.679294] ? fput_many+0x2f/0x1a0 [ 1021.679804] ? ksys_write+0x1a9/0x260 [ 1021.680287] ? __ia32_sys_read+0xb0/0xb0 [ 1021.680824] __x64_sys_sendmmsg+0x99/0x100 [ 1021.681378] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1021.682030] do_syscall_64+0x33/0x40 [ 1021.682502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1021.683147] RIP: 0033:0x7fbfd48dcb19 [ 1021.683618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1021.685937] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1021.686888] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1021.687786] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1021.688677] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1021.689587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1021.690487] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:40:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 4) [ 1037.571663] FAULT_INJECTION: forcing a failure. [ 1037.571663] name failslab, interval 1, probability 0, space 0, times 0 13:40:44 executing program 6: waitid(0x2, 0x0, &(0x7f0000000000), 0x1, &(0x7f0000000080)) r0 = socket(0x2c, 0x800, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) waitid(0x1, 0xffffffffffffffff, 0x0, 0x40000000, &(0x7f0000000180)) waitid(0x1, 0x0, &(0x7f0000000240), 0x2, &(0x7f00000002c0)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)) r1 = getpid() waitid(0x0, r1, &(0x7f00000003c0), 0xc, &(0x7f0000000440)) waitid(0x3, 0xffffffffffffffff, &(0x7f0000000500), 0x1, &(0x7f0000000580)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xbe}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40040) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000008c0)={<r3=>0x0}, &(0x7f0000000900)=0xc) waitid(0x3, r3, &(0x7f0000000940), 0x80000000, &(0x7f00000009c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) waitid(0x0, r3, &(0x7f0000000a80), 0x2, &(0x7f0000000b00)) r5 = openat2(0xffffffffffffffff, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x80, 0x10, 0x4}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000c40)={{{@in, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000d40)=0xe8) accept4(r4, &(0x7f0000000d80)=@can, &(0x7f0000000e00)=0x80, 0x80800) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 13:40:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x30000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1037.573113] CPU: 1 PID: 7354 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1037.573960] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.575014] Call Trace: [ 1037.575349] dump_stack+0x107/0x167 [ 1037.575815] should_fail.cold+0x5/0xa [ 1037.576282] ? create_object.isra.0+0x3a/0xa20 [ 1037.576837] should_failslab+0x5/0x20 [ 1037.577318] kmem_cache_alloc+0x5b/0x310 [ 1037.577852] create_object.isra.0+0x3a/0xa20 [ 1037.578404] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1037.579036] kmem_cache_alloc_node+0x169/0x330 [ 1037.579598] __alloc_skb+0x6d/0x5b0 [ 1037.580047] netlink_sendmsg+0x998/0xdf0 [ 1037.580545] ? netlink_unicast+0x7f0/0x7f0 [ 1037.581068] ? netlink_unicast+0x7f0/0x7f0 [ 1037.585661] __sock_sendmsg+0x154/0x190 [ 1037.586149] ____sys_sendmsg+0x70d/0x870 [ 1037.586674] ? sock_write_iter+0x3d0/0x3d0 [ 1037.587186] ? do_recvmmsg+0x6d0/0x6d0 [ 1037.587664] ? lock_downgrade+0x6d0/0x6d0 [ 1037.588170] ? __lockdep_reset_lock+0x180/0x180 [ 1037.588782] ___sys_sendmsg+0xf3/0x170 [ 1037.589282] ? sendmsg_copy_msghdr+0x160/0x160 [ 1037.589877] ? __fget_files+0x2cf/0x520 [ 1037.590357] ? lock_downgrade+0x6d0/0x6d0 [ 1037.590857] ? find_held_lock+0x2c/0x110 [ 1037.591355] ? __fget_files+0x2f8/0x520 [ 1037.591840] ? __fget_light+0xea/0x290 [ 1037.592316] __sys_sendmsg+0xe5/0x1b0 [ 1037.592788] ? __sys_sendmsg_sock+0x40/0x40 [ 1037.593336] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.593946] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.594583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.595207] ? trace_hardirqs_on+0x5b/0x180 [ 1037.595742] do_syscall_64+0x33/0x40 [ 1037.596199] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.596851] RIP: 0033:0x7fb9560b7b19 [ 1037.597316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.599591] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.600561] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1037.601468] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1037.603005] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.604728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.606808] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:40:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 28) dup2(r0, r1) 13:40:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:44 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='sessionid\x00') ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000001d40)={'ip6tnl0\x00', &(0x7f00000014c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x7f, 0x1a91, 0x41, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x80, 0x40, 0x401}}) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000004a40)={0xffffffffffffffff, r2, 0x4}) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000001b40)=[{{&(0x7f0000000140)={0xa, 0x8, 0x3, @mcast1, 0xfb}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="0f7c10d8b3b8b38e9ffa320416bce615c39c6bb59999f6b665780c4c1e39a59c0cb5cc60711bdab96bd855741f430507f687e821b44e70aed7cd59e614974a1de6dbd1e4f8edddd84d5bfc307fb870aab091596443a3063dd970c462500c1329e688ceb2b47cf6d80419d9e275a41b43de9e7cd0d276e8fab165504097bac0d822aa759df3ae5f9f48113d0581ca67", 0x8f}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000370000003201000000000000c20400000000c204fffff08600d883cc5e940000001400000000000000290000000800000001000000000000001400000000000000290015580b000002e6ffff"], 0x58}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x401, @empty, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="f065c4218694d605143ecec9fe483e58eb26bd8fff99a331c44e67287bc224383df607d3e17bb119d0cdc4bdef7c97cc36963fbc4388bdc374f050b91d1742e0a6fea2cd9a0860d2b6baee19b9f0bae2ddd8f2f3c85a3afd57103b5f6d6a90e1cd479bf89a33e90323d3c9270a2b7e14129b33e5986680f7ecfe0271d03f7ec55934f2dd47e386dccec372836a15ec688b393c091308d2ed338d2c15bb62205ffc3094e16c37ae3f44ee9ab4b0855c68521c25c228f295bf855401ade5d5a8c355cc5aa2937f3b3f8bfb6f5a667ac08d575004c7248a2b9aa8d88ad2c963b290e5", 0xe1}], 0x1, &(0x7f0000000580)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x2b34478379b9384b, 0x4, 0x0, 0x40, 0x0, [@empty, @mcast1]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x73, 0x14, 0x1, 0x77, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @empty, @dev={0xfe, 0x80, '\x00', 0x43}, @private2, @private1={0xfc, 0x1, '\x00', 0x1f}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x401}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x2b, 0x4, 0x2, 0x4, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x1, 0x8, 0x0, [@local]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x101}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x10001}}, @dstopts={{0x38, 0x29, 0x37, {0x2f, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x7, 0x1, [0x0, 0x712]}}, @pad1]}}}], 0x200}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000500)="3c1e05e38c4e6971833e0d1af6b6665c6addaa992f47dd877606a39cd99b8a97767ea20cbe4305173d6dbc0ce5c841", 0x2f}, {&(0x7f0000000780)="9301f6c03687b17e51d31b25b7bd1378a0d99a3a58c4bf4af3d9d043c50bc7df22b0db4aa35d2f3fd08c7654504c09743556f6e1d68d21f560c9fac36bc6844e2bef063dda4ae3bc842328dcccb1d1c5bfb73aa04b8c459d118186083f0ab3d7e62dd57255cb0b98df3d11982a62ef4842909493c409a6af6bedb96bade1403951fa808c2158f04056978a1bc9e26dd9eda67297565c69b8856a4a7f721e8c48088a38d3e767f432309fbe0e9e14e9daecb82fa3e83089827fc8517ed9aacd", 0xbf}, {&(0x7f0000000840)="84f1cd2652d49817bd85d474851088739f98046ca7b69a90eed2e3f30c83018bc05a11dbf5ed53f98381f0a2657de57c8763d4099d3269c3fcd6cb1f79e3b6514b0332a0ccedf3187537e56628a3b228c17b1437349754f99770f2115fa6f7db192636c81f25c4b3672793c9d2ec6a4e4a84232d30f9a2821c5c657eae7e79b884ec73cfac3a2cc86b182cec54047a831344a61ba9227eae3bffd3c4bb7d7c7d33a3fe200d872bfd35ea00283e2e412a26af", 0xb2}, {&(0x7f0000000900)="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", 0xfa}, {&(0x7f0000000a00)="68be6b0060fc41fbf6c80861de1d75c90ce8e8ca1aea9316b64fcf4da28718e6cfeb9119ca232fb566ff472cfa109bd949bff615c6d1af5d83224be33797d2d81389dfe7c8e4a5839ac49c5711edd8f6002019dd2ffd76ccc55d30ff67d14ef4dbc8ca453fbb182d0b2b69d01080692670155e56e91c971443a344c81531433009b15860396af378891dd8", 0x8b}, {&(0x7f0000000ac0)="f19fa02abc4b7987925fb961dc219bdfd43cac176b9d9cf2982eb478612ef4e877", 0x21}], 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="1400000000000000290000003e0000000040000000000000680000000000000029000000040000000009000000000000c910fe8000000000000000000000000000aa000100a432f04adf3c5e8da75927c33d5a70e97b6ff90dfd6931a9cc9d979152e9c66dc0b4a26c7d2e2acf9e3080bc497512a64a5e10c700000000000000745efe4b3900134c0fd3c0e83c830547439606f35400f8bbe822b55ac9279dd255272f9847dd5fdee39253baa151d976cb48cafe35ff682059b7b8df2c87fdd9a57032846e5db612f5670c707f8574e81b4cf42a"], 0x80}}, {{&(0x7f0000000c00)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c, &(0x7f0000001080)=[{&(0x7f0000000c40)="c4c8b572af29a199f73ce18b4d3646f99464cd480626738cb57b26bee1363c5ca2ba03c2b00d5541f5f3e275c402d182223ea0c8616a3bd0f820100be4fdcea5acd9f3dd82379c919ffaaf8d1cf567bd27ddaac1367613198f94c9f3b1895b92260d36732e0f7f456101b807297aeee89a6723a1f9a2b88773dff7b6fd7dfb053cfa00f062615606209d1da8281cea0046763819dccbb1f55786696e4a1c1d835e348e610bfa009c36ced16321c6b4229205cd2ebc68973ed47228d0a1dc1a311d7fe19b50a88315c6796770dde768b55ca5cc2b", 0xd4}, {&(0x7f0000000d40)="8b53507e6db8ec9cfdb2d3af233aed7e682b37343596d27322d39ac195bc3ff29e521447b0bb9d25aaf4348118b862f2d5a75ab524eb1e95a8d26c463b0d4551ad332c0f77076bdd3ad692b5588002b0773df2e36ed072e2ba034ea10933f457209a8feed80f98f48e695f99f7df19f6a38e6420700725f9c46db43ad1faf801a87a87c5c978b00b1e", 0x89}, {&(0x7f0000000e00)="4d484e5de30521ad9417e13ec1916d393084c9e9c80558177fd8d8d8710be64b5b38cc7acb1152c6c09a", 0x2a}, {&(0x7f0000000e40)="cad85211de3a575727397b4da59ee9b05e77759feb2bbf8dbe22cca92a624929afc8059fe1742170b19424bb80b9dbf7c6d6cde25fff98a0ef2cd2613b9554a34ef57ba1bd4247233f83c4e1f86f46221739c6680a938a36a3beee1b60511a50761401a30cb1054ce8fcdcb18983f99e8042ab5080b3738af703421e605b29b156a7677163989e50634fb3dce7287905914ef94049", 0x95}, {&(0x7f0000000f00)="56ffcaa7095a54a4a79646582ebb31db47db22642b1ae8f5614dacb1d11f4dd9218a7de2661a5ef8aaf793d1681d064a2b7294d4382bfabd8d2227eafa9c91f8e55b121200bfaaa083db3f3073bcda135f2bdf8fca533de07c9530ea3ed90bdebce7cedb81a95bfbafabaeacc5749c73ec215eabbe6947ad6ebdb5d4497accf651d6c7", 0x83}, {&(0x7f0000000fc0)="5c108d0839ab16ff444f228715", 0xd}, {&(0x7f0000001e00)="f56f36e53c33ae60ba8272699c4d366ea2755fea78c78518870c7fe7e3cfdf369b909e4fe6dd03144867c15d2cecfde2708d994f53a333bc89e2bd0d2d39377dd5798504750d9e0c4e3c1aba60fe783ea58ca34d7067b818f147fd1fd4e4fa7a8c46303743b719e6ad65cacabf90c450ddd6aa5d79b78ed29602d3d46d8293a557077757ba8045ac245c127b11b9379e3cbc9023e369f0c3bda0ee683b38808bc4532d2c0f4c335af3aea4e0967ff3cdd4cd2ad45e34304c49c525f4d31a7ddefa80323933bf3324331705429aaf01ac0d412f1d9e63df96faa66daac0dd747537c55a49a28ec5bc172bd70d9266d0b72eb562a98fb0cd4a23467d169f40484e2b6907b85582fa73e24970d01b2c5f714886dd7016c0fd9829c0db8ae874260fe0ad5baa46b193ffe4985e45a87d71e0cc6568f061c5185a6b70a13caad18be693ce050eee3fcef249470589b6579b80a684428aa35782bf7dffd13e76e1b753366c637130cf6651b8e174d0810f7a4e1edb3cabd901fa610aede98eabb7000b73f50f71c5834a190939c1c2efcdd3aef6cd1b79fbc6324bf90c59ef2d9b3c313dbcfe3b73641c644eb5a331879c94a93c1afa949d73e4d2ab56fd57bd7ea86dd3651b2314a73fdfcfa0c5ef9cdc74d282a2167991627a64007bf328a7c5c9eaa26f8fdbcf6f822c701b30eb8d26f7d26ee2bcee1a0babcc06439e6be1cb92cb75bcd88a948a4c5e4308a29029a0fff2efae4446e9c93ed58641754f5fe5809d52c41b0d5a55990976e5a7a9666a1e820a8f590a560c253073d0babdf166e7b98e3a231ec4aa3fe450bc4668d4eddee8f621d73eba053e12416cce1a07e9dd91efdd697ebe52b83d41f0696d8cac505ac89557db38b5e8ed5d38c857a0604616dfbc2a2388dd1543c8cc4a157ba89a71990c446314f940d4fcc647eefb274ba8287bd2908699d3808713c7baeda5d9e2bde0096ea22c7c0eab4bd57716821620f06d523e4cb75a92377520bde882cf85447dc395dba37ad6e1a37532722f82ccd9faf9d1f9d60e9ec112f605e1de6306a632927245c03340cc5e846c230db1bc259b0ecc3b4d659e7aaa2435ebd59866999f9036bec4d6962468fd75aaa77ff97222e778051cee72ed8c840fff61928dde81e1ba7039eb93afe4906886dadf564765d8fc981cc83c5c4bdd4c23c11e156ff0e4b2cf92f5632bced3e5a81d3c0a51fdd92cc0b578215cb13ce947665a2517cc4d803fbbeae1fd1d7a52e2b3bb300824409d8cccb5cc86bc7e70d51140127c48ad8be8a13780b36a09f5e7078f2e3f9e1b33a2e2ec8a1b0150fd4696a7f22c6a0676e80958518059523d9ba5f8104f2052393e097d35ef1f1c568790d035fb2d182c3f4618647f2103cc75e98d427b54ee891926bc8310a365640045de799af573f4972c2207ab1b0124a01d10a0c2a46d05d7612482f56f8f0b08b8b6eed62030ac3f201f11f47802e1b493436bcbb5c2a5defea3a536e95899521f79029b899b79da8081eeede0b42cd4c84b34fc6e5db02af3655bafdfcf1d8e7eac4e380353f20743e8ce80fbb6bf17b58d93d1477a783c1bf0386bcd5efd86a80f2cb89643c3f6ff8aff62d1019bcfc703adea33d9a7d5d8c461c7a5c6e1bc0035c6bf612e97a9b1fc289d40796fd7bccbce4d9f6672362885873df9d2dee3c6ef864f16ddd538e0f52df6ea1c57e6242896cf96e8c4c9a0469a41eac7dfe9ebffc1a6a6fc8aef26f7db6db877bcb7cda6b0f22650a1095489e131ca367f74105a264ebfb7038259fab84a5792608c4cee06f46d86fa8d6aadaa1b72d5efc97a00ce81cc1310315370cfcecae7a58d1fd8a75b295e7d6399b257871536eb64831987e98e4a9d4858d48549ab1bcac9d5eb53fc955a9550e81e4300e4e5960b38cef2678ee1a2705e3332ba344cf32a403bd1ea47d08f3f6de26379a430a295b01b2733627e393c13b114a1694309a405a2814ea00e49e0e471778ce7e100fc6255e22ecbee49e1c16c7346570d4dbb9c567c2b985dc6b372ee58737b8d9c31f6d23abf315236042b8bb15610df7bfb20d0408329439d8ab10152df32d463bd414a3f621c162880b38243b7bc3da992a51b07e6e6448957a4f37d98ec294ccef7e023f89fb2384240d43d4b3ac01e86043e99c569f359e66ee315b99a54d8f7333e1b70fbe36e03e6bc2d036eaf7194c28a4feed3065119af895fefea216e365e54d4d474559dc37bfe32788be1abd4f1c594dbd81763c404dce428ae101c10a74e86486f89f2c172f0ca5e020886b31bd99196d494b80495e029a24a3f54abe12e11f11af30faf5f7ed7dc7c86e435d81ce6dcf6075d37dfb9e7fef90396291e073d0be919e8c962d35f574013b6c9489652508c7c183d471d1c5315759ccb67ea8f807f8a640a9c416e532a3aa452bf89a48239a98e51f463f77fb50e65230a4c89d6c7ec3a9d15b06423e1cea32bc1ee34733cc4eb01451549e97d9df9aac86bdb69147dee3b53cd90be115b010999c62dc25f11e861c8c811361d19a3e4758a8db0a23f2b3adc9cda00d5f13bfd1fc90db159bfac0e4981fd18ca4d995d948330f5eb5ef578108af61866a6d83cdd0f47fb25155ff14d5c2ffcaf0a56bc2e18145392db99bcbebc273bbb0f9c68fead43f3cf69175c6e1d0b3c34f1d200b3e95b5ea9e4c50c7464aef489f0cd7384888a3b509756a961b605ed1267ea684e600575269450b60b6502931ac4cc6b147104d3657e69d1e8a5d4433dd61eee983afee1312fed777079d7509f099fdc0639d4d6500fcad1ec00ba1384ccd0556de6bd060172e5a203090561c2beb26bc68c9a2ae511cc1f0e8c3d4c04e1cb0580a31d006186a5ad6db85ba1f7ca589601449773c6db316029ac400b4bae8df7dbd4855e14951614ec791f22159914c4b5b60eb7f43fcadc3c2e7c0dd439af7c485f2c2ac8814060908d38b95574e03e789c69173a74b69a6b8d23e341b274d01c0007e7ad5e58a0c68aa86abccd905afac8dd7e47ecc108a0d476c28f9306cfa71a1e3ed63d6dfd189c2079eca686948a02d82f65fbfe7595d4549816f7262cc8595dff91ed5bd2a7932e90cebe3bdb2de23bdd8c8a585492ef8db0a336d473ba9bba735c5740dcc2b204d64cc48a3ac82ad1d275e93382579a1b2290f3b5800b182befc95fbe2950c4dc37996902a97154c3b30e5ea9c55bea08fe6459e7d07303988344ceda2ff26ee47e60bbaa139cd3f3a97c7ac3ecca8a0c70169396c08190c417fd2be5cda198006b46f0014c817f56bf07a3e70b78e4f8d4307bbd1f103e8dd6a32edcdf8da1515ddb7764706a7cd269efb4828575da77b6574f1ea8aa54057e9428af0967fb4b343f42bc0d9649c367f996bf2069d7c1c58460b205e588797fbd72279da47bd44bb4ca912699b4cb77fe834cb67e16b4ebc785031a18bbf8c38e5b730e008cecba3fee33043b0f548215f0dfa92fd790dd9a257b6af44236ceb926471611ba2a48c0409fd321fd8e89dd74b4aef9ceef39c81ec43e2323887bb73bf6a7e7068fa4125e67390996537b87200920df55b1ef9e83d1500977caea485e14b52a5d7e22c330c5fc4277d6fe02aea0c2d4c6b122557eaa434e9ab525d869f13466a2daac7ab66f9dfa55671527c8fdd2cd5cac853816456e333e865832ed46ea157d45bb92e3e783acab6972e7704eeb6ccbed563ea67de514887c34ef9461f03ed07c6e81b0e51fec42c7cb5ac588d9b6a80797e3cc3997e21ca7d8fc0faaab9a88fad75f992567bcf33f6ebf884f63cc2088a8856347d985c6df94f93ee3dd44b7d00a60a7c37cb681d2323744f5de9b236f2d6db3bf500543f702e06d90a534d7424dab2b807633d1c07dbb7b2fe7ea887cbadcc61046ed3f3b65c74a71cd4b1a48dbdf4eb24f41fb52ed76b5b18b7c3b9fa59c398b2f936695e569e2f3b0b40ee680aeda5fff3345555774a0b3a7a4b80e225997a47f97fceb3355428a6275d99dfee6dfb9726d1f6d2a0f0cec49cf81c46ba02f367bb625453074e5f24d96aa9345ee3abfb7c3f6f295b6dcb2a1d51d7ca9147ab45a87442ead40c19f405a50494d11e9ba1ab80831f9afb3812c7b4a419301187066b0b15ac5f73f932972b6134d87e419ba1739dcaf7ce41a238f935c2b521cb835a649c9e39d9c68dd041d7e6320e9d4b256582fce487cc458b7bb6e27597e4f6dd0bb00675ae74d5cdae758ae7029c15699c8abf0999f8ef97df59dc6ae5d3065feac507ef0e219d462bfd430856eeca9fbb9b73ae81301f0e400050f60e268ca0b3abfe148eac4b11768f5de94d03dc63fe8e9abd5488c228844ec81a5294453416a140e7ebbb7c561cf01ce62f86bc67c2686c8a70af183306412651caa1edc96f59a256605b4d3505e26d7c90769401109a1cc517e06d1a3489a31c9bf8bc92e8de13af4ca91ddfe533f3fdad977f6d25e42315be08474070b729eccbb2c08b46d2d0a63a0e8e7ce56f6bb4971b56bbc17c6818df41261851e3b4b64cd534df99d910e9dc2ce2fa0d44eef0e3aa065e00fbbb053eb87d4a8f274bc0a9ecfe83ad38d1f63a96c02293429efd73e9e3cb098875a2de3c00404e17f3b7baac1a37241a0a7ff434b298177ccfc5fd3c5ec593e1a10064046e5f5ea675994cc487270db4db079ccf046a8b40a65b7245f1e4cde6cf7253ec860d4879662925320420a36eac91866edc0faca9198ac269f772502e8cf8aada3a24dde89de95723f5805b88b4d1319d83c9e7940f2b3cff95fd8e9e311db1890300eef04c2105436fca7a7ef0aaf442ebae089c8480b28bfbf0e84e555dba87236950d7598d77e590ff3bd919873e643fa4da40a587e852e9a2822983c164feab76993c196eb80ed6b9101483b667f41a90b18632a8624841744eb3247eb5063a34c1c7e636ac29527a90fbdfc72f32ce224f14086a6c4b887f06ccc3cd3e4d5e74d6ac72b0748a54fed0a5d7e9ac10c32ba182f06209564d8dd4ff11c8c1a66dbbcdea31f1918086c362221b8ac6e1d4a03734e8742687e9eca9fa9952c3d24a80216dc63e406922fda4d45c7de739aa3482d36078c53a9b90bb5268369a7606ab5989140f5dc8b9e247680d9b2a3810661210e0f4c811c3b12bdf37461150abc3ca388a0d51c99059998ca2cfb9fc9a89904ce98924e1b76e49052c4533b67b7ffcc0a6d71507c012923936311936dd40597dcd8914245d536798639a36569745f600926029c62c490c347ff42cb223a168f6a8b9e54c0ff7532ce9ab96d51e5f1a54a2cea11edb3a5252627127c2d62f68c5c583de1b96785ec4019ddf76833ee968f0c42d3cd6df51e7630ddbbcca43d4426109cbdb36267b48beb73ad229251f66493d474e25e756e5d8edf5a4907af0bcdb159b97de97bf1d375a33443c53d773058261151b87157bf0c3f99404edd2b05b4a2834242c761a873aa9f779f85c769b1b14df71cfbab5d26c7b4d0e2e28294f113bbc9e4dc3f868619f88976f1c97ba3db94f38c165f6d6c40525bb27147093fc5343ae6e3068fef6ac4ff9e2f2f6760ecb39026accf5a6b2b41fc61829165b69311c7a20312f21d10b536bbb28f75714bd19b4a8ec1c799527ba208ed9f52bdf6fcfc3bae74d42217d2fb312a1a517adfd55167a6643d7edee827326eb9ee5655a9d0fc388a7a02cf85b2c3706c2533d796f1ac241785b4ff21f1b5d7f8ef0d92706df68f8e5a8d7fc7723537ffdb11908a294464aff0f26bb5572eabb420eab8588b264aa8b6", 0x1000}, {&(0x7f0000001000)="fd96242e6e3774efe127f939ee4669cf1667b67dfed61dde9941253e9492f115818db9a4570dfc48d2304c25e04334b7d231b7b5cd89471625d46cecc8e9402e8f8d", 0x42}], 0x8, &(0x7f0000003ec0)=ANY=[@ANYBLOB="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"], 0x1d0}}, {{&(0x7f0000001300)={0xa, 0x4e22, 0x1f2, @remote, 0x3}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000001340)="ed0e3417e841abb3684739f91a78e46d8e348e05e4165d048b2b9e09059d4a09ad6158647a57e6f4220d75ed767b0a0fa926b5b6055c1476e59d62680b94c27faac49c5a9f975a21f705526554d1b6a821b7642fbb706e74ae0c12e8fe41ccf80c47d0bd90871166fae9ed44a4a4bc7182ef699e15eea631e4728df9a66f54d42ca3161d694eb7b92f03b5b1289286ef0802c24c37b4cca244bbc6739f4e78cf156148b4", 0xa4}, {&(0x7f0000001400)="da7b7e99ee51ed2f87da", 0xa}, {&(0x7f0000001440)="1db118e0da1eba29ee38c0f4f1beacf1467ef4f50eead5c97b084785f5d7490601fa8950be44f91359ea41215a6d07c5acea49affedce021dd6a7d9fb3fd02f1b555699e38e3aa7ebe49b6776c7de1dcfe9445ba", 0x54}, {&(0x7f0000001cc0)="1fd030df0b5ba2dcbe5efe66801f5410233a4907712e14d63d0f003d5d0b8923d0ff3be0d6f3edb21670d48aa521e2021097db7667d7f7d0a4fc5cc029a90e6bd0cb10fb094b10fb900e3604f6fdca581678e07d68a2", 0x56}, {&(0x7f0000001540)="c3db205a8c31f8b7aa91fd64d5cde692b0f893be6e7b1e16f301dc9b1df8309177a5f03c045c125dbb87ebe9092557fbe6659aeeb2292c466b6e32adee812a22f2095fc7c110a85209dca8302961a6ff2a79ae310025d0c209ba82809dbb1bdffe12e7169ab1ac5783913a4ab9934925579707926c41347f2839a29059ebb95402a607ba9c2f14c3d865903544dbf4b3deda41b0c4382fac5fae6d819df988439ba0a1f9fdd4521bcc7d0376484c32d5a7ae3f7fa0bc61a910277a023477eb", 0xbf}, {&(0x7f0000001600)="7202c3e9cfb867c57f4709bc4cd1a59705e14fe7fdbe37373761da0e862ae6cce82fbb0daf3745818e4ef1a5f81d1685f5eca085aae4dda4b4e9188027e3d1bae96c3e36c4738e5c4e0c9c313a6cd621dfab862a3bfd55f49aaac62d3260e997edb6cce4689492fd1086c1d3ae35ed8c1bd5da67c51df17d0796ada67ff792408691f3048e801822", 0x88}], 0x6, &(0x7f0000002e00)=[@hoplimit_2292={{0x14}}, @hopopts_2292={{0x10a8, 0x29, 0x36, {0x11, 0x211, '\x00', [@hao={0xc9, 0x10, @mcast1}, @generic={0xff, 0x1b, "ee6a7466c52c0570075931cda544cb8828aa53c7d76567eed0b0b3"}, @jumbo={0xc2, 0x4, 0x3ff}, @calipso={0x7, 0x28, {0x3, 0x8, 0x1f, 0x7f, [0x80, 0xffffff8000000000, 0x101, 0x454]}}, @enc_lim={0x4, 0x1, 0x6d}, @calipso={0x7, 0x28, {0x3, 0x8, 0x3f, 0x503, [0xff, 0x4d55, 0x8, 0x0]}}, @generic={0xff, 0x1000, "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"}]}}}], 0x10c0}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x4000, @rand_addr=' \x01\x00', 0x20}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001780)="e2b3624ac7a110918103553d4e49ccd851870e3649ca3093ea7a48bb7a601f3db49cf1a16508917a0bb116fd1757cb8b5d55ad620b87bb1cf045121e6035144992cb176733515148d18cf4f3865682e28cfb6f16460712251fdc296c7dba5a6ff7e942b50b", 0x65}, {&(0x7f0000001800)="4f0c337084e8e764229ca3563254791b10154116899a249b09e41c76cc8f987500d611885366f816fd3849a40b73d5deffb16825f612fbfce05fa31fa370addffd8799013099a833efbec93f935ecbb0b9d5e8c5736d47f581fe4a50d41d5cd7c9fcc44ead9224e2866df6e946374d652cbb3875fc1c46129ca08b42c784cbcb134d53a154cb9635411da196", 0x8c}, {&(0x7f00000018c0)="53e82b937b47dba84aae033f81", 0xd}, {&(0x7f0000001900)="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", 0xfb}, {&(0x7f0000001a00)="5d928feb2985afae117ae45916c25b6ef83acd127deec44a997caf6187d2a1a5254d589d82173bd4dfb34b783294c37ee1a5d07bfb0a64554d65392681ef58b6b00f2416bd4cec76fabb9350729691a1d2a76507f037426c2633f78f7b61b8e643c670e0c1c63d99c74a4593951bd8400371368745633be9dad482bd48e3816d7ed30e032e49cc335ca09e8f53a9690208e080e60f695feb7a5307afb88aab1fd45e1eafd97d665c233cff0e7b7a26537e84a6d61819a6fee36001d1ab9d", 0xbe}], 0x5}}], 0x6, 0x24) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4ea0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r0, {0x572bdc8a}}, './file0\x00'}) fsetxattr$trusted_overlay_origin(r7, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x2) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x0) 13:40:44 executing program 2: r0 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) fcntl$setlease(r0, 0x400, 0x3) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"/24], 0xc0c3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) 13:40:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="eb58906d6b66732e6661740001f520000200008000f8000020004000000000000001000001dba3e85df86f21a07ce579da26cf09c78205916d0b72c53943bbdc2a14752841", 0x45}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x12020, &(0x7f0000000180)=ANY=[]) [ 1037.667223] loop1: detected capacity change from 0 to 32768 13:40:44 executing program 2: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/94, 0x5e}], 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000280)={[0x7f]}, 0x8, 0x80800) process_vm_readv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/148, 0x94}, {&(0x7f0000000000)=""/42, 0x2a}], 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x10d080, 0x23) fork() [ 1037.695626] SELinux: Context � is not valid (left unmapped). [ 1037.700278] FAT-fs (loop1): bogus logical sector size 256 [ 1037.701955] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1037.710332] FAULT_INJECTION: forcing a failure. [ 1037.710332] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.712093] CPU: 0 PID: 7368 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1037.713100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.714392] Call Trace: [ 1037.714786] dump_stack+0x107/0x167 [ 1037.715316] should_fail.cold+0x5/0xa [ 1037.715873] ? __alloc_skb+0x6d/0x5b0 [ 1037.716431] should_failslab+0x5/0x20 [ 1037.716984] kmem_cache_alloc_node+0x55/0x330 [ 1037.717660] ? __lock_acquire+0x1657/0x5b00 [ 1037.718331] __alloc_skb+0x6d/0x5b0 [ 1037.718896] alloc_skb_with_frags+0x92/0x570 [ 1037.719555] sock_alloc_send_pskb+0x7af/0x930 [ 1037.720217] ? sk_alloc+0x350/0x350 [ 1037.720756] ? perf_trace_lock+0xac/0x490 [ 1037.721379] ? lock_chain_count+0x20/0x20 [ 1037.722024] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1037.722785] ? ip6_mtu+0x1bb/0x3d0 [ 1037.723299] ? lock_downgrade+0x6d0/0x6d0 [ 1037.723897] ? ip_frag_init+0x350/0x350 [ 1037.724480] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1037.725122] ? ip6_mtu+0x1e9/0x3d0 [ 1037.725563] ? ip6_setup_cork+0xfb7/0x1740 [ 1037.726107] ip6_make_skb+0x2de/0x4e0 [ 1037.726567] ? ip_frag_init+0x350/0x350 [ 1037.727053] ? ip_frag_init+0x350/0x350 [ 1037.727535] ? ip6_push_pending_frames+0xf0/0xf0 [ 1037.728153] ? ip6_dst_hoplimit+0x199/0x440 [ 1037.728697] ? lock_downgrade+0x6d0/0x6d0 [ 1037.729220] udpv6_sendmsg+0x20d3/0x2ad0 [ 1037.729814] ? ip_frag_init+0x350/0x350 [ 1037.730394] ? udp_v6_push_pending_frames+0x360/0x360 [ 1037.731142] ? __lockdep_reset_lock+0x180/0x180 [ 1037.731825] ? __lockdep_reset_lock+0x180/0x180 [ 1037.732504] ? lock_acquire+0x197/0x470 [ 1037.733075] ? find_held_lock+0x2c/0x110 [ 1037.733615] ? sock_has_perm+0x1ea/0x280 [ 1037.734172] ? __import_iovec+0x458/0x590 [ 1037.734694] ? udp_v6_push_pending_frames+0x360/0x360 [ 1037.735335] inet6_sendmsg+0x105/0x140 [ 1037.735807] ? inet6_compat_ioctl+0x320/0x320 [ 1037.736350] __sock_sendmsg+0xf2/0x190 [ 1037.736856] ____sys_sendmsg+0x334/0x870 [ 1037.737393] ? sock_write_iter+0x3d0/0x3d0 [ 1037.737936] ? do_recvmmsg+0x6d0/0x6d0 [ 1037.738407] ? __lock_acquire+0x1657/0x5b00 [ 1037.738938] ___sys_sendmsg+0xf3/0x170 [ 1037.739413] ? sendmsg_copy_msghdr+0x160/0x160 [ 1037.740008] ? vmacache_find+0x55/0x2a0 [ 1037.740494] ? __lockdep_reset_lock+0x180/0x180 [ 1037.741093] ? lock_acquire+0x197/0x470 [ 1037.741589] ? find_held_lock+0x2c/0x110 [ 1037.742085] ? __might_fault+0xd3/0x180 [ 1037.742565] ? lock_downgrade+0x6d0/0x6d0 [ 1037.743068] ? asm_exc_page_fault+0x1e/0x30 [ 1037.743601] __sys_sendmmsg+0x195/0x470 [ 1037.744136] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1037.744668] ? lock_downgrade+0x6d0/0x6d0 [ 1037.745212] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1037.745810] ? wait_for_completion_io+0x270/0x270 [ 1037.746396] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.747003] ? vfs_write+0x354/0xb10 [ 1037.747458] ? fput_many+0x2f/0x1a0 [ 1037.747935] ? ksys_write+0x1a9/0x260 [ 1037.748395] ? __ia32_sys_read+0xb0/0xb0 [ 1037.748891] __x64_sys_sendmmsg+0x99/0x100 [ 1037.749427] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.750049] do_syscall_64+0x33/0x40 [ 1037.750499] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.751170] RIP: 0033:0x7fbfd48dcb19 [ 1037.751624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.754027] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1037.754986] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 1037.755851] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1037.756720] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1037.757596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1037.758474] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 13:40:44 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x46}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8000}, @NL80211_ATTR_PMKID={0x14, 0x55, "760e044eecd0d362081af03080f6c81c"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffb7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}}, 0x20048444) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x380, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x124, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31eb}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x23fa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16aad9d5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9c4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5be}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe562}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7d9e}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd02}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x32, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @private2, 0x4}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xd20}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x4011}, 0x0) syz_mount_image$nfs4(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x3, &(0x7f00000017c0)=[{&(0x7f0000000240)="f7dc179427bfca54ca0306c07955ff80072e68f38f1811101f539b460927c0571b2d1d0357f18d9a", 0x28, 0x2}, {&(0x7f00000002c0)="0ba9df818344180929c134f59bf7", 0xe}, {0x0, 0x0, 0x100000000}], 0x1300088, 0x0) 13:40:44 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x34000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:45 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f0000000440)='./file1\x00', 0x108) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x1c, 0xc21}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000400)='bridge_slave_0\x00') ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000000)={0x0, 0x1, 0x8946}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x47, 0x0, 0x5e, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fork() fallocate(r3, 0x14, 0x5, 0x9) 13:40:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b00000080000000080000005247", 0x62, 0x400}, {&(0x7f0000010200)="010000000000050011", 0x9, 0x560}, {&(0x7f0000010400)="030000001300000023", 0x9, 0x800}], 0x0, &(0x7f0000013800)) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 1037.864999] loop7: detected capacity change from 0 to 135266304 13:40:45 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:40:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x80000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:40:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 5) [ 1037.927111] loop1: detected capacity change from 0 to 262144 13:40:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 29) dup2(r0, r1) [ 1037.953283] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 17 [ 1037.961001] loop7: detected capacity change from 0 to 135266304 [ 1037.974542] FAULT_INJECTION: forcing a failure. [ 1037.974542] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.976088] CPU: 0 PID: 7413 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1037.976999] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1037.978058] Call Trace: [ 1037.978413] dump_stack+0x107/0x167 [ 1037.978893] should_fail.cold+0x5/0xa [ 1037.979447] should_failslab+0x5/0x20 [ 1037.979949] __kmalloc_node_track_caller+0x74/0x3b0 [ 1037.980586] ? netlink_sendmsg+0x998/0xdf0 [ 1037.981104] __alloc_skb+0xb1/0x5b0 [ 1037.981566] netlink_sendmsg+0x998/0xdf0 [ 1037.982069] ? netlink_unicast+0x7f0/0x7f0 [ 1037.982592] ? netlink_unicast+0x7f0/0x7f0 [ 1037.983113] __sock_sendmsg+0x154/0x190 [ 1037.983642] ____sys_sendmsg+0x70d/0x870 [ 1037.984143] ? sock_write_iter+0x3d0/0x3d0 [ 1037.984659] ? do_recvmmsg+0x6d0/0x6d0 [ 1037.985139] ? lock_downgrade+0x6d0/0x6d0 [ 1037.985698] ? __lockdep_reset_lock+0x180/0x180 [ 1037.986268] ___sys_sendmsg+0xf3/0x170 [ 1037.986743] ? sendmsg_copy_msghdr+0x160/0x160 [ 1037.987335] ? __fget_files+0x2cf/0x520 [ 1037.987832] ? lock_downgrade+0x6d0/0x6d0 [ 1037.988372] ? find_held_lock+0x2c/0x110 [ 1037.988884] ? __fget_files+0x2f8/0x520 [ 1037.989395] ? __fget_light+0xea/0x290 [ 1037.989876] __sys_sendmsg+0xe5/0x1b0 [ 1037.990380] ? __sys_sendmsg_sock+0x40/0x40 [ 1037.990913] ? rcu_read_lock_any_held+0x75/0xa0 [ 1037.991523] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1037.992164] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1037.993046] ? trace_hardirqs_on+0x5b/0x180 [ 1037.993589] do_syscall_64+0x33/0x40 [ 1037.994045] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1037.994715] RIP: 0033:0x7fb9560b7b19 [ 1037.995191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1037.997462] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.998436] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1037.999313] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1038.000183] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.001049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.001977] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1038.009307] FAULT_INJECTION: forcing a failure. [ 1038.009307] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.010888] CPU: 0 PID: 7416 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1038.011727] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.012783] Call Trace: [ 1038.013109] dump_stack+0x107/0x167 [ 1038.013602] should_fail.cold+0x5/0xa [ 1038.014068] ? create_object.isra.0+0x3a/0xa20 [ 1038.014627] should_failslab+0x5/0x20 [ 1038.015091] kmem_cache_alloc+0x5b/0x310 [ 1038.015591] create_object.isra.0+0x3a/0xa20 [ 1038.016126] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1038.016746] kmem_cache_alloc_node+0x169/0x330 [ 1038.017318] __alloc_skb+0x6d/0x5b0 [ 1038.017773] alloc_skb_with_frags+0x92/0x570 [ 1038.018319] sock_alloc_send_pskb+0x7af/0x930 [ 1038.018872] ? sk_alloc+0x350/0x350 [ 1038.019346] ? perf_trace_lock+0xac/0x490 [ 1038.019876] ? lock_chain_count+0x20/0x20 [ 1038.020420] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1038.021033] ? ip6_mtu+0x1bb/0x3d0 [ 1038.021480] ? lock_downgrade+0x6d0/0x6d0 [ 1038.021986] ? ip_frag_init+0x350/0x350 [ 1038.022526] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1038.023116] ? ip6_mtu+0x1e9/0x3d0 [ 1038.023556] ? ip6_setup_cork+0xfb7/0x1740 [ 1038.024076] ip6_make_skb+0x2de/0x4e0 [ 1038.024542] ? ip_frag_init+0x350/0x350 [ 1038.025033] ? ip_frag_init+0x350/0x350 [ 1038.025586] ? ip6_push_pending_frames+0xf0/0xf0 [ 1038.026176] ? ip6_dst_hoplimit+0x199/0x440 [ 1038.026730] ? lock_downgrade+0x6d0/0x6d0 [ 1038.027249] udpv6_sendmsg+0x20d3/0x2ad0 [ 1038.027748] ? ip_frag_init+0x350/0x350 [ 1038.028242] ? udp_v6_push_pending_frames+0x360/0x360 [ 1038.028872] ? __lockdep_reset_lock+0x180/0x180 [ 1038.029510] ? __lockdep_reset_lock+0x180/0x180 [ 1038.030086] ? lock_acquire+0x197/0x470 [ 1038.030599] ? find_held_lock+0x2c/0x110 [ 1038.031105] ? sock_has_perm+0x1ea/0x280 [ 1038.031616] ? __import_iovec+0x458/0x590 [ 1038.032124] ? udp_v6_push_pending_frames+0x360/0x360 [ 1038.032768] inet6_sendmsg+0x105/0x140 [ 1038.033279] ? inet6_compat_ioctl+0x320/0x320 [ 1038.033836] __sock_sendmsg+0xf2/0x190 [ 1038.034314] ____sys_sendmsg+0x334/0x870 [ 1038.034812] ? sock_write_iter+0x3d0/0x3d0 [ 1038.035326] ? do_recvmmsg+0x6d0/0x6d0 [ 1038.035804] ? __lock_acquire+0x1657/0x5b00 [ 1038.036341] ___sys_sendmsg+0xf3/0x170 [ 1038.036830] ? sendmsg_copy_msghdr+0x160/0x160 [ 1038.037433] ? vmacache_find+0x55/0x2a0 [ 1038.037921] ? __lockdep_reset_lock+0x180/0x180 [ 1038.038495] ? lock_acquire+0x197/0x470 [ 1038.038979] ? find_held_lock+0x2c/0x110 [ 1038.039480] ? __might_fault+0xd3/0x180 [ 1038.039965] ? lock_downgrade+0x6d0/0x6d0 [ 1038.040520] ? asm_exc_page_fault+0x1e/0x30 [ 1038.041064] __sys_sendmmsg+0x195/0x470 [ 1038.041599] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1038.042128] ? lock_downgrade+0x6d0/0x6d0 [ 1038.042645] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1038.043240] ? wait_for_completion_io+0x270/0x270 [ 1038.043876] ? rcu_read_lock_any_held+0x75/0xa0 [ 1038.044471] ? vfs_write+0x354/0xb10 [ 1038.044928] ? fput_many+0x2f/0x1a0 [ 1038.045391] ? ksys_write+0x1a9/0x260 [ 1038.045856] ? __ia32_sys_read+0xb0/0xb0 [ 1038.046358] __x64_sys_sendmmsg+0x99/0x100 [ 1038.046875] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.047550] do_syscall_64+0x33/0x40 [ 1038.048007] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.048663] RIP: 0033:0x7fbfd48dcb19 [ 1038.049117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.051459] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1038.052386] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1038.053323] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1038.054242] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1038.055136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1038.056005] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 1038.060989] loop1: detected capacity change from 0 to 262144 [ 1038.087973] EXT4-fs warning (device loop1): read_mmp_block:114: Error -117 while reading MMP block 17 13:41:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:41:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 30) dup2(r0, r1) [ 1054.133552] FAT-fs (loop1): bogus number of reserved sectors [ 1054.135372] FAT-fs (loop1): Can't find a valid FAT filesystem 13:41:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 6) 13:41:01 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r0=>0x0) timer_settime(0x0, 0x0, &(0x7f0000000480)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f00000002c0)) timer_delete(r0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clone3(&(0x7f0000000880)={0x20000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0xd}, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/222, &(0x7f0000000840)=[0xffffffffffffffff], 0x1}, 0x58) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f00000000c0)=@ng={0x4, 0x0, "41b2"}, 0x4, 0x92a84b769ae0e8dc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r2=>0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @tid=r2}, &(0x7f0000000340)) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001600410d00"/20], 0x14}}, 0x0) timer_create(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x4}, &(0x7f0000000600)=<r3=>0x0) timer_gettime(r3, &(0x7f0000000700)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:41:01 executing program 7: flock(0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) pread64(r0, &(0x7f00000001c0)=""/23, 0x17, 0x20) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x1, 0x6, 0x11, 0x8, "64b13f9d849aa73b9ef185093140945aa811b68f20308661713b8feb98dd727f15d939932367bad5a1f50137d6012637b50bf9054709e2f5ecbb4b98500899db", "510d73b0cac5b7b342bc97a3897bc86a6bcca29028ada87cb62de8c1c9e42b0a", [0x6, 0x101]}) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = signalfd(r1, &(0x7f0000000000)={[0x9]}, 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x40}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)) 13:41:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x400300, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:01 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index, 0x800, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xffff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 13:41:01 executing program 1: syz_mount_image$msdos(&(0x7f0000001280), &(0x7f00000012c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002600), 0x0, &(0x7f0000000000)={[{@dots}, {@fat=@flush}, {@nodots}]}) 13:41:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 1054.187178] FAULT_INJECTION: forcing a failure. [ 1054.187178] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.190525] CPU: 0 PID: 7438 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1054.192501] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.195002] Call Trace: [ 1054.195760] dump_stack+0x107/0x167 [ 1054.196874] should_fail.cold+0x5/0xa [ 1054.197993] should_failslab+0x5/0x20 [ 1054.199133] __kmalloc_node_track_caller+0x74/0x3b0 [ 1054.200595] ? alloc_skb_with_frags+0x92/0x570 [ 1054.201921] __alloc_skb+0xb1/0x5b0 [ 1054.203013] alloc_skb_with_frags+0x92/0x570 [ 1054.204320] sock_alloc_send_pskb+0x7af/0x930 [ 1054.205624] ? sk_alloc+0x350/0x350 [ 1054.206757] ? perf_trace_lock+0xac/0x490 [ 1054.207959] ? lock_chain_count+0x20/0x20 [ 1054.209195] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1054.210703] ? ip6_mtu+0x1bb/0x3d0 [ 1054.211718] ? lock_downgrade+0x6d0/0x6d0 [ 1054.212984] ? ip_frag_init+0x350/0x350 [ 1054.214142] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1054.215520] ? ip6_mtu+0x1e9/0x3d0 [ 1054.216584] ? ip6_setup_cork+0xfb7/0x1740 [ 1054.217860] ip6_make_skb+0x2de/0x4e0 [ 1054.218959] ? ip_frag_init+0x350/0x350 [ 1054.220136] ? ip_frag_init+0x350/0x350 [ 1054.221720] ? ip6_push_pending_frames+0xf0/0xf0 [ 1054.223214] ? ip6_dst_hoplimit+0x199/0x440 [ 1054.224613] ? lock_downgrade+0x6d0/0x6d0 [ 1054.225925] udpv6_sendmsg+0x20d3/0x2ad0 [ 1054.226769] FAULT_INJECTION: forcing a failure. [ 1054.226769] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.227173] ? ip_frag_init+0x350/0x350 [ 1054.227194] ? udp_v6_push_pending_frames+0x360/0x360 [ 1054.227213] ? __lockdep_reset_lock+0x180/0x180 [ 1054.233055] ? __lockdep_reset_lock+0x180/0x180 [ 1054.233813] ? lock_acquire+0x197/0x470 [ 1054.234383] ? find_held_lock+0x2c/0x110 [ 1054.235038] ? sock_has_perm+0x1ea/0x280 [ 1054.235683] ? __import_iovec+0x458/0x590 [ 1054.236265] ? udp_v6_push_pending_frames+0x360/0x360 [ 1054.237085] inet6_sendmsg+0x105/0x140 [ 1054.237720] ? inet6_compat_ioctl+0x320/0x320 [ 1054.238366] __sock_sendmsg+0xf2/0x190 [ 1054.238969] ____sys_sendmsg+0x334/0x870 [ 1054.239607] ? sock_write_iter+0x3d0/0x3d0 [ 1054.240222] ? do_recvmmsg+0x6d0/0x6d0 [ 1054.240826] ? __lock_acquire+0x1657/0x5b00 [ 1054.241449] ___sys_sendmsg+0xf3/0x170 [ 1054.242040] ? sendmsg_copy_msghdr+0x160/0x160 [ 1054.242718] ? vmacache_find+0x55/0x2a0 [ 1054.243262] ? __lockdep_reset_lock+0x180/0x180 [ 1054.244018] ? lock_acquire+0x197/0x470 [ 1054.244617] ? find_held_lock+0x2c/0x110 [ 1054.245183] ? __might_fault+0xd3/0x180 [ 1054.245810] ? lock_downgrade+0x6d0/0x6d0 [ 1054.246374] ? asm_exc_page_fault+0x1e/0x30 [ 1054.247068] __sys_sendmmsg+0x195/0x470 [ 1054.247669] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1054.248291] ? lock_downgrade+0x6d0/0x6d0 [ 1054.248939] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1054.249677] ? wait_for_completion_io+0x270/0x270 [ 1054.250336] ? rcu_read_lock_any_held+0x75/0xa0 [ 1054.251071] ? vfs_write+0x354/0xb10 [ 1054.251647] ? fput_many+0x2f/0x1a0 [ 1054.252180] ? ksys_write+0x1a9/0x260 [ 1054.252785] ? __ia32_sys_read+0xb0/0xb0 [ 1054.253347] __x64_sys_sendmmsg+0x99/0x100 [ 1054.254022] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.254797] do_syscall_64+0x33/0x40 [ 1054.255364] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.256162] RIP: 0033:0x7fbfd48dcb19 [ 1054.256759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.259577] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1054.260750] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 1054.261870] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1054.263271] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.264278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.265219] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 [ 1054.266243] CPU: 1 PID: 7447 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1054.267165] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.268245] Call Trace: [ 1054.268606] dump_stack+0x107/0x167 [ 1054.269099] should_fail.cold+0x5/0xa [ 1054.269617] ? create_object.isra.0+0x3a/0xa20 [ 1054.270206] should_failslab+0x5/0x20 [ 1054.270669] kmem_cache_alloc+0x5b/0x310 [ 1054.271165] create_object.isra.0+0x3a/0xa20 [ 1054.271695] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.272359] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1054.273007] ? netlink_sendmsg+0x998/0xdf0 [ 1054.277577] __alloc_skb+0xb1/0x5b0 [ 1054.278063] netlink_sendmsg+0x998/0xdf0 [ 1054.278603] ? netlink_unicast+0x7f0/0x7f0 [ 1054.279218] ? netlink_unicast+0x7f0/0x7f0 [ 1054.279780] __sock_sendmsg+0x154/0x190 [ 1054.280337] ____sys_sendmsg+0x70d/0x870 [ 1054.280875] ? sock_write_iter+0x3d0/0x3d0 [ 1054.281442] ? do_recvmmsg+0x6d0/0x6d0 [ 1054.281979] ? lock_downgrade+0x6d0/0x6d0 [ 1054.282529] ? __lockdep_reset_lock+0x180/0x180 [ 1054.283143] ___sys_sendmsg+0xf3/0x170 [ 1054.283654] ? sendmsg_copy_msghdr+0x160/0x160 [ 1054.284256] ? __fget_files+0x2cf/0x520 [ 1054.284780] ? lock_downgrade+0x6d0/0x6d0 [ 1054.285329] ? find_held_lock+0x2c/0x110 [ 1054.285885] ? __fget_files+0x2f8/0x520 [ 1054.286468] ? __fget_light+0xea/0x290 [ 1054.286993] __sys_sendmsg+0xe5/0x1b0 [ 1054.287489] ? __sys_sendmsg_sock+0x40/0x40 [ 1054.288055] ? rcu_read_lock_any_held+0x75/0xa0 [ 1054.288678] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1054.289430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.290150] ? trace_hardirqs_on+0x5b/0x180 [ 1054.290719] do_syscall_64+0x33/0x40 [ 1054.291209] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.291881] RIP: 0033:0x7fb9560b7b19 [ 1054.292423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.298880] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.299950] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1054.300880] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1054.301849] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.302777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.303749] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:41:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf0ffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1054.377963] FAT-fs (loop1): bogus number of reserved sectors [ 1054.378960] FAT-fs (loop1): Can't find a valid FAT filesystem 13:41:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001a40)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB="04a500006ccf5e00a30878ffff75db000f5d56d16102c7d0cfb1b4ec808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc558c9e448aa6696365e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c84f01000eba254f7d13aa08cc1bdd66d92477fe946e898db0c1b7317288f85442d7ae169c281cee71862b8babfa4de461bd2cc35d4f5e48bf0dd10f09a0571473a28dc49f6f864182fab0286685f985013a1237c9b00110eae429918b82a4e40760bc6b5adfa31ec5f26fa93030e6bb9fce58adee"]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) openat(r3, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)=""/45, 0x2d}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfa, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x91}, 0x30004840) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/116, 0x74}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1054.484009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:01 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:41:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 31) dup2(r0, r1) 13:41:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x1000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1054.543472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.544881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.546092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:41:01 executing program 6: msgsnd(0x0, 0x0, 0x3f9, 0x0) msgctl$IPC_RMID(0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100fc0000000000"], 0xffffffffffffffe0, 0x0) msgctl$MSG_STAT_ANY(0xffffffffffffffff, 0xd, &(0x7f0000000140)=""/157) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r0 = msgget(0x0, 0xc) msgctl$IPC_INFO(r0, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) getpgrp(0x0) pipe(&(0x7f00000002c0)) r1 = msgget(0x3, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0xee00, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgrcv(r1, &(0x7f0000000300)={0x0, ""/204}, 0xd4, 0x3, 0x0) msgget(0x2, 0x408) dup2(0xffffffffffffffff, 0xffffffffffffffff) getpgrp(0x0) getpgrp(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x18}, 0x0, 0x0, 0x1002, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000000000004000000000002000020000020000000def4655fdef4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e58ca12e13a240e2b1a22f8d07e8e55f010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="030000000400000005", 0x9, 0x800}, {0x0, 0x0, 0x1000000000c00}, {&(0x7f0000000400)="ed41000000040000ddf4655fdef4655fdef4655f000000000009000020b554275e32a584827af214840dc46526c6b2148029559498e9f6ba4c068801422b3ae16647f4761bcf1af88b7a8005000000732adf37e5788b1983544d006353b6b563949fd2d20cadf197eb9c6b0b174747637f40b3e1605c2cc3e97f41b8ba32cc8593ed", 0x82, 0x1480}, {&(0x7f0000012000)="504d4d00504d4dff", 0x8, 0x10000}], 0x1282802, &(0x7f0000000400)=ANY=[]) [ 1054.561735] FAULT_INJECTION: forcing a failure. [ 1054.561735] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.563401] CPU: 0 PID: 7467 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1054.564302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1054.565353] Call Trace: [ 1054.565745] dump_stack+0x107/0x167 [ 1054.566190] should_fail.cold+0x5/0xa [ 1054.566782] ? create_object.isra.0+0x3a/0xa20 [ 1054.567344] should_failslab+0x5/0x20 [ 1054.567889] kmem_cache_alloc+0x5b/0x310 [ 1054.568386] create_object.isra.0+0x3a/0xa20 [ 1054.568969] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1054.569699] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1054.570320] ? alloc_skb_with_frags+0x92/0x570 [ 1054.570991] __alloc_skb+0xb1/0x5b0 [ 1054.571437] alloc_skb_with_frags+0x92/0x570 [ 1054.572029] sock_alloc_send_pskb+0x7af/0x930 [ 1054.572632] ? sk_alloc+0x350/0x350 [ 1054.573084] ? perf_trace_lock+0xac/0x490 [ 1054.573691] ? lock_chain_count+0x20/0x20 [ 1054.574206] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1054.574921] ? ip6_mtu+0x1bb/0x3d0 [ 1054.575353] ? lock_downgrade+0x6d0/0x6d0 [ 1054.575904] ? ip_frag_init+0x350/0x350 [ 1054.576394] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1054.577030] ? ip6_mtu+0x1e9/0x3d0 [ 1054.577473] ? ip6_setup_cork+0xfb7/0x1740 [ 1054.578091] ip6_make_skb+0x2de/0x4e0 [ 1054.578660] ? ip_frag_init+0x350/0x350 [ 1054.579147] ? ip_frag_init+0x350/0x350 [ 1054.579680] ? ip6_push_pending_frames+0xf0/0xf0 [ 1054.580260] ? ip6_dst_hoplimit+0x199/0x440 [ 1054.580878] ? lock_downgrade+0x6d0/0x6d0 [ 1054.581404] udpv6_sendmsg+0x20d3/0x2ad0 [ 1054.582009] ? ip_frag_init+0x350/0x350 [ 1054.582545] ? udp_v6_push_pending_frames+0x360/0x360 [ 1054.583176] ? __lockdep_reset_lock+0x180/0x180 [ 1054.583870] ? __lockdep_reset_lock+0x180/0x180 [ 1054.584456] ? lock_acquire+0x197/0x470 [ 1054.584996] ? find_held_lock+0x2c/0x110 [ 1054.585558] ? sock_has_perm+0x1ea/0x280 [ 1054.586076] ? __import_iovec+0x458/0x590 [ 1054.586629] ? udp_v6_push_pending_frames+0x360/0x360 [ 1054.587255] inet6_sendmsg+0x105/0x140 [ 1054.587848] ? inet6_compat_ioctl+0x320/0x320 [ 1054.588398] __sock_sendmsg+0xf2/0x190 [ 1054.588950] ____sys_sendmsg+0x334/0x870 [ 1054.589458] ? sock_write_iter+0x3d0/0x3d0 [ 1054.590024] ? do_recvmmsg+0x6d0/0x6d0 [ 1054.590543] ? __lock_acquire+0x1657/0x5b00 [ 1054.591081] ___sys_sendmsg+0xf3/0x170 [ 1054.591640] ? sendmsg_copy_msghdr+0x160/0x160 [ 1054.592206] ? vmacache_find+0x55/0x2a0 [ 1054.592969] ? __lockdep_reset_lock+0x180/0x180 [ 1054.593675] ? lock_acquire+0x197/0x470 [ 1054.594157] ? find_held_lock+0x2c/0x110 [ 1054.594712] ? __might_fault+0xd3/0x180 [ 1054.595199] ? lock_downgrade+0x6d0/0x6d0 [ 1054.595791] ? asm_exc_page_fault+0x1e/0x30 [ 1054.596329] __sys_sendmmsg+0x195/0x470 [ 1054.596868] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1054.597394] ? lock_downgrade+0x6d0/0x6d0 [ 1054.598001] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1054.598684] ? wait_for_completion_io+0x270/0x270 [ 1054.599283] ? rcu_read_lock_any_held+0x75/0xa0 [ 1054.599923] ? vfs_write+0x354/0xb10 [ 1054.600375] ? fput_many+0x2f/0x1a0 [ 1054.600873] ? ksys_write+0x1a9/0x260 [ 1054.601340] ? __ia32_sys_read+0xb0/0xb0 [ 1054.601933] __x64_sys_sendmmsg+0x99/0x100 [ 1054.602445] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1054.603163] do_syscall_64+0x33/0x40 [ 1054.603693] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1054.604311] RIP: 0033:0x7fbfd48dcb19 [ 1054.604808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1054.607243] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1054.608211] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1054.609119] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1054.610089] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1054.611058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1054.612028] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:41:01 executing program 1: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=<r1=>0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x3, 0x8, 0x1, 0x8, 0x0, 0x2, 0x38613, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x2}, 0x1000, 0x600000000000000, 0x101, 0x4, 0x0, 0xbd3, 0x6, 0x0, 0x1e, 0x0, 0x5fe2}, r1, 0x0, 0xffffffffffffffff, 0x8) pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x40, 0x80, 0x2, 0x2c, 0x0, 0xe0d, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x15200, 0x0, 0xb69a, 0x5, 0x200, 0x1, 0x7ff, 0x0, 0x1, 0x0, 0x3}, r0, 0x1, r3, 0x8) syz_mount_image$ext4(&(0x7f0000001b40)='ext3\x00', &(0x7f0000001b80)='./file1\x00', 0x0, 0x0, &(0x7f0000001c40), 0x0, &(0x7f0000001c80)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r4, 0xffffffffffffffff, 0x0) r5 = dup2(r4, r4) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) openat(r5, &(0x7f0000000100)='./file1\x00', 0x200400, 0x1b6) 13:41:01 executing program 7: ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000780)=@get={0x1, &(0x7f0000000e00)=""/4096, 0xc}) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000007c0), 0x2}, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffff7fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000380), &(0x7f00000006c0)=<r1=>0x0, &(0x7f0000000700)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYBLOB="12277cf9b902bca8164838a63b08a9509dede04663b325da6e9cad43a9ee63d3e1b8f41ac050ad94a4f1bbdd781162b2df938a542fee3313de0b48", @ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB='./file1\x00']) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)=ANY=[@ANYRESOCT, @ANYBLOB="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", @ANYRESHEX=r2, @ANYRES64, @ANYRES32, @ANYBLOB="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"]) r3 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0x5, 0x80000010004) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001000ecffffff00049a84bcd1a6b09068adf5220000009600242654d2ba0009000500000000"], 0x24}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000500)=""/122, 0x7a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x90, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000001}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="cd00008cd0a697ff0fc001959796df8bc6cd1debef", @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf25010000000c00030000000000000000000c000400000001000000000008000100000000000c00050008000000000000000c0005000b000000000000000c0004000002000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x30004840) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x1) [ 1054.625581] loop6: detected capacity change from 0 to 2103296 [ 1054.629638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 13:41:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1054.779155] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 1057.037575] wlan1: Trigger new scan to find an IBSS to join [ 1060.045618] wlan1: Trigger new scan to find an IBSS to join [ 1063.057639] wlan1: Trigger new scan to find an IBSS to join [ 1063.793780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1063.794882] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 13:41:16 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_add_watch(r0, &(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000380)=ANY=[], 0x8) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) openat(r0, &(0x7f0000000500)='./file0\x00', 0x40, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/disk', 0x181801, 0x0) pwritev(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="940e022d0a1716b32c6b14b2ccc6ca502cb0ece8b1d2b73dafdb75529a7318", 0x1f}, {&(0x7f00000000c0)="351e5015da0c9ebe424e5a8a0e7a25c8b05e8ca58e23e34c28141947732a1d8c0365e5c9d92042102ef7a467691d7eebded97eda1510bd3722907f6873f6f65196bdd4ce47a8f49b95bb2787e0ce1b620131ec07f30a1ca11ddd", 0x5a}, {&(0x7f0000000140)="4950a875a1f00838fd068fb9104ac6565c80bbad3257ccd9aa1a66a82e903a34ec2ae4f3eaf29cdb563a79666e541f7a79c594ecc96db19ac814a07b2227f8c031855b9e31c2c5", 0x47}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="059bfd1aad514d7d70b4d600e4a85b8a47b9c2727a6033ddd1169d79968d2aa6b86b15e753f75d4d9ab07f7e59bc80a21fd7e30e6779df3580e609d3e9e5b0e91c6d1600ed6a9778a3c1920689a3e31c8a6e3b6a8075f882950f7e06861cc389a8175d9b07b8b5793a18dd36224b0a9d22321d62bdd213db095199b791b8272832b2ba6971781ca48770c78ef472baab48f77444ddb0f9340862ed5c44208fa386051a1b6d3f723149dcafd60f669ff5f0f15d8eb02f920e30035954f55c10b3a7a1c43056e61748d66086768d12a150b5e398b3854d6034ef6b3ea55e956f61dffee8b0d6331ab0", 0xe8}], 0x5) 13:41:16 executing program 1: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140), 0x4) openat(r1, &(0x7f0000000200)='./file0/../file0\x00', 0x200100, 0x0) mkdirat(r0, &(0x7f0000000080)='./file0/../file0/file0\x00', 0x51) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, 0xffffffffffffffff}}]}}) 13:41:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x3000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:16 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:41:16 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500), 0x0, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) write(r2, &(0x7f0000000240)="01", 0x1) fremovexattr(r1, &(0x7f0000000140)=@known='trusted.syz\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x5) clock_gettime(0x0, &(0x7f0000000180)={<r4=>0x0, <r5=>0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20, &(0x7f00000001c0)={r4, r5+60000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, &(0x7f0000000340)=0x4010000, 0xc3a, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mknodat$null(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x5f1a33b91ca1aaee, 0x103) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) fcntl$setstatus(r6, 0x4, 0x400) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x0, 0x0, 0x0) 13:41:16 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 32) dup2(r0, r1) 13:41:16 executing program 7: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24008000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1b0, 0x0, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="f430d0108c79"}, @NL80211_ATTR_IE={0x4b, 0x2a, [@tim={0x5, 0x45, {0x4, 0xbb, 0x40, "accbbfcd84cf9db5008a2ea8b692e0a5d3aaf4820d42b73fbabbc8ffef288e8e98104bc225d744e779d45579b4a500a0fb82a72a47ed99ec5ee8d56db4720acc085b"}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_IE={0xfb, 0x2a, [@mesh_id={0x72, 0x6}, @random_vendor={0xdd, 0xaa, "6b3bfa7d472b18dad6a1065960255983ffe564532ebece1159019dd5aa7cd616ce7fe5c9c5af211bc8e01dfd228a0ba9e8e8f1804e39a3fa032bea378afb4b13faf79c8989580c5ac0651ffb0327390f75e77bd0e5bc1649355c5dfd83dd4b11bf722e3d270738ed46dfea454dc3cff748f136a08b1e9362a5753b7a84cb1bbddde5ee6764c26f8c347255f9e371c81da269c7a95bcc5991ab8a708a7d1565d05539de44628700718631"}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2, 0x40}}, @mesh_id={0x72, 0x6}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0x1, 0xffffffffffffffff, 0x20, 0x64}}, @mesh_chsw={0x76, 0x6, {0x3, 0xa0, 0x7, 0x2}}, @cf={0x4, 0x6, {0x5, 0x1f, 0x3f, 0x200}}, @sec_chan_ofs={0x3e, 0x1}, @peer_mgmt={0x75, 0x14, {0x0, 0x120, @void, @void, @val="9ecaca0c6e535fe9c01f05af1a92d63a"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="82a797cda54a"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xdac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x100, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x67, 0x63}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ac8045f6ef101612284b2a98a7f7ab8181da32c5d20a2a53"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a4e6b74e15cd9ffff1448d6929e2f5c1fec91b8ea0658c9c"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6a9c27fe2b4298e78fd86fe635043a1838fbe1b3127667cf"}]]}, 0x100}}, 0x48000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r0=>0x0}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x13c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x105, 0x80, [@fast_bss_trans={0x37, 0xff, {0x4, 0x9, "5f15fbabdf9eb5c71fbb107235c436b6", "9740bbeb23f20bd50987efdbc0dac33a4046e35a727037283b3f741ee26e717f", "cc04aa989bcd16b7b0bcf9fb869f6aa49fe1ff347120cdeba5900628adf02cca", [{0x1, 0x1, "86"}, {0x1, 0x17, "4d0454d3d4a68a2aa90c2c405d9f22e8fdc190cc421e4f"}, {0x2, 0xf, "d9f6f5d6fa3068313e8674b170d5e3"}, {0x1, 0x14, "7361838e5ac484a945020349b795e2237e884ae0"}, {0x4, 0x27, "bd032e015d8515b7d8d29f3929ec63a8625a47c2350e82399b706c29a657763fbd4c929857951a"}, {0x3, 0x4, "8879beb7"}, {0x2, 0x24, "ddcd369d0cef0211783ff9bca1ac3a3f7623b54c79a66f1bcd16a8b0fd110a65249f38f4"}, {0x4, 0xc, "c1060efbc099e62cfea45d40"}, {0x1, 0x5, "84e78e4a79"}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x15, 0x80, [@challenge={0x10, 0x1, 0xf5}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x3, 0xad, 0xd7}}, @cf={0x4, 0x6, {0x7f, 0x0, 0x0, 0x101}}]}]}, 0x13c}}, 0x40) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa6c2}]}, 0x44}, 0x1, 0x0, 0x0, 0xac27b830be7f625c}, 0x20000041) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x3004004c) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x7c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x924}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000045}, 0x0) r1 = getpgrp(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0xa8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000091) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000c80), 0x9cc83, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa4, 0x0, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x7fff, 0x10001, 0x6, 0x1]}, @CTA_NAT_DST={0x74, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}}]}, @CTA_ZONE={0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc4}, 0x80) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x18}, @void, @val={0xc, 0x99, {0x1, 0x12}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f80)={0x164, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x129a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x116}}]}, 0x164}, 0x1, 0x0, 0x0, 0x40001}, 0x4000880) r3 = dup3(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)=@updpolicy={0xd8, 0x19, 0x200, 0x70bd28, 0x25dfdbfc, {{@in=@broadcast, @in=@multicast2, 0x4e21, 0x2, 0x4e21, 0x0, 0xa, 0x80, 0x80, 0x3c, 0x0, 0xffffffffffffffff}, {0xf0c, 0x38cf, 0x7, 0x2125, 0x5, 0x3, 0x6, 0x9}, {0x80000000, 0x7, 0x5, 0x81}, 0xfffffff7, 0x6e6bb6, 0x0, 0x1, 0x2, 0x2}, [@tfcpad={0x8, 0x16, 0xa53e}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}, @extra_flags={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x1ff}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001440)={&(0x7f0000001380)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x5}}]}, @IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x10) syz_io_uring_setup(0xda9, &(0x7f00000014c0)={0x0, 0x2735, 0x0, 0x3, 0x1f6, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000001540)=<r4=>0x0, &(0x7f0000001580)) syz_io_uring_setup(0x7253, &(0x7f00000015c0)={0x0, 0x602b, 0x10, 0x1, 0x3bc, 0x0, r3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001640), &(0x7f0000001680)=<r5=>0x0) syz_io_uring_submit(r4, r5, &(0x7f00000016c0)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12344}, 0x17220000) 13:41:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 7) [ 1069.698580] FAULT_INJECTION: forcing a failure. [ 1069.698580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.700116] CPU: 0 PID: 7508 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1069.700937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.701956] Call Trace: [ 1069.702282] dump_stack+0x107/0x167 [ 1069.702725] should_fail.cold+0x5/0xa [ 1069.703203] _copy_from_iter_full+0x201/0xa60 [ 1069.703754] ? __virt_addr_valid+0x170/0x5d0 [ 1069.704326] ? __check_object_size+0x319/0x440 [ 1069.704884] netlink_sendmsg+0x879/0xdf0 [ 1069.705386] ? netlink_unicast+0x7f0/0x7f0 [ 1069.705924] ? netlink_unicast+0x7f0/0x7f0 [ 1069.706488] __sock_sendmsg+0x154/0x190 [ 1069.707001] ____sys_sendmsg+0x70d/0x870 [ 1069.707506] ? sock_write_iter+0x3d0/0x3d0 [ 1069.708026] ? do_recvmmsg+0x6d0/0x6d0 [ 1069.708507] ? lock_downgrade+0x6d0/0x6d0 [ 1069.709029] ? __lockdep_reset_lock+0x180/0x180 [ 1069.709658] ___sys_sendmsg+0xf3/0x170 [ 1069.710173] ? sendmsg_copy_msghdr+0x160/0x160 [ 1069.710730] ? __fget_files+0x2cf/0x520 [ 1069.711214] ? lock_downgrade+0x6d0/0x6d0 [ 1069.711715] ? find_held_lock+0x2c/0x110 [ 1069.712246] ? __fget_files+0x2f8/0x520 [ 1069.712735] ? __fget_light+0xea/0x290 [ 1069.713239] __sys_sendmsg+0xe5/0x1b0 [ 1069.713714] ? __sys_sendmsg_sock+0x40/0x40 [ 1069.714244] ? rcu_read_lock_any_held+0x75/0xa0 [ 1069.714817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1069.715500] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.716154] ? trace_hardirqs_on+0x5b/0x180 [ 1069.716676] do_syscall_64+0x33/0x40 [ 1069.717127] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1069.717764] RIP: 0033:0x7fb9560b7b19 [ 1069.718263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.720518] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.721439] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1069.722318] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1069.723180] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.724042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.724904] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:41:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x4000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1069.749988] loop2: detected capacity change from 0 to 262144 13:41:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 8) [ 1069.767187] 9p: Unknown uid 18446744073709551615 [ 1069.788990] 9p: Unknown uid 18446744073709551615 13:41:17 executing program 6: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xfffffffffffffec8) fchmod(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100000000b5cfc06839aaefc31cb84a0900000000000000000005000000dfd83b8d36e8bf3f833e7aa9af84eff97eff083a19b69ba152f6ae868d9897554f1019498acfb55589d0d42680303c6f297d7c028bef42440245c4bd8ecae4542dfc5121dbf14d31394e9d0bb5ad6dce8e3bc36e3f582ebb8b91864ffc9f789529aa41c5d3d00df98516a0da3d197e21cfec7ad161c6e69e1dacf2da9eec3a", @ANYRES32=r1, @ANYBLOB="0f83fffff4641178de6db619da0f8abdf482e8a181a31c98d5010d5c38717609bac99b2b8cca672b540f4c01c8cb218a2e940c5587ff2e182a91b70d"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) fchmod(r1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000280)=0x4) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000640)={0x0, @rc={0x1f, @none, 0x80}, @can, @generic={0x0, "d24c6eaeeb2d0f5bd46cd6300eab"}, 0x101, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='vlan1\x00', 0x5, 0x8, 0x615e}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) gettid() r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x20000) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r6, &(0x7f0000000340)={r1, r1, 0x6}) [ 1069.813753] FAULT_INJECTION: forcing a failure. [ 1069.813753] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.821793] CPU: 1 PID: 7516 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1069.822691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1069.823770] Call Trace: [ 1069.824129] dump_stack+0x107/0x167 [ 1069.824619] should_fail.cold+0x5/0xa [ 1069.825130] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1069.826007] should_failslab+0x5/0x20 [ 1069.826519] __kmalloc+0x72/0x390 [ 1069.827000] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1069.827922] genl_family_rcv_msg_doit+0xda/0x330 [ 1069.828604] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1069.829481] ? cap_capable+0x1cd/0x230 [ 1069.830066] ? security_capable+0x95/0xc0 [ 1069.830679] ? ns_capable+0xe2/0x110 [ 1069.831231] genl_rcv_msg+0x33c/0x5a0 [ 1069.831755] ? genl_get_cmd+0x480/0x480 [ 1069.832310] ? nl80211_join_ocb+0x160/0x160 [ 1069.832895] ? lock_release+0x680/0x680 [ 1069.833445] ? __lockdep_reset_lock+0x180/0x180 [ 1069.834099] netlink_rcv_skb+0x14b/0x430 [ 1069.834690] ? genl_get_cmd+0x480/0x480 [ 1069.835248] ? netlink_ack+0xab0/0xab0 [ 1069.835788] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1069.836399] ? is_vmalloc_addr+0x7b/0xb0 [ 1069.836895] genl_rcv+0x24/0x40 [ 1069.837339] netlink_unicast+0x549/0x7f0 [ 1069.837917] ? netlink_attachskb+0x870/0x870 [ 1069.838581] netlink_sendmsg+0x90f/0xdf0 [ 1069.839122] ? netlink_unicast+0x7f0/0x7f0 [ 1069.839717] ? netlink_unicast+0x7f0/0x7f0 [ 1069.840274] __sock_sendmsg+0x154/0x190 [ 1069.840816] ____sys_sendmsg+0x70d/0x870 [ 1069.841420] ? sock_write_iter+0x3d0/0x3d0 [ 1069.842011] ? do_recvmmsg+0x6d0/0x6d0 [ 1069.842566] ? lock_downgrade+0x6d0/0x6d0 [ 1069.843125] ? __lockdep_reset_lock+0x180/0x180 [ 1069.843740] ___sys_sendmsg+0xf3/0x170 [ 1069.844281] ? sendmsg_copy_msghdr+0x160/0x160 [ 1069.844923] ? __fget_files+0x2cf/0x520 [ 1069.845448] ? lock_downgrade+0x6d0/0x6d0 [ 1069.845965] ? find_held_lock+0x2c/0x110 [ 1069.846470] ? __fget_files+0x2f8/0x520 [ 1069.846961] ? __fget_light+0xea/0x290 [ 1069.847451] __sys_sendmsg+0xe5/0x1b0 [ 1069.847918] ? __sys_sendmsg_sock+0x40/0x40 [ 1069.848476] ? rcu_read_lock_any_held+0x75/0xa0 [ 1069.849056] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1069.849721] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1069.850421] ? trace_hardirqs_on+0x5b/0x180 [ 1069.851013] do_syscall_64+0x33/0x40 [ 1069.851531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1069.852210] RIP: 0033:0x7fb9560b7b19 [ 1069.852699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1069.855153] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.856253] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1069.857229] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1069.858212] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1069.859248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.860228] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:41:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x442, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0xfff}, 0x0, 0x0, 0xfffffffd, 0x3, 0x1, 0x40, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0, <r1=>0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000001980)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x53000, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400cc0, 0xa6) r3 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x80, 0x0) preadv(r3, 0x0, 0x0, 0x401, 0x0) stat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}) setresuid(0xffffffffffffffff, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0), 0x3304020, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[], [{@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, '#--'}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_lt={'uid<', r4}}, {@audit}]}}) r5 = syz_open_dev$vcsu(&(0x7f0000000180), 0x9, 0x80000) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10240000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fddbdf25110000000c0c990007000000000000000600360000000000"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) unshare(0x48020200) [ 1069.922881] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 13:41:17 executing program 7: r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) bind$packet(r2, &(0x7f0000000040)={0x11, 0x8, 0x0, 0x1, 0x3, 0x6, @random="4588ad40b6fd"}, 0x14) sendmmsg(r0, &(0x7f0000002380)=[{{&(0x7f0000000c40)=@caif=@dgm={0x25, 0x2}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000000)="9d", 0x1}], 0x1}}, {{&(0x7f0000000fc0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, 0x0}}], 0x2, 0x0) 13:41:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x5000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1070.011917] FAULT_INJECTION: forcing a failure. [ 1070.011917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1070.013824] CPU: 0 PID: 7509 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1070.014729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1070.015797] Call Trace: [ 1070.016131] dump_stack+0x107/0x167 [ 1070.016621] should_fail.cold+0x5/0xa [ 1070.017155] _copy_from_user+0x2e/0x1b0 [ 1070.017729] __copy_msghdr_from_user+0x91/0x4b0 [ 1070.018339] ? __ia32_sys_shutdown+0x80/0x80 [ 1070.018916] ? udp_v6_push_pending_frames+0x360/0x360 [ 1070.019594] ? inet6_sendmsg+0xbd/0x140 [ 1070.020117] ? inet6_compat_ioctl+0x320/0x320 [ 1070.020739] ? __sock_sendmsg+0x55/0x190 [ 1070.021292] sendmsg_copy_msghdr+0xa1/0x160 [ 1070.021899] ? do_recvmmsg+0x6d0/0x6d0 [ 1070.022412] ? __lock_acquire+0x1657/0x5b00 [ 1070.022988] ___sys_sendmsg+0xc6/0x170 [ 1070.023499] ? sendmsg_copy_msghdr+0x160/0x160 [ 1070.024100] ? vmacache_find+0x55/0x2a0 [ 1070.024627] ? __lockdep_reset_lock+0x180/0x180 [ 1070.025249] ? lock_acquire+0x197/0x470 [ 1070.025773] ? find_held_lock+0x2c/0x110 [ 1070.026310] ? __might_fault+0xd3/0x180 [ 1070.026829] ? lock_downgrade+0x6d0/0x6d0 [ 1070.027372] ? asm_exc_page_fault+0x1e/0x30 [ 1070.027956] __sys_sendmmsg+0x195/0x470 [ 1070.028488] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1070.029051] ? lock_downgrade+0x6d0/0x6d0 [ 1070.029632] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1070.030269] ? wait_for_completion_io+0x270/0x270 [ 1070.030913] ? rcu_read_lock_any_held+0x75/0xa0 [ 1070.031526] ? vfs_write+0x354/0xb10 [ 1070.032022] ? fput_many+0x2f/0x1a0 [ 1070.032501] ? ksys_write+0x1a9/0x260 [ 1070.033008] ? __ia32_sys_read+0xb0/0xb0 [ 1070.033553] __x64_sys_sendmmsg+0x99/0x100 [ 1070.034128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1070.034801] do_syscall_64+0x33/0x40 [ 1070.035291] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1070.035960] RIP: 0033:0x7fbfd48dcb19 [ 1070.036449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1070.040392] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1070.042935] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1070.045162] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1070.049430] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1070.050426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.051398] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 1071.757723] Bluetooth: hci7: command 0x0405 tx timeout 13:41:31 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') read(0xffffffffffffffff, 0x0, 0x25) pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000007d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}) setresuid(0xffffffffffffffff, r2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) accept4(0xffffffffffffffff, &(0x7f0000007a80)=@hci, &(0x7f0000007b00)=0x80, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000000c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0xffff, 0x0, 0x8}, {0x9, 0x0, 0x5, 0x20}, {0x2, 0x81, 0x80}, {0x4, 0x0, 0x5, 0x5250e802}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000002c0)=ANY=[@ANYBLOB="0031acd027879800000000000000002d0a5c1902b4141e9bbe8e8dad7a000000001ac942e8d0ea5c5a00f6c1ae436adcbb7ba287c60257fa4900000000000000"]) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(0xffffffffffffffff, 0xc) pipe2(&(0x7f0000000280), 0x0) 13:41:31 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:41:31 executing program 1: r0 = syz_open_dev$sg(&(0x7f00000012c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="00ffff7f0000000000000000e4e9a4a2ef3641e58010711ef4483f5160ab536b40be09e39c1ee8ca652663"]) 13:41:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x6000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:31 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) readahead(0xffffffffffffffff, 0x0, 0x6) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x3e91509e]}, 0x8, 0x800) getpeername$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000009c0)=0x14) read$eventfd(r4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) creat(&(0x7f0000000080)='./file1/file0\x00', 0x142) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x220000, 0x0) sendmsg$inet6(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="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", 0xff}, {&(0x7f00000003c0)="2c020eb552dcefb22cb9d3aef4a8ea2257a676acaf46a9874138b92d1d1e5886ec4e403e714fb038625eb4e367e6a873e806f3f818470808d0482a7d9b72f7d09b94b5e289861a8f79c592a5d218b979028237c43a481ecf5ca61bc297d2da0df1385e9f5a2fbd68b7f5502541e70a66b87c1879c7a4a0a7fae77af99c458b846f1828fde632bdb5e10658ed8c9b7d4150e0a5071da44032151476165b9963acb0ef8cf9060fa5140cc5834928", 0xad}, {&(0x7f0000000540)="cf8b5c731d91edee51de71ebf42b440977c6f22fd466196287de9cb185eaf418ca249a09a502a53ef3f0a0f206", 0x2d}, {&(0x7f0000000580)="3f64be8098d257", 0x7}], 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x318}, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 13:41:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 33) dup2(r0, r1) [ 1084.599303] FAULT_INJECTION: forcing a failure. [ 1084.599303] name failslab, interval 1, probability 0, space 0, times 0 13:41:31 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r0, 0x8) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{r1}, "a91015570c2b1212fef93b65fe385e2d9b770b143a3711ffcc6c3bd6bd0beb2b2e178875fab4997fe62f46291447f18528de2ad12d74630a1ff601c550c74fe958fe1f41841a30a1e27b439db5f907f702c5686bc217e2f050e9f05c291ab7e555bda11f1a85612b892d2880ef5759786a118d3e436a17619c22e38390f7933ca6be7f3123b1af1509c23873c08d12e1a875a74ed37917af4deaca0ce8ee7ac2811ea232df2957c140e004ec648fcf1436890c1d89bb24c00495511dbfb831be5f9ae722d40d8ed5845ce160c7fd28478103ff65e167b8b5b978d519fe9160c194697ee0d92e40d873ffc656bfd9d4da1887cc216868bdbb6a49246f93417f0a3e41b3efdf75fd77e9076dbd9110b53eee892da9b170a097016dc1efa96517bc89094f573be024b7b3779b3e205929eba3b34402a79f3f4854334e9a3176cb5ee22cb90ff72d96d14f2900e8ccefc56d49bffef30c4e848e294d80d8aad90ab0744d9159de80f8e957a7e43cfc6d479324d2e254492f6c6b10a4fd522ce89be179d60131f8b675a81e88ce7395057a88d0aefa37f72df24f7ac1789287b0ada4e6d5554e9417b6592a92f594d6bf12df5b328afa43c69e84feae91d8d674334d6277df5611a2263dff6fcc9e3e91feb86f483ed7d2dd302cec4545dd63f3cb336867396e8fbfb9cc5335c8d5dee5af13a44ce6c7db71f9c5413a1d68736a0e1eb5f67a44c0eecd32ba247658df10d90bcb7ecfa58467d2e73b9bed926ac25ffe65bb4a0a5dc43c9c0decdbe1a6dd79a2c17c2003f4776acb73ba6cda0a5bedf119169a133a5ee2cba81e5a993287e5abb98af71a9cb811977e1134140a43856f7e5f170b1e1e61838765b27e110807a627800000000080c455937ea247e89876abad48dc08e3af539a57ce119a1e6dc3c0a4a72ea55cc1949e204d1e3ae5eed287efef7e5227ced5cbbd5e2e8b8fa7b06a4f411766760707421aee1eae8da5679dfc51a47fa4f228b2262e803030ed9e5ef0b523c12903c360e3f25c95d1cea576ef7a628882f239ee24b8056a76d573a810b60ce7a76f07b71e42b1c459a83132477ec5f133323aa6462781f8427f44a8c2130300e5afd2c80b41351010ce38a6b2a0a4b2133c56441dfcb590930ae10164212c71157af515e305da72079e0e0b405dfa323450ddcb3a112cb4df360679e638027bf81a4d15cc8eeddab19123ec6d7ad7909a30fb9feccec524c08273f8ac08c97cbfb562f049545ce328c590b076d79eacb5a7343cf0d19efc70d33b2aefb0f07c482b0486e8f20087667d4ff07ab39e5b3c2e10be9f08190d0053379285e3fccdd6b6f8224b960908953f1cfefca81f985e5f5faf2756ea8cf621ca3a80509ad4ec0f02cdaf795b68cb1267745f21aeda36d1224b2e5688620f599e537126718f7bd26cfb67b73fb6181bbb49fe5e4a239e009999acb21870d6380364bc41c18b90b831e8371efdf62b8fe1bc871825a52722ae4294a97fc70fc83e81e48a7381e23f299b89fa5fa95cc672483ad3b1eb2be1cd2bddb9e4bf221b425af208386b2bf99118e8a38496c3feebfcf32bf8f1492bd4718b256dfeb3bd5da1bc12fe3e62816b978c7f388884bee72f42b6658eb85cc34fcc2afb395dca870dd17acc1616811aeea9cbdcfae962ed52c402eb4e5e14d323e18125876d1136dae79450576dd3ad21f3b3125d9270d196aa91021b2e5a3e5dd5caa7120f3c669c60c8380f1923b5e22dc99dd3246dcc77835d597e843fa95a9bc0147ad58fd30c1c8ec70b9bcb7042994c916d50e2e08e43ef78995d509d2a599642ce5ec8850a8a15c4c02ba543b487cb60a6153ed600b661c1667eb96a5817b74e2ee4caeed172abd94ea9ea829235f13f5195b43f2dfb4613f6731c2e4e538f65d67ed06f82ff47bb585a3299eb6d8f7d3d67544d89d9b7f96b9e65a0d73f6a9bc61508a6ad0ff62cdda01cf3dfb2c1367dccec640f4260c4127bb9c58993410fcb9365c04c506e277a08ae71a655a69d03d86cd6c76acbac0166f44c55ffd580bc30efdbd38bc77ee368ab29a0b1ce5cd61991fea455bf25ea88687299f0b9d8d3df06687d9f730dc1d1914a87b232aed0d7a0ecdc74ff75eeb74d5fa6c4cbc50ea66097bb2873d9a2a988c6924c9b487af7257f4dc0bae9033aac8a0f4ab35992c1887466723fbd4f4f5573e9c0639ed80d7ac681b2aaae23208b546b0b725756c7df7956505136ad76808619d173201a404c3e4df32085101fcb36b0e8bd534eaa3407b0546dd68ec8df17960593457df139196de1496a5959f4cb469d86ff54766ab80acb9b438a23d04ed7f63d61c756f7c42ec6359c53004f5e8889328945460a6d499ab6e1a651a5544f83f3ea6c9206aefa1f015a535cd5d94e5f3965c01e1bc6c8d0a337d8fbf70c35f8846c44ba1becceff84b8c80e3d1db5c51ecd0f947632bab653fd876cf4ffff1929415c92c735ab340401c51d94e116b2ad6c0c9a5eadbd5740158b6fd13c0871a0c6af7194b35bbd13c238b67caca7137122b68c2e0067e2101256d7e7cd7dc35d11ec02921f1ef7745beca98eb349b36875ad147316274aebbac846d57d8134a9457cc49457fcb3aacfbaec1fdb21dae6edf6aa13595adbba2c20dc900dd0fd7a2ba4318bc34ba0cd0633de6609712c4861a4467643a483a60a96fe9da85311fe2d15934c6a6f6b8c01c1438e28658f456b469144c936d9a083453e82e19379c8831ff98538698fadac54c380f4a8dee8c9683c0189ad42db5ab585f5c147dedd77cd156ca5a080ca0fd63e9bcf4ca0944a814c60c9fcc52b6159e4011dd077fc9c99fbf886751b7b667940317d934029f5d5c25214851a5b7e09748f3b36bc50b144787026188904417b80bc273cdef25df69f4c683e233cf72be4e01d5d766f483c478ad3552707fb9abf4981bd379c31f1f26b10be9105362c7df415657b62384c4d01508a26bfd97115a67b424dfab7ecdd5b4f806f8d4c7843b2b227bd2360e51b2a611915c5be66cc669f5884570dec2da5f1368b5d1c5689524fcad4ca206f1f0cf8f64f32c92a215308b3c56955f5f50ca3bbc0a1397742c9a8fad8af5fac93d092bc575fb0a3117533ca51cd172e5401368dd6653b7534da16fa3c2466bba2556f6af6ac34b3a9513b5fcdde32ed38cd76703bc35433a68c72c689025ca179108e8f31617e62a9428aa6020041e3a46941202bfc22b71f958000862b9587db704d338674afdbdf4dde9b6f2210d05f3f39f6bcc0dc3c738cf21fc04a3617128b1b67c2db0405680196e37c437fdcb27a4589a9258f678ebe499ae679f9c3b8271644c293cb54c15e0ac813e76ed3abfbbfa8cb3b4b494352aeede313a9288090b70d9432c503f5ef59c598e0daec141b92432a281c954d9ae463b595430f7f4cc4e9aae649c6e53d9b0332497835e3353342e109fa10009fd53d5c0be619894d0857668f5b26971deb83e0c6a60ac0ec2a6e7683808c331e4631457c7249b9174cd65add991adb3d4c42429dc8ac32e5faf2100042335152a44d5dfbf3c53aa33de1fc3d8597c1cef1010bf548ede642476830b5a7bde58bd6036f861f3a69ddd2d1cdd851e538133d5fe95094d189641d8f0ee12a34d0a094bc79e7f0253c05dfb9c0cb961ad743d892b40bcc8377dc88e1922435e90785d10ddf18dc7bd539ef60050f9ecf990c518ac3dc4ebb16cdac31a0419d3fe3fd95c718c52ce744d21348ac0db6cb056a8e8ce0400a4975e8ceda498b5da9e4124ccf35e11c2177e771b94b26c2dcdfce581c00e687357a900b56eee112c7bafaa317666b96c63634c05a01bb7a0fb67ce1233714f7c375d8cd78e4b3089fd84945a8a740abc2342205403435e94cf3d377ca8852699feeab4dd7347734236c2b07200d620de7b92adc4924da2b648659066ab7b3f0e9d1de5efd8335b4c7616ac8c9b16ba1dbbe79fe9ec7e059b832195627d187b5743b9f6aa937084d85bf4e0d7983500b3627f8cf133c4395d3860c00629aabd528f3b2751b7d15ff3ca64a09629410ad4594066cba421186df2b912cd40e20fc81e417591b5d27c7bd641a0dd8b558632a2b630033a64f1c7c8cc19804ea28958c277dc8cf0988492a58f78a4fd616571cd5904f90b64e91c5ab7af6c912b5bdce9bbc711adeda8e519a28683f95f9aa405c91d5cee9b936d426c5c2b6ffd53e42c1f6dc8c954c04be62656ac536e13d78542ce561aaa9b6fe8e320fdd88812dc0ddc666306851ca37e7d8372c60cc62e9ecb294f8bd7d3e1960082e3a6a8597f11ded6dbd521eea2b035b9663769ecd7937da35c58ddf5c4ce54ceda88f7562c7e9e77522476d8dd7784a9ba443d06f8c8875c587d12329c20b914f174cfc3d1c21ebe0147f76e6262b5a5e5d8e710fcb3094715802adc10b974b1457ddfe9387db6e9c70eacf6b6a02959b5a2e5b655eb7e827f4ae0cffd1a27af6294a29ed8e48f30f15d084ed1d207d12ecda4ed1910737899ba0a3216d308a3e5ba299cff85d72e2b5ec37994a7c87d5e2ef3093088b1c76297caa285decb22c1be3b4c00d09c3761087f819d1bb8cdb7c2bbc8214d53e89994c180a28f1f14a05412ab26022072fed07539b11db0245bea4a2a4a84f7fb1562b2da90640f43713e701dd79f80983dad045f814031f94a5014cce25de476f79cd2ea1a8e57fce776e62425205531978967e34952af594e93b19a984cd291caa0c9461614e43d3ee0ee2bf1ad960a93cbbf49054ca2c9eb22534b668f86a0fba3fe3fd402c9512114d7842ee2a2e17a70dca0e2bd361fd7ff9b9bc0c867a357dc9a20185c02967230fa29704c960202f4133cc4dde1cfe47358051e55e5c2f53aaa40bfa1e8218bec10241840622b49f9add496b76931f4f08e82ed56418b5f43bcb632b765095f6de7015aa61a7799df03a0f426ac568847f0de0240e3d69c62d0484db6ac0770411b8e3ffdda54811e2767002b240c8615d5dff43b0b3bd7d7ecdfe1507a415fa7c733e6119695d8ce47cc8d16f7f8930bd275e6f4fc6f23c10a56bbdd7ba1e69e3440dc4026adcbc7d8b900612aab5afb4e6b66f3767fec32f940c67a5087d1516fcf76feafe926d75437b3a987aa49f51f7cf72afd21d277bd55498830597244a1652a3d5b6bc2ea56be758d68f0bb0dec7af1d23efbcf70359b05b197cf154f45c81a5f4fc9c7dea57797acf5cceaaf47f2e1f7a8ee8f1536bf6d8df2d344a43739c72d13e71afc990ca36547ce0a62fd1ce7218787bb74c5be8e1b78bebfd4d9b70094400889fc3a73565c012abc35143cfcc93889b28aaef0bb2bd61eeb2ae6c9c29171d523a4b1a22a5597dac5152e349eb376740e8b404e3a18cf19c6bfa2c565db59368a9b518177b9ddd86042b0f7bc97d9092da360ddab4849b9b6de57e356832c5d77a352a77264ab2364a266558e3038b0329d488b481f85caff7da6747d97667540616caa5e869eac722b8bba446ee9c54bd9b1f4abc2fcf8e8ba02e71c77b33adee6c73e957b718aa9970183b30ea452f8a5c4613ccd7a4077a132119b4703d67537538eeda50ae652c6e9de14ecf10a7a9114cb8c7bea24adc8db399087f24cba3e5e3bfc1047ee0597ffadc95dce0f8b092c6d0f6cc668d2d1e72bff8a1302088815b87bc42b40ae5b60aa8f6847a7d5241c52cf68f2736bb66e848982db3b8dd5b763de9cebba82433ff52fb854770fcde56144028713b6d549467500deb06dbc5fe6f5a34ac00"}) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000180)={0x7ffffffc, 0x34, 0xf, 0x1f, 0x4, 0x8001, 0x6, 0x2a}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0xfffffffffffffe17, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 13:41:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 9) [ 1084.600967] CPU: 1 PID: 7555 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1084.609859] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.610904] Call Trace: 13:41:31 executing program 1: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) r1 = syz_io_uring_setup(0x421, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000002a40)) io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={<r3=>0xffffffffffffffff, 0x200, 0x7, 0x9}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000180)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4}, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x1f, 0x0, 0x0, 0x0, 0xde, &(0x7f0000000040)='gre0\x00', 0x2, 0x8001, 0x7fff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000001, 0x4000010, r3, 0x0) write(r0, &(0x7f0000002e40)="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", 0x1000) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x7}, [{0x2, 0x4}, {0x2, 0x5, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x8, 0xffffffffffffffff}, {0x8, 0x2}], {0x10, 0x1}}, 0x4c, 0x2) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) [ 1084.611252] dump_stack+0x107/0x167 [ 1084.626066] should_fail.cold+0x5/0xa [ 1084.626622] ? create_object.isra.0+0x3a/0xa20 [ 1084.627253] should_failslab+0x5/0x20 [ 1084.627755] kmem_cache_alloc+0x5b/0x310 [ 1084.628266] ? mark_lock+0xf5/0x2df0 [ 1084.628720] create_object.isra.0+0x3a/0xa20 [ 1084.629253] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1084.629893] __kmalloc+0x16e/0x390 [ 1084.630381] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x280 [ 1084.631188] genl_family_rcv_msg_doit+0xda/0x330 [ 1084.631765] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1084.632566] ? cap_capable+0x1cd/0x230 [ 1084.633043] ? security_capable+0x95/0xc0 [ 1084.633563] ? ns_capable+0xe2/0x110 [ 1084.634041] genl_rcv_msg+0x33c/0x5a0 [ 1084.634588] ? genl_get_cmd+0x480/0x480 [ 1084.635314] ? nl80211_join_ocb+0x160/0x160 [ 1084.635845] ? lock_release+0x680/0x680 [ 1084.636356] ? __lockdep_reset_lock+0x180/0x180 [ 1084.636964] netlink_rcv_skb+0x14b/0x430 [ 1084.637507] ? genl_get_cmd+0x480/0x480 [ 1084.638012] ? netlink_ack+0xab0/0xab0 [ 1084.638529] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1084.639085] ? is_vmalloc_addr+0x7b/0xb0 [ 1084.639583] genl_rcv+0x24/0x40 [ 1084.639983] netlink_unicast+0x549/0x7f0 [ 1084.640483] ? netlink_attachskb+0x870/0x870 [ 1084.641029] netlink_sendmsg+0x90f/0xdf0 [ 1084.641531] ? netlink_unicast+0x7f0/0x7f0 [ 1084.642077] ? netlink_unicast+0x7f0/0x7f0 [ 1084.642594] __sock_sendmsg+0x154/0x190 [ 1084.643078] ____sys_sendmsg+0x70d/0x870 [ 1084.643575] ? sock_write_iter+0x3d0/0x3d0 [ 1084.644086] ? do_recvmmsg+0x6d0/0x6d0 [ 1084.644562] ? lock_downgrade+0x6d0/0x6d0 [ 1084.645067] ? __lockdep_reset_lock+0x180/0x180 [ 1084.645684] ___sys_sendmsg+0xf3/0x170 [ 1084.646208] ? sendmsg_copy_msghdr+0x160/0x160 [ 1084.646769] ? __fget_files+0x2cf/0x520 [ 1084.647253] ? lock_downgrade+0x6d0/0x6d0 [ 1084.647757] ? find_held_lock+0x2c/0x110 [ 1084.648288] ? __fget_files+0x2f8/0x520 [ 1084.648797] ? __fget_light+0xea/0x290 [ 1084.649314] __sys_sendmsg+0xe5/0x1b0 [ 1084.649790] ? __sys_sendmsg_sock+0x40/0x40 [ 1084.650322] ? rcu_read_lock_any_held+0x75/0xa0 [ 1084.650902] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1084.651541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1084.652166] ? trace_hardirqs_on+0x5b/0x180 [ 1084.652732] do_syscall_64+0x33/0x40 [ 1084.653221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1084.653857] RIP: 0033:0x7fb9560b7b19 [ 1084.654313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1084.656552] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.657515] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1084.658397] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1084.659290] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.660203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.661075] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1084.704699] audit: type=1326 audit(1740750091.938:293): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 1084.710351] audit: type=1326 audit(1740750091.942:294): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 1084.714388] audit: type=1326 audit(1740750091.948:295): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 1084.723135] audit: type=1326 audit(1740750091.954:296): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd10f609b19 code=0x7ffc0000 [ 1084.742474] audit: type=1326 audit(1740750091.968:297): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd10f609ad7 code=0x7ffc0000 13:41:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x7000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1084.749476] audit: type=1326 audit(1740750091.968:298): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd10f5bcab7 code=0x7ffc0000 [ 1084.755258] loop6: detected capacity change from 0 to 262144 [ 1084.765156] audit: type=1326 audit(1740750091.970:299): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd10f5bcab7 code=0x7ffc0000 [ 1084.776947] audit: type=1326 audit(1740750091.970:300): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd10f5bcab7 code=0x7ffc0000 [ 1084.787430] loop7: detected capacity change from 0 to 16776704 [ 1084.795919] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 1084.795919] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 1084.795919] [ 1084.798327] audit: type=1326 audit(1740750091.973:301): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd10f5bcab7 code=0x7ffc0000 [ 1084.802688] audit: type=1326 audit(1740750091.973:302): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7556 comm="syz-executor.7" exe="/syz-executor.7" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd10f5bcab7 code=0x7ffc0000 [ 1084.812240] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 1084.814023] EXT4-fs (loop7): mounted filesystem without journal. Opts: noacl,,errors=continue [ 1084.824999] FAULT_INJECTION: forcing a failure. [ 1084.824999] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.826801] CPU: 0 PID: 7559 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1084.827668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1084.828733] Call Trace: [ 1084.829071] dump_stack+0x107/0x167 [ 1084.829546] should_fail.cold+0x5/0xa [ 1084.830068] ? __alloc_skb+0x6d/0x5b0 [ 1084.830581] should_failslab+0x5/0x20 [ 1084.831080] kmem_cache_alloc_node+0x55/0x330 [ 1084.831664] ? __lock_acquire+0x1657/0x5b00 [ 1084.832240] __alloc_skb+0x6d/0x5b0 [ 1084.832737] alloc_skb_with_frags+0x92/0x570 [ 1084.833348] sock_alloc_send_pskb+0x7af/0x930 [ 1084.834008] ? sk_alloc+0x350/0x350 [ 1084.834523] ? perf_trace_lock+0xac/0x490 [ 1084.835062] ? lock_chain_count+0x20/0x20 [ 1084.835603] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1084.836296] ? ip6_mtu+0x1bb/0x3d0 [ 1084.836769] ? lock_downgrade+0x6d0/0x6d0 [ 1084.837327] ? ip_frag_init+0x350/0x350 [ 1084.837832] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1084.838415] ? ip6_mtu+0x1e9/0x3d0 [ 1084.838860] ? ip6_setup_cork+0xfb7/0x1740 [ 1084.839383] ip6_make_skb+0x2de/0x4e0 [ 1084.839840] ? ip_frag_init+0x350/0x350 [ 1084.840324] ? ip_frag_init+0x350/0x350 [ 1084.840806] ? ip6_push_pending_frames+0xf0/0xf0 [ 1084.841383] ? ip6_dst_hoplimit+0x199/0x440 [ 1084.841975] ? lock_downgrade+0x6d0/0x6d0 [ 1084.842506] udpv6_sendmsg+0x20d3/0x2ad0 [ 1084.843004] ? ip_frag_init+0x350/0x350 [ 1084.843493] ? udp_v6_push_pending_frames+0x360/0x360 [ 1084.844122] ? __lockdep_reset_lock+0x180/0x180 [ 1084.844716] ? lock_acquire+0x197/0x470 [ 1084.845637] ? find_held_lock+0x2c/0x110 [ 1084.846687] ? lock_acquire+0x197/0x470 [ 1084.847698] ? find_held_lock+0x2c/0x110 [ 1084.848989] ? sock_has_perm+0x1ea/0x280 [ 1084.850150] ? __import_iovec+0x458/0x590 [ 1084.851347] ? udp_v6_push_pending_frames+0x360/0x360 [ 1084.852417] inet6_sendmsg+0x105/0x140 [ 1084.853584] ? inet6_compat_ioctl+0x320/0x320 [ 1084.854951] __sock_sendmsg+0xf2/0x190 [ 1084.856124] ____sys_sendmsg+0x334/0x870 [ 1084.857347] ? sock_write_iter+0x3d0/0x3d0 [ 1084.858710] ? do_recvmmsg+0x6d0/0x6d0 [ 1084.859878] ? __lock_acquire+0x1657/0x5b00 [ 1084.861184] ___sys_sendmsg+0xf3/0x170 [ 1084.862422] ? sendmsg_copy_msghdr+0x160/0x160 [ 1084.863803] ? __lockdep_reset_lock+0x180/0x180 [ 1084.865201] ? trace_hardirqs_on+0x5b/0x180 [ 1084.866597] ? lock_acquire+0x197/0x470 [ 1084.867792] ? find_held_lock+0x2c/0x110 [ 1084.869025] ? __might_fault+0xd3/0x180 [ 1084.870267] ? lock_downgrade+0x6d0/0x6d0 [ 1084.871515] ? io_schedule_timeout+0x140/0x140 [ 1084.872943] __sys_sendmmsg+0x195/0x470 [ 1084.874191] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1084.875483] ? lock_downgrade+0x6d0/0x6d0 [ 1084.876738] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1084.878209] ? wait_for_completion_io+0x270/0x270 [ 1084.879660] ? rcu_read_lock_any_held+0x75/0xa0 [ 1084.881101] ? vfs_write+0x354/0xb10 [ 1084.882231] ? fput_many+0x2f/0x1a0 [ 1084.883322] ? ksys_write+0x1a9/0x260 [ 1084.884524] ? __ia32_sys_read+0xb0/0xb0 [ 1084.885774] __x64_sys_sendmmsg+0x99/0x100 [ 1084.887061] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1084.888691] do_syscall_64+0x33/0x40 [ 1084.889814] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1084.891415] RIP: 0033:0x7fbfd48dcb19 [ 1084.892559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1084.898257] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1084.900568] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1084.902765] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1084.904969] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1084.907215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.909367] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:41:32 executing program 1: syz_read_part_table(0x0, 0x7, &(0x7f00000015c0)=[{&(0x7f0000000000)="f270c62f523dd33b135c8972b9887881e320e3cf9c2e2c3f766cd75d698168ee4932038bf85b2191617180e4c0f19f8a9dbe7e0026", 0x35, 0x3}, {&(0x7f0000000040)="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", 0x1000, 0x10003}, {&(0x7f0000001040)="7a94b1f6d2391d4396a8b0b12827f3aeab4f6d045e3ba135c558a132680bd6e80ee93db155ea51f78ab1bf972da9298060a8a00c4279fe5cf25afe20a3e0846360f297b14b9a8a67b73150a0bcec6d8c116601e4aae91205d94d8023e81214663dcbfe48000771d871fd01d9a9343d514615f16f4a595edb9e28728c74c8e53bc1d58da40214c36cc3797314c4845e12", 0x90, 0x7}, {&(0x7f00000014c0)="bb6a6cf8f1efb73cfec17546e2662b6e69a8cb62dd2b6c26c06494ed5fdc224dc3787c3bb5efaf60ded7998331d743c7d0604baa0ca05d203a4aee0e7e8161cacc590f1471b8c3b358236bc85452c68ef0e8ed4d8014495b861c47bc52c47a51ac60673b33db14e850e92419b796af838c7475902195b1bb3d90a828e9ca59ef47276e1d271f23956f6fbb2534ca4748cc7d9f6fa8de70b34dc03fa2a9ce37fba4753e7c275631ccb3bd6d43a36d387d71d41e4ca9dc78eb45bcd5fc9312f688a21484b8b4ef901d400afa934f8f42cdcc2cf0eca18dcad9e7e5ac16f1631897848ec0cd64", 0xe5, 0xfffffffffffffffd}, {&(0x7f0000001200)="39a09feccba876e3dd4f8243948cffc4f27de0395c54964710821c42d5604fe96465711db40f0a42a91e7694b87e43296269b6dc892ae36f5b2d236270e8327623b9c891833d5708b2f16c0d3f1e44fd7e39a92d4689274afba2d0269975f593581daaaa0dc7f86a0055f78f7da65844ee045c1695af590efdd20141d0649f7141dc1aadf0c0dd2fc04f864c7eb80657d1c9703531aae5a37fb61ce0c3bb115f1c0816d81412d9bea856de9c702410bcaccbeb6f1118784e9b6260099133366fdc58b4a89e5173889f82356ab4474c4de7d754630ab68e18b5f45a8ea012386a814c00174ec3434a4a105521f82917f3097c8d4097b81d237a9e6024f78311", 0xff, 0x18000000}, {&(0x7f0000001300)="b26753f300f068a8602c3851376633dd9a0ea022ff80fa8bd6587ec5e346669b205e033f2ae775b5262f63b91ebc80e2b3a61f4f3dedbc946f775a2626e289be0e83a0b0d638cd6e37f9476c949701c4cc2b6480d1c47d575d4644748048941706650fc817892c32921a92f18d74f266d3a821596da8137e0528b192e7d69aaf47252974bc81897c37a570080dcde32af238ccc1016d674635a863f36708edac73df02c7ec6418329966f624579674a417cbc1a6f0c3eb9ead94b938ef2562d3d4b8a91d5c558d871b4cbfefdbfab07f007b971eba9e6b65047d87d8f07e2c1e3a4aa615cb30bb61534b", 0xea, 0x100000001}, {&(0x7f0000001100)="68bb56f71fe9480767f7ca1e5010ee208035e20804b67231854bac6d834071f9372299d285d28ff1aab5a29614e1e0b0941b38070fd6e512150a7ade134e6ff90dd0886fd43e7fa1c8168fa49922a7e529677291980338470097b69c854a3cdad8b0d275e7bb043abccb45f6dd6b879a5ceff7ac35ff37f44665d6951c5e460be0466ae67fdfd5aa7d8e53", 0x8b, 0x1f}]) syz_read_part_table(0xff, 0x2, &(0x7f0000001a00)=[{&(0x7f0000001940)="bb3ee6a81658d1da91725a", 0xb, 0x6}, {&(0x7f0000001980)="7bcb53ebd65a00b8433f6ed5e1dbd110357d30b1ff0ca513ccbabda49379e57b6318b900d7e2322f3ceee210898575c5fbf6104445b7af84c9afe8316be447a5149841d6c3038706a06275c0dd63041d568983341f68e4ba407f49df075b051d83df1741b0", 0x65, 0x8000}]) clock_gettime(0x7, &(0x7f00000011c0)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r0=>0x0, &(0x7f0000000140)=<r1=>0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000001b80)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000001a40), &(0x7f0000001b40)='./file0\x00', 0x0, 0x6000}, 0x4) dup(0xffffffffffffffff) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001900), 0x6000, 0x0) syz_mount_image$nfs4(&(0x7f0000001400), &(0x7f0000001440)='./file0\x00', 0x34, 0x4, &(0x7f0000001840)=[{&(0x7f0000001480)="3a75e205279ea026d743200097cbaa42152fa531e7499728ec8491f609e9a26f270be46569", 0x25, 0x1}, {&(0x7f0000001680)="eb022d9f55fe67d5e0a0fdc3993347281d7849e815edb3716e79075c5fc7530363e72fb2b0029c62d2cc9e1c99c0fbbc5603807a6a42a59979c7954441ec42e12a1d", 0x42, 0xfffffffffffff000}, {&(0x7f0000001700)="2fa67d6ccb8c4729a2c181df17cf5e9dc82cc45456f311a55a4e5e0d1e2469148a8be2359f78deb6d51d1b68c8e760c70c02549b932483f97c85d049b5fc0b78fe75d43e077d93e41baa9b49c9833e062ce593691ac26f82968bd71e16", 0x5d, 0x4}, {&(0x7f0000001780)="7b5177dc4ca579f6f666fb3ed226c14c33fb515937ab994abff5d52f43ebcab35f8f8f085a6a1a662debd3590fc20b7921ee997060851bf8d15859027a23ea115f0dfc0cb3806290c14f2ed450c04867031f412f3b801af8d72140fb988287a457bc522db15e97877c9efea90f6798fdea2afdc96f8c743fd92acffe7c480f5a6b5bb24e02c0f0bde207afa7214f", 0x8e, 0xfff}], 0x2, &(0x7f00000018c0)={[{'%&\x9e--&'}], [{@appraise_type}, {@subj_user={'subj_user', 0x3d, '}$((\xb5'}}, {@subj_user}, {@hash}]}) 13:41:32 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 34) dup2(r0, r1) [ 1084.938936] loop1: detected capacity change from 0 to 135266304 13:41:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x9000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1084.960374] loop1: detected capacity change from 0 to 65536 13:41:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000240)=""/227, 0xe3}], 0x1, &(0x7f0000000340)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x24, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x5, 0x0, 0x0, 0x1, [@generic='H']}]}, 0x24}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="1e002dbd7000ffdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000200000080001007063690011000200303030303a30303a31302e300000000008000300020000000e0001dc6e657464657673696d0000000f0002006e657464657673696d30000018000300010000000e0001006e657464657673696d0000000f0002ce286d08985d3a006e657464657673696d300000080003c506136992"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040800) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x54, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x17, 0xa8, @random="56e6842c6a049a25f4b3912d0830221114fdcb"}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000000}, 0x400c040) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000c40)={'ip_vti0\x00', 0x0}) [ 1084.997270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1084.998139] loop1: detected capacity change from 0 to 8380416 13:41:32 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, 0x0, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x2000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xd8081, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c000000000101d96300000000000000020000002400018014000180080001000000000008000200e00000010c0002800500010000000000240002800c000280050001000000001400018008000100ac14140008000200e00000010800074000000000080004800400038000"], 0x6c}}, 0x0) [ 1085.022842] FAULT_INJECTION: forcing a failure. [ 1085.022842] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.027281] CPU: 1 PID: 7589 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1085.029532] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.032358] Call Trace: [ 1085.033260] dump_stack+0x107/0x167 [ 1085.034491] should_fail.cold+0x5/0xa [ 1085.035702] ? create_object.isra.0+0x3a/0xa20 [ 1085.037165] should_failslab+0x5/0x20 [ 1085.037748] kmem_cache_alloc+0x5b/0x310 [ 1085.039099] create_object.isra.0+0x3a/0xa20 [ 1085.039741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1085.041230] kmem_cache_alloc_node+0x169/0x330 13:41:32 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x22) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r1) write$binfmt_elf64(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r1, r4, 0xffffffffffffffff, r5, r1], 0x7) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x39, 0x3, 0x8}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) [ 1085.041911] __alloc_skb+0x6d/0x5b0 [ 1085.046390] alloc_skb_with_frags+0x92/0x570 [ 1085.047543] sock_alloc_send_pskb+0x7af/0x930 [ 1085.048651] ? sk_alloc+0x350/0x350 [ 1085.049580] ? perf_trace_lock+0xac/0x490 [ 1085.050819] ? lock_chain_count+0x20/0x20 [ 1085.051331] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1085.051943] ? ip6_mtu+0x1bb/0x3d0 [ 1085.052375] ? lock_downgrade+0x6d0/0x6d0 [ 1085.052877] ? ip_frag_init+0x350/0x350 [ 1085.053413] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1085.054388] ? ip6_mtu+0x1e9/0x3d0 [ 1085.054824] ? ip6_setup_cork+0xfb7/0x1740 [ 1085.055338] ip6_make_skb+0x2de/0x4e0 [ 1085.055798] ? ip_frag_init+0x350/0x350 [ 1085.056328] ? ip_frag_init+0x350/0x350 [ 1085.056814] ? ip6_push_pending_frames+0xf0/0xf0 [ 1085.057426] ? ip6_dst_hoplimit+0x199/0x440 [ 1085.058177] ? lock_downgrade+0x6d0/0x6d0 [ 1085.059166] udpv6_sendmsg+0x20d3/0x2ad0 [ 1085.060033] ? ip_frag_init+0x350/0x350 [ 1085.060522] ? udp_v6_push_pending_frames+0x360/0x360 [ 1085.061146] ? __lockdep_reset_lock+0x180/0x180 [ 1085.061717] ? __lockdep_reset_lock+0x180/0x180 [ 1085.066153] ? lock_acquire+0x197/0x470 [ 1085.066672] ? find_held_lock+0x2c/0x110 [ 1085.067245] ? sock_has_perm+0x1ea/0x280 [ 1085.067793] ? __import_iovec+0x458/0x590 [ 1085.068337] ? udp_v6_push_pending_frames+0x360/0x360 [ 1085.069052] inet6_sendmsg+0x105/0x140 [ 1085.069584] ? inet6_compat_ioctl+0x320/0x320 [ 1085.070230] __sock_sendmsg+0xf2/0x190 [ 1085.070741] ____sys_sendmsg+0x334/0x870 [ 1085.071286] ? sock_write_iter+0x3d0/0x3d0 [ 1085.071837] ? do_recvmmsg+0x6d0/0x6d0 [ 1085.072358] ? __lock_acquire+0x1657/0x5b00 [ 1085.072935] ___sys_sendmsg+0xf3/0x170 [ 1085.073507] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.074170] ? vmacache_find+0x55/0x2a0 [ 1085.074693] ? __lockdep_reset_lock+0x180/0x180 [ 1085.075314] ? lock_acquire+0x197/0x470 [ 1085.075833] ? find_held_lock+0x2c/0x110 [ 1085.076382] ? __might_fault+0xd3/0x180 [ 1085.076903] ? lock_downgrade+0x6d0/0x6d0 [ 1085.077457] ? asm_exc_page_fault+0x1e/0x30 [ 1085.078068] __sys_sendmmsg+0x195/0x470 [ 1085.078698] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1085.079370] ? lock_downgrade+0x6d0/0x6d0 [ 1085.080061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1085.080837] ? wait_for_completion_io+0x270/0x270 [ 1085.081636] ? rcu_read_lock_any_held+0x75/0xa0 [ 1085.082324] ? vfs_write+0x354/0xb10 [ 1085.082878] ? fput_many+0x2f/0x1a0 [ 1085.083457] ? ksys_write+0x1a9/0x260 [ 1085.084036] ? __ia32_sys_read+0xb0/0xb0 [ 1085.084635] __x64_sys_sendmmsg+0x99/0x100 [ 1085.085248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.085999] do_syscall_64+0x33/0x40 [ 1085.086487] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.087164] RIP: 0033:0x7fbfd48dcb19 [ 1085.087648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.090055] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1085.091052] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1085.091988] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1085.092923] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.093865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.095011] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 [ 1085.101990] nfs4: Unknown parameter '%&�--&' 13:41:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 10) [ 1085.146346] loop1: detected capacity change from 0 to 135266304 [ 1085.175200] loop1: detected capacity change from 0 to 65536 [ 1085.198724] FAULT_INJECTION: forcing a failure. [ 1085.198724] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.202201] CPU: 0 PID: 7606 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1085.204015] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.206377] Call Trace: [ 1085.207020] dump_stack+0x107/0x167 [ 1085.207979] should_fail.cold+0x5/0xa [ 1085.209041] ? __alloc_skb+0x6d/0x5b0 [ 1085.209970] should_failslab+0x5/0x20 [ 1085.210476] kmem_cache_alloc_node+0x55/0x330 [ 1085.211067] __alloc_skb+0x6d/0x5b0 [ 1085.211561] ? genl_rcv_msg+0x33c/0x5a0 [ 1085.212085] netlink_ack+0x1ed/0xab0 [ 1085.212587] ? nl80211_join_ocb+0x160/0x160 [ 1085.213155] ? netlink_sendmsg+0xdf0/0xdf0 [ 1085.213717] ? lock_release+0x680/0x680 [ 1085.214865] ? __lockdep_reset_lock+0x180/0x180 [ 1085.216161] netlink_rcv_skb+0x348/0x430 [ 1085.217270] ? genl_get_cmd+0x480/0x480 [ 1085.218082] ? netlink_ack+0xab0/0xab0 [ 1085.218657] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1085.219266] ? is_vmalloc_addr+0x7b/0xb0 [ 1085.219806] genl_rcv+0x24/0x40 [ 1085.220244] netlink_unicast+0x549/0x7f0 [ 1085.220793] ? netlink_attachskb+0x870/0x870 [ 1085.221387] netlink_sendmsg+0x90f/0xdf0 [ 1085.222147] ? netlink_unicast+0x7f0/0x7f0 [ 1085.223370] ? netlink_unicast+0x7f0/0x7f0 [ 1085.224514] __sock_sendmsg+0x154/0x190 [ 1085.225612] ____sys_sendmsg+0x70d/0x870 [ 1085.226938] ? sock_write_iter+0x3d0/0x3d0 [ 1085.228045] ? do_recvmmsg+0x6d0/0x6d0 [ 1085.229085] ? lock_downgrade+0x6d0/0x6d0 [ 1085.230324] ? __lockdep_reset_lock+0x180/0x180 [ 1085.231576] ___sys_sendmsg+0xf3/0x170 [ 1085.232671] ? sendmsg_copy_msghdr+0x160/0x160 [ 1085.234023] ? __fget_files+0x2cf/0x520 [ 1085.235104] ? lock_downgrade+0x6d0/0x6d0 [ 1085.236240] ? find_held_lock+0x2c/0x110 [ 1085.237360] ? __fget_files+0x2f8/0x520 [ 1085.238623] ? __fget_light+0xea/0x290 [ 1085.239683] __sys_sendmsg+0xe5/0x1b0 [ 1085.240681] ? __sys_sendmsg_sock+0x40/0x40 [ 1085.240933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1085.241775] ? rcu_read_lock_any_held+0x75/0xa0 [ 1085.241844] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.243195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1085.244166] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.244180] ? trace_hardirqs_on+0x5b/0x180 [ 1085.244198] do_syscall_64+0x33/0x40 [ 1085.244214] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.244223] RIP: 0033:0x7fb9560b7b19 [ 1085.244235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.244241] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.244261] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1085.244269] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1085.244276] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1085.268153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.270386] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1085.284410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1099.936626] FAULT_INJECTION: forcing a failure. [ 1099.936626] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.938194] CPU: 0 PID: 7644 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1099.939074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.940139] Call Trace: [ 1099.940491] dump_stack+0x107/0x167 [ 1099.940974] should_fail.cold+0x5/0xa [ 1099.941477] ? create_object.isra.0+0x3a/0xa20 [ 1099.942138] should_failslab+0x5/0x20 [ 1099.942646] kmem_cache_alloc+0x5b/0x310 [ 1099.943221] create_object.isra.0+0x3a/0xa20 [ 1099.943787] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1099.944450] kmem_cache_alloc_node+0x169/0x330 [ 1099.945056] __alloc_skb+0x6d/0x5b0 [ 1099.945537] ? genl_rcv_msg+0x33c/0x5a0 [ 1099.946083] netlink_ack+0x1ed/0xab0 [ 1099.946575] ? nl80211_join_ocb+0x160/0x160 [ 1099.947151] ? netlink_sendmsg+0xdf0/0xdf0 [ 1099.947712] ? lock_release+0x680/0x680 [ 1099.948273] ? __lockdep_reset_lock+0x180/0x180 [ 1099.948896] netlink_rcv_skb+0x348/0x430 [ 1099.949434] ? genl_get_cmd+0x480/0x480 [ 1099.949977] ? netlink_ack+0xab0/0xab0 [ 1099.950508] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1099.951136] ? is_vmalloc_addr+0x7b/0xb0 [ 1099.951691] genl_rcv+0x24/0x40 [ 1099.952160] netlink_unicast+0x549/0x7f0 [ 1099.952698] ? netlink_attachskb+0x870/0x870 [ 1099.953289] netlink_sendmsg+0x90f/0xdf0 [ 1099.953837] ? netlink_unicast+0x7f0/0x7f0 [ 1099.958453] ? netlink_unicast+0x7f0/0x7f0 [ 1099.959017] __sock_sendmsg+0x154/0x190 [ 1099.959538] ____sys_sendmsg+0x70d/0x870 [ 1099.960098] ? sock_write_iter+0x3d0/0x3d0 [ 1099.960677] ? do_recvmmsg+0x6d0/0x6d0 [ 1099.961202] ? lock_downgrade+0x6d0/0x6d0 [ 1099.961744] ? __lockdep_reset_lock+0x180/0x180 [ 1099.962409] ___sys_sendmsg+0xf3/0x170 [ 1099.962924] ? sendmsg_copy_msghdr+0x160/0x160 [ 1099.963537] ? __fget_files+0x2cf/0x520 [ 1099.964062] ? lock_downgrade+0x6d0/0x6d0 [ 1099.964614] ? find_held_lock+0x2c/0x110 [ 1099.965192] ? __fget_files+0x2f8/0x520 [ 1099.965739] ? __fget_light+0xea/0x290 [ 1099.966313] __sys_sendmsg+0xe5/0x1b0 [ 1099.966815] ? __sys_sendmsg_sock+0x40/0x40 [ 1099.967375] ? rcu_read_lock_any_held+0x75/0xa0 [ 1099.968010] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.968705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.969377] ? trace_hardirqs_on+0x5b/0x180 [ 1099.969948] do_syscall_64+0x33/0x40 [ 1099.970506] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1099.971215] RIP: 0033:0x7fb9560b7b19 [ 1099.971715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.974125] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.975100] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1099.976027] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1099.976952] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1099.977857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.978826] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1099.987382] SELinux: duplicate or incompatible mount options [ 1099.989023] loop2: detected capacity change from 0 to 4096 [ 1099.993389] FAT-fs (loop2): Unrecognized mount option "�" or missing value 13:41:47 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0xaba, 0xdc38f947538d9276) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x10) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xac) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x21) statx(r2, &(0x7f0000000240)='./file0\x00', 0x6000, 0x4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000380)={{0x1, 0x1, 0x18, <r4=>r1, {0x4}}, './file0\x00'}) openat(r4, &(0x7f00000003c0)='./file0\x00', 0x81000, 0x1) r5 = fcntl$dupfd(r0, 0x0, r1) r6 = getuid() r7 = epoll_create(0x30e) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r9 = mq_open(&(0x7f0000000e80)='netdevsim\x00', 0x2, 0x58, &(0x7f0000000ec0)={0x100000000, 0xffff, 0x8000, 0x1000}) sendmsg$netlink(r5, &(0x7f0000000f40)={&(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)=[{&(0x7f0000000440)={0x4c8, 0x3f, 0x400, 0x70bd26, 0x25dfdbfd, "", [@generic="fae87e9b90937505e8c19b3a476e003dbd6e78ae3f0425e48e430d5caa4f269909d0146071648c3642ebb7583478689ef1d335bcc362b82470bdb9a0d378c5d3d622eec90dfe236271c99bdb6c7e9917b9100acedc4ec754309a2eaadbf98403b1a061794dabd464ef6e126607fa34d31aacef4500cf462bf5f7d7cd87844ca4041208e5677c157cd3547c11f81b549853ebe1479fbb328e2edc0dba5f3e9ad2d6b8b191407dfbd20cf81fc8494f6d72ca9c42fa17b7211ecd2135d973ded1ed78226262b3407dceeb156d900256fd84cde49d593762f866f9caa87e3d5f", @nested={0x171, 0x23, 0x0, 0x1, [@typed={0x14, 0x84, 0x0, 0x0, @ipv6=@mcast2}, @generic="7767094e618184c5cd5cd1343355147af825dc86e35bda176c1a5a55b8ad46198bfab967f0fa90df0df9c97ab9709366566f42015e7dede5fb4ca84d4c68010ae260df6f627bfb604fb5deb8b31b9449595b5ba74ad6b89f8cf5d212a6f2ae96b1bd6a", @typed={0x8, 0x3f, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x3d, 0x0, 0x0, @ipv4=@broadcast}, @generic="2ccccea88872043deff3c0fd2eb1a1dd25bcd8765ab19e2555bab4a5f22a804422bd45147432797fa63389b11c58e6bb8c131f15a63c96e8a9cf124ed5aa55357685a91b91dd0fe824f966bf9ec47f753bb9fa74302920bc453ccc1828a3042af0062d93c4484b738afa8c1df0cce5ff9db29a021a7e1cf3ec5114889a4ca58e41e2cd908c0398a7a4e39ac99406fe27", @generic="1fb304d1d95dce5c32acbaee285b83deb65bde69346971ca52ed91975c933c2fdcd60ad4d6b5500f735488b019dd298a55d93a332ef6b04a18592f6255e21be7c705c0e7b71bf81e9261636900204157ba7d86de50ae"]}, @nested={0xc, 0x72, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}]}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@empty}, @nested={0x244, 0x58, 0x0, 0x1, [@generic="ee62b8d70763f41b1f8f3bde2b2d43834d828151064cf21565680ca41958dcf762f67ae6b3c418679c7d80deeeab89ff2e25c8adea93bb5642c23e4718343c28a2acb9e194fbf8813ce922812b18342cba29b5bfab1fa9f3b9fcf135d4f037ce842dcf105aa745c5578a313b03579fdaa2bc9abce762273400c17a280d2c26343b100fda0197d05cb85edadb", @generic="078da1d4c2b8e75b3fdbd09b4aa6dd30bf7aadb4246c8b94192aa6624ae1b0b361b41514c180627ec4d666e1b423d7f41a0c307317b83ee94d5bfa59c3d4d8db96fef550101d55016f0073d5731c8253e4c877f120a1ee40c2b44fcb161c95a6d5d0e5bcc24f3eccf24ee4c294ec2632f9548efcafd37d46b9303697c1921b427a7f9df96995720da114420a579b0b628e4a594a32702f522ee00fbc5c5d6ddc1e72c41e948acf5544346a250850f2e979f3ee22f65e8c71e1131b3999f9b75a92e256", @generic="143f1b3e81fd96b3a597da5f", @generic="1791db3607d91297716bd9e19d967ba4bab0ddbb4a00a5c2181240c4d3087c388167d763eefb36ab522de96c700828377e06c2c163e6f29f24859c4d0119bec58f9ee6f9f275d3b5c9c3d01d118f364f71121ad6fbf837ee4e795858444fdea8c77f89cc612d8694b9f5b052e969631fd2a66645d139b0b4a23e0c4508c8473da1b5b295ab3050ac7ef0590935d8ea45a852081eeb3ea4a5504fc49d861afe15f1b293ae0d36abc855d4dd4df273205e133d7d66fa88f11547716cf1b104c195031478f0967a65c330c6634619148bf771d4", @generic="fadfaab5e7d4c1d152b37df11aa33ea679a16d"]}]}, 0x4c8}, {&(0x7f0000000940)={0x15c, 0x32, 0x10, 0x70bd27, 0x25dfdbfc, "", [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x23f}, @nested={0x120, 0x44, 0x0, 0x1, [@generic="a2126eea9cb667cc3cbd1a262d434ee08e568b182aeabd327687ffaa85671eb758b25676b7d869e439929ff5e3aaa8a50192544ae09f90f6b7d771612d333a45ee53fa14df0cc60aefb38a8edc5593c1df29eb62f84364b7a3031fa3ab15ebdd65459ae6dc8bff24fdf58d65467a", @generic="b0d3b6e9fd57d13d6b33c54e89865604b179b29adc7e7870776a15eeeacf9f4aeee97e658bd99dfc8ad961534bc5ed23076ae60115deea048378646bee824583aa2cbe0b342de6b1961b03df11fb405cbda4a78e1502bbbd0cf222690d8e93b490817129f93ac3dc87172771094c9e0c47c3e6ee04c3cc1da244a1b4d1fb352685733ea8140610713887505c70db99cc6cd600f6ac08ffbe174ce45ed32f87571c055c0d9314f33d1ed1355fc63c"]}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0x6b, 0x0, 0x0, @uid=r3}, @nested={0xf, 0x34, 0x0, 0x1, [@generic="91188d", @typed={0x8, 0x13, 0x0, 0x0, @fd=r7}]}]}, 0x15c}, {&(0x7f0000000b00)={0x320, 0x2e, 0x112, 0x70bd27, 0x25dfdbfb, "", [@nested={0x46, 0x7d, 0x0, 0x1, [@generic="5b121208ee04fa6810332d3eb6949c992fa8b4186c739e8cdf05a951dc7feed08259a784624a04fa44bfa5a306b54f6c1a28ce316262710282f592870c784143819f"]}, @typed={0x8, 0x2b, 0x0, 0x0, @fd=r8}, @nested={0x2a, 0x40, 0x0, 0x1, [@generic="c26d8e3d28b4739d22a2fdbdc586cc55c5b43a494ec35229e2da2ef719eee290094a8316d310"]}, @generic="40e1d2e011ed3391f43032a8fba2010fadf6336b6976baba4769f5ed2c594dabec509b5fee5ff49dc4b9f8e4caebfc79d0c8136735173664c4de48", @nested={0x258, 0x74, 0x0, 0x1, [@typed={0xf, 0x3f, 0x0, 0x0, @str='\'@*)%7^&}$\x00'}, @typed={0xe, 0x63, 0x0, 0x0, @str='netdevsim\x00'}, @typed={0x8d, 0x16, 0x0, 0x0, @binary="29ff7623aaa11b237243c90200221aeb2195d0e32eda66fb7dadde9b241c762cb98109139dd1ad505b81e8806b2409021aa4d5ebdd7475c576e4fadd866e0c5bbd71a5ae89bd856cc52babbcf686377192272b932b4682801235cb3db72f5b2f951f26d3145f0a5635ac7247fd15056af25568233a819d510d6905d7d492039a4773f011dd07069761"}, @generic="332a516b1ed1cc38d64cbbb0f471f4ac44a6320ac07f23b60a", @generic="57cdeb22e8bc31d9960519a2565018cf9ad51ad5c9b8fab807877850c5366a7a887d0946c4c922f347c7f421277b9adb255cbe039964ce7b85aa8508797bac03ed638530e75412903c94f0efcf88308a0158b2b666e9297c51616e5e059148f38ed9cb6dab712b38726864fae7e4d53002716b0e2e524c910dbb2e89c3f2473e223f221fb304511d8cb662214929ae636ddeeb294b5e2db6ded9e26eded5aa1139941a0aa68a6626bd1a", @generic="4bcad4fc99767407f4eccfb0f5764b7dc4d1", @typed={0x8, 0x62, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @generic="d710d4067a68129ea07336e83bd98e11ba3e7fac817244943ac713756f24929397aa016bb8d61645d7f153b313fc80b0c650e0d620bc270f63256c23299581ce1ca705f9dc8ae7996584562b9bad3178ac47d4771827b3316bdce2c303d01389175145511e17e498e4fd163f65fbd22e712c6124dba4a4c90825344c0fd36490a53076d4963052f3922e2f90d501152dfc17973dd81915adb0a8fd85d7ad3298ad6aa3e7aac99081813235", @typed={0x14, 0x13, 0x0, 0x0, @ipv6=@private1}]}]}, 0x320}], 0x3, &(0x7f0000000f00)=[@rights={{0x1c, 0x1, 0x1, [r4, r9, r0]}}], 0x20, 0x40000}, 0x4050) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000f80)={0x20, 0x0, 0x0, 0x1a4, 0x8}) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000fc0)=""/143, 0x8f}, {&(0x7f0000001080)=""/253, 0xfd}, {&(0x7f0000001180)=""/105, 0x69}, {&(0x7f0000001200)=""/246, 0xf6}], 0x4, 0x7f, 0x8) creat(&(0x7f0000001340)='./file0\x00', 0x138) openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x2308c0, 0x86) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000013c0)={{0x1, 0x1, 0x18, <r10=>r0, {0x20}}, './file0\x00'}) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000001400)={{r10}, "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"}) 13:41:47 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x42, 0xe21}, 0x14}}, 0x0) fsetxattr$trusted_overlay_nlink(r0, 0x0, 0x0, 0xfffffffffffffd69, 0x0) syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000004c0)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) socket$netlink(0x10, 0x3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) unshare(0x48020200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2008}, {0xffffffffffffffff, 0x8200}, {r3, 0x4024}, {r5, 0x580}], 0x5, 0xa5) 13:41:47 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:41:47 executing program 6: ftruncate(0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000640)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x8, 0x9, 0x70bd, 0x7fff}}, &(0x7f0000000680), 0x400) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, r4, 0x410, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r5, {r1}}, './file1\x00'}) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) sendfile(r3, 0xffffffffffffffff, 0x0, 0x1) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x122902, 0x0) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000180)="647732419e007299a0527d51dc496437e692665510d40d35b770fd8d702d121d997dc90d08763cc1ed88ba0f538cb17d600a", 0x32}], 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000700)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@access_any}, {@loose}, {@version_u}, {@dfltgid}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x0) 13:41:47 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 35) dup2(r0, r1) 13:41:47 executing program 1: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0xfffffffffffffde1}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) write(r1, &(0x7f0000000380)="071e9f7358ec922343d9786f7c2147c81e6890a8016fb53a5ffc4951d0a6a9f38dda8a9bae8f6f3750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e708", 0x61) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r2, &(0x7f0000000840)=[{&(0x7f0000000400)=""/190}, {&(0x7f00000004c0)=""/203}, {&(0x7f00000005c0)=""/252}, {&(0x7f0000000180)=""/6}, {&(0x7f0000000c00)=""/4096}, {&(0x7f00000006c0)=""/146}, {&(0x7f0000000780)=""/140}], 0x1000027f) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000440)=ANY=[]) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x17810, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0xe00, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') unshare(0x48020200) 13:41:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 11) 13:41:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf000000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:47 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f73668553b300080820000400008000f80000200040000300000000000000010000000000000002", 0x2d}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000011200)=ANY=[@ANYBLOB="fc"]) 13:41:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x27010000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1100.016972] loop2: detected capacity change from 0 to 4096 [ 1100.048366] FAT-fs (loop2): Unrecognized mount option "�" or missing value [ 1100.070899] FAULT_INJECTION: forcing a failure. [ 1100.070899] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.072463] CPU: 1 PID: 7637 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1100.073340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.074433] Call Trace: [ 1100.074788] dump_stack+0x107/0x167 [ 1100.075298] should_fail.cold+0x5/0xa [ 1100.075801] ? create_object.isra.0+0x3a/0xa20 [ 1100.076398] should_failslab+0x5/0x20 [ 1100.076894] kmem_cache_alloc+0x5b/0x310 [ 1100.077424] create_object.isra.0+0x3a/0xa20 [ 1100.078011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1100.078667] kmem_cache_alloc_node+0x169/0x330 [ 1100.079274] __alloc_skb+0x6d/0x5b0 [ 1100.079796] alloc_skb_with_frags+0x92/0x570 [ 1100.080407] sock_alloc_send_pskb+0x7af/0x930 [ 1100.080999] ? sk_alloc+0x350/0x350 [ 1100.081491] ? perf_trace_lock+0xac/0x490 [ 1100.082050] ? lock_chain_count+0x20/0x20 [ 1100.082608] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1100.083270] ? ip6_mtu+0x1bb/0x3d0 [ 1100.083731] ? lock_downgrade+0x6d0/0x6d0 [ 1100.084272] ? ip_frag_init+0x350/0x350 [ 1100.084800] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1100.085477] ? ip6_mtu+0x1e9/0x3d0 [ 1100.085951] ? ip6_setup_cork+0xfb7/0x1740 [ 1100.086562] ip6_make_skb+0x2de/0x4e0 [ 1100.087062] ? ip_frag_init+0x350/0x350 [ 1100.087591] ? ip_frag_init+0x350/0x350 [ 1100.088118] ? ip6_push_pending_frames+0xf0/0xf0 [ 1100.088745] ? ip6_dst_hoplimit+0x199/0x440 [ 1100.089312] ? lock_downgrade+0x6d0/0x6d0 [ 1100.089873] udpv6_sendmsg+0x20d3/0x2ad0 [ 1100.090480] ? ip_frag_init+0x350/0x350 [ 1100.091006] ? udp_v6_push_pending_frames+0x360/0x360 [ 1100.091706] ? __lockdep_reset_lock+0x180/0x180 [ 1100.092321] ? __lockdep_reset_lock+0x180/0x180 [ 1100.092934] ? lock_acquire+0x197/0x470 [ 1100.093458] ? find_held_lock+0x2c/0x110 [ 1100.094007] ? sock_has_perm+0x1ea/0x280 [ 1100.094575] ? __import_iovec+0x458/0x590 [ 1100.095122] ? udp_v6_push_pending_frames+0x360/0x360 [ 1100.095802] inet6_sendmsg+0x105/0x140 [ 1100.096333] ? inet6_compat_ioctl+0x320/0x320 [ 1100.096955] __sock_sendmsg+0xf2/0x190 [ 1100.097476] ____sys_sendmsg+0x334/0x870 [ 1100.098030] ? sock_write_iter+0x3d0/0x3d0 [ 1100.098589] ? do_recvmmsg+0x6d0/0x6d0 [ 1100.099107] ? __lock_acquire+0x1657/0x5b00 [ 1100.099684] ___sys_sendmsg+0xf3/0x170 [ 1100.100202] ? sendmsg_copy_msghdr+0x160/0x160 [ 1100.100798] ? vmacache_find+0x55/0x2a0 [ 1100.101323] ? __lockdep_reset_lock+0x180/0x180 [ 1100.101938] ? lock_acquire+0x197/0x470 [ 1100.102464] ? find_held_lock+0x2c/0x110 [ 1100.102997] ? __might_fault+0xd3/0x180 [ 1100.103521] ? lock_downgrade+0x6d0/0x6d0 [ 1100.104060] ? asm_exc_page_fault+0x1e/0x30 [ 1100.104643] __sys_sendmmsg+0x195/0x470 [ 1100.105170] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1100.105733] ? lock_downgrade+0x6d0/0x6d0 [ 1100.106310] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1100.106936] ? wait_for_completion_io+0x270/0x270 [ 1100.107612] ? rcu_read_lock_any_held+0x75/0xa0 [ 1100.108232] ? vfs_write+0x354/0xb10 [ 1100.108748] ? fput_many+0x2f/0x1a0 [ 1100.109229] ? ksys_write+0x1a9/0x260 [ 1100.109734] ? __ia32_sys_read+0xb0/0xb0 [ 1100.110308] __x64_sys_sendmmsg+0x99/0x100 [ 1100.110906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.111609] do_syscall_64+0x33/0x40 [ 1100.112099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1100.112764] RIP: 0033:0x7fbfd48dcb19 [ 1100.113254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.115737] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1100.116780] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1100.117748] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1100.118702] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.119633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.120604] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:41:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 12) [ 1100.143934] SELinux: duplicate or incompatible mount options 13:41:47 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000480)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @sec_ctx={0xc, 0x8, {0xfffffffffffffeec}}]}, 0x148}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xe9c}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='w\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002abd7000ffdbdf250200000008000200000000000800030005000000080003000100000008000300000000000800030005000000080003000500000008000300070000004c00018014000400fe88000000000000000000000000010108000700", @ANYRES32=0x0, @ANYBLOB="080003006401010008000700", @ANYRES32=0x0, @ANYBLOB="08000300ac1e000114000400fe800000000000000000000000000033"], 0x98}, 0x1, 0x0, 0x0, 0x20000800}, 0xc001) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x2, 0x6, 0x107, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x40040c4) [ 1100.205337] FAULT_INJECTION: forcing a failure. [ 1100.205337] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.206903] CPU: 0 PID: 7657 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1100.207777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1100.208834] Call Trace: [ 1100.209185] dump_stack+0x107/0x167 [ 1100.209707] should_fail.cold+0x5/0xa [ 1100.210240] should_failslab+0x5/0x20 [ 1100.210755] __kmalloc_node_track_caller+0x74/0x3b0 [ 1100.211397] ? netlink_ack+0x1ed/0xab0 [ 1100.211910] __alloc_skb+0xb1/0x5b0 [ 1100.212404] netlink_ack+0x1ed/0xab0 [ 1100.212908] ? nl80211_join_ocb+0x160/0x160 [ 1100.213467] ? netlink_sendmsg+0xdf0/0xdf0 [ 1100.214058] ? lock_release+0x680/0x680 [ 1100.214604] ? __lockdep_reset_lock+0x180/0x180 [ 1100.215241] netlink_rcv_skb+0x348/0x430 [ 1100.215805] ? genl_get_cmd+0x480/0x480 [ 1100.216336] ? netlink_ack+0xab0/0xab0 [ 1100.216856] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1100.217467] ? is_vmalloc_addr+0x7b/0xb0 [ 1100.218016] genl_rcv+0x24/0x40 [ 1100.218453] netlink_unicast+0x549/0x7f0 [ 1100.219051] ? netlink_attachskb+0x870/0x870 [ 1100.219680] netlink_sendmsg+0x90f/0xdf0 [ 1100.220220] ? netlink_unicast+0x7f0/0x7f0 [ 1100.220784] ? netlink_unicast+0x7f0/0x7f0 [ 1100.221339] __sock_sendmsg+0x154/0x190 [ 1100.221866] ____sys_sendmsg+0x70d/0x870 [ 1100.222416] ? sock_write_iter+0x3d0/0x3d0 [ 1100.223020] ? do_recvmmsg+0x6d0/0x6d0 [ 1100.223567] ? lock_downgrade+0x6d0/0x6d0 [ 1100.224120] ? __lockdep_reset_lock+0x180/0x180 [ 1100.224741] ___sys_sendmsg+0xf3/0x170 [ 1100.225259] ? sendmsg_copy_msghdr+0x160/0x160 [ 1100.225862] ? __fget_files+0x2cf/0x520 [ 1100.226412] ? lock_downgrade+0x6d0/0x6d0 [ 1100.226965] ? find_held_lock+0x2c/0x110 [ 1100.227546] ? __fget_files+0x2f8/0x520 [ 1100.228082] ? __fget_light+0xea/0x290 [ 1100.228613] __sys_sendmsg+0xe5/0x1b0 [ 1100.229121] ? __sys_sendmsg_sock+0x40/0x40 [ 1100.229742] ? rcu_read_lock_any_held+0x75/0xa0 [ 1100.230388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1100.231087] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1100.231759] ? trace_hardirqs_on+0x5b/0x180 [ 1100.232328] do_syscall_64+0x33/0x40 [ 1100.232828] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1100.233491] RIP: 0033:0x7fb9560b7b19 [ 1100.234005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1100.236414] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.237420] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1100.238372] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1100.239347] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1100.240296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1100.241231] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:41:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x9effffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:47 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, 0x0, 0x400c4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, 0x0, 0xffffffffffffff95) syncfs(0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000180)=0x3, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sessionid\x00') pread64(r2, 0x0, 0xfffffffffffffdda, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x3, 0x8, 0xc, 0x2, 0x95, 0x1}) r3 = memfd_create(&(0x7f00000002c0)='sessionid\x00', 0x1) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x8000) write$9p(0xffffffffffffffff, &(0x7f00000000c0)="0fb865562069ab2f32beb83e263962827b00d7d8b791e504b65c5ed26e6688d67a9796c1aedca0de65d21b4796fd1b3df0ccedf9739e29f6b965de85433255da7945b7a842ba5fa3dbe88cd26fc9b1b807bc2d59e5a9f2c2bdaccdb839190141ba0151232669cb02b3b076251c024d73f501a54d959dac7cdb3fc324ab47f2a3e1ef12691eac5cab96860e948e", 0x8d) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r5) 13:41:47 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x301002, 0x0) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) 13:41:47 executing program 6: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8020}) r1 = dup(r0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r2, 0x107, 0xd, &(0x7f0000000080)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000700)=""/4096, &(0x7f0000001700)=0x1000) finit_module(r1, &(0x7f0000000040)='}$\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="0840050004000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x448, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6}}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x400, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6b, 0x2, "53e5aec46aeda688563257c9a1bcaf8bd1b7f7f75350c7923eab4fad1dca0e35395d5c056228b1be847c6885b061523dcb00f67888a631be5deca38ec3ea027be0e5aa1cc8c684690a795ab8500b13bfe3912cac429060df6b8400bfd9809ed409b793b432d8a6"}, @NL80211_BAND_60GHZ={0xdf, 0x2, "59c6a8d27ff4a22af61367854cb2793e49f55ac5a8525487cf3b6fff570461321151f6eac6b41fad8362ddb06340d0cdbcae6ef29ceaa52783c7bdaa760026983f4f5e4af69e4489b9b94f21ae35eae1dc0c4fa1873484edad528940e364d9ccaeb13931536ed1ff91b66b9274a4cdfadc57738efac1821c8fe4fb1f532ecc8d4ed7c8f42826aae8a88aefe8ebb6cd1052bffae0162066ad14a7a0b8d15223b5be1077f7f6f837ab2ae82e36ce74135fbfcf13105e04ac948217e9ee47dd91d7afbc68dae423af02320593e9580deb8b58b103d6a0eb93359f2dd7"}, @NL80211_BAND_6GHZ={0xf9, 0x3, "96b3ff32fccf13a9559008034fe32ee2d439404025dbc054d292333e7da0893d5f69068b9a8c1550f79f78fcf3583f4fff93c2825f8c18979beaac62fca319fbd7c99503cccdc7457e39ec19898812b9e23e4726f598f1c32dab972e0102c46c757a1e3beec0745fd489ed39c7086b1980d029d517cccd18d7d5c246f4ca6005fcdb8fe3c15f8aecdce3db75d7a3c3e757f9e66f0c3811d536042e545e38d041ed41a064c68b417ac6b66365206f496a93d5d99f8dc2497f9027d1ea6d7bb4d5c910fc3dca7edc7eac50fabd36ce4674e3ae6277b299aec9427c6c0a7ae5d3167d957bbf5c3239297acb83db92b99378a76421f5ee"}, @NL80211_BAND_2GHZ={0x70, 0x0, "de0442077da610ede1f4f275c03dbab861345d6d5eea98aef766bcb931abc360cdf1a0de6ea5f13837792c88e6103e82eb9a6a977299c76390fcb4c70f7b1be081a3b9918dca94b8fbe8334a55f8d650f1bf8d1b76b7ae3f1f95934bae89b247d2d9942578c6cf74d2372952"}, @NL80211_BAND_2GHZ={0xb1, 0x0, "8363417e32b2f020991ad4f75d9b8ea26132c152501d7842c2e1805d2175c03314555fc284e138492fc65cdb3ae0d70ab515de42c09b8eb9bb73b3e6676e252cf47eb0e0de8b0aee0f0838702c638bb8af99c9ddcc78e4167b02ceb2d606d44f57c0256a9730c2b72b2e08ec345e96037cf7ae1502d049b12a6534d4f111d875c12a890c8f3d4279c21e259a1fb1a820086b409c8d479fd67b7a83975cbf3aef5701025ebc30548f089a16790e"}, @NL80211_BAND_6GHZ={0x90, 0x3, "21426bbe0327de2b6466b22d0f157911a5514c753ea6489ddc36319aed01140e6725e111cbec70959f185af3cbdf2b0e50f13e6e7b1b730b2259c348a40e8c7b94aa99c9f3cc810cd52d76f4ad5f7f2c5a3cd098dddb2f55a17db1dea6f5a5a3cd34e5e6424b3c36b291c89cfd0f3b5d239a3aed5dd220814ee40244f44dd9e82b810dede49922daefc13896"}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BSSID={0xa}]}, 0x448}, 0x1, 0x0, 0x0, 0x240000d0}, 0x4011) openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) 13:41:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:41:47 executing program 7: syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r0}, 0x549, 0x6e4, 0x8}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@privport}, {@version_u}, {@nodevmap}, {@afid={'afid', 0x3d, 0x8001}}, {@cache_loose}], [{@context={'context', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'trans=fd,'}}]}}) [ 1100.447278] 9pnet: Insufficient options for proto=fd [ 1100.457644] 9pnet: Insufficient options for proto=fd 13:42:02 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000006c0)=<r5=>0x0) r6 = fork() clone3(&(0x7f0000000740)={0x144190000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240), {0x13}, &(0x7f0000000280)=""/174, 0xae, &(0x7f0000000400)=""/82, &(0x7f0000000700)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, r3, r4, 0x0, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff], 0xa, {r1}}, 0x58) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r8=>0x0}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="34000000000000a5b700000007000000c4048f0100e686c9de0008000000", @ANYRES32=r8], 0x38}}], 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) socketpair(0x11, 0x6, 0x5, &(0x7f00000001c0)) 13:42:02 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) r1 = syz_io_uring_setup(0x21c9, &(0x7f0000000400), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x8402, 0x0, 0x15}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0x0) r4 = syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x2000000, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f0000000200)=@ng={0x4, 0x10, "e2"}, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x583f, 0x1e01, 0x3, &(0x7f0000000180)={[0x10001]}, 0x8) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b59fe7ed", 0x7, 0x0, 0x0, {0x1, r5}}, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x61d69414, 0x100000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fallocate(r0, 0x59, 0x4, 0x2) 13:42:02 executing program 2: io_setup(0x100, &(0x7f00000000c0)=<r0=>0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r2, 0xffffffffffffffff, 0x0) r3 = dup2(r2, r2) ioctl$HIDIOCINITREPORT(r3, 0x550c, 0x20000000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0)) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) io_submit(r0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x34, r1, &(0x7f0000000080)="918585889ef17d9866959ca79d5a07e0dcc7e7dc3ce9f1a6c2b33152a0b70c7a98aaa0a07a4652a38f7fa85101d64122ae442410270a1c1c818143474d", 0x3d, 0x7, 0x0, 0x1, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x7f, 0xffffffffffffffff, &(0x7f0000000140)="8fd983591130ad7db6c79e5ae602e8af5b796992374bf72aa07ebb2254009fdd26467a0af4b7191d9afa5f77688534e908078ba39729c038b6b3c95f8861a5839ec65c898dd12d15ca680412564bba832d68aa56bfe90bea9e187551246deacc4192cc20796e516a48e6f66157ef8fe2f356b0cc4c3843a2a81a57a6fd5df9ddbc0dc356487307580f9b35ba540afd5d927e1e196addce8ea3bd443c", 0x9c, 0x3, 0x0, 0x2, r4}]) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 13:42:02 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xfffff000, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:02 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 36) dup2(r0, r1) 13:42:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 13) 13:42:02 executing program 7: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) fsetxattr$security_ima(r1, 0x0, &(0x7f0000000200)=@ng={0x4, 0x10, "e2"}, 0x3, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "2c6203b8c21748e0", "cda6d5047891b158b7dddaff6f83f5c9", "801f33ac", "4acc667a66eb4b1a"}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x89) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x5a7083, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000380)=@isdn, &(0x7f0000000140)=0x80, 0x80000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) [ 1115.903793] FAULT_INJECTION: forcing a failure. [ 1115.903793] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.905339] CPU: 1 PID: 7708 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1115.906223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.907325] Call Trace: [ 1115.907675] dump_stack+0x107/0x167 [ 1115.908186] should_fail.cold+0x5/0xa [ 1115.908686] ? create_object.isra.0+0x3a/0xa20 [ 1115.909279] should_failslab+0x5/0x20 [ 1115.909774] kmem_cache_alloc+0x5b/0x310 [ 1115.910370] create_object.isra.0+0x3a/0xa20 [ 1115.910947] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1115.911633] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1115.912293] ? netlink_ack+0x1ed/0xab0 [ 1115.912814] __alloc_skb+0xb1/0x5b0 [ 1115.913298] netlink_ack+0x1ed/0xab0 [ 1115.913793] ? nl80211_join_ocb+0x160/0x160 [ 1115.914425] ? netlink_sendmsg+0xdf0/0xdf0 [ 1115.914994] ? lock_release+0x680/0x680 [ 1115.915544] ? __lockdep_reset_lock+0x180/0x180 [ 1115.916157] netlink_rcv_skb+0x348/0x430 [ 1115.916689] ? genl_get_cmd+0x480/0x480 [ 1115.917211] ? netlink_ack+0xab0/0xab0 [ 1115.917730] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1115.922384] ? is_vmalloc_addr+0x7b/0xb0 [ 1115.922914] genl_rcv+0x24/0x40 [ 1115.923339] netlink_unicast+0x549/0x7f0 [ 1115.923879] ? netlink_attachskb+0x870/0x870 [ 1115.924475] netlink_sendmsg+0x90f/0xdf0 [ 1115.924999] ? netlink_unicast+0x7f0/0x7f0 [ 1115.925536] ? netlink_unicast+0x7f0/0x7f0 [ 1115.926093] __sock_sendmsg+0x154/0x190 [ 1115.926636] ____sys_sendmsg+0x70d/0x870 [ 1115.927191] ? sock_write_iter+0x3d0/0x3d0 [ 1115.927767] ? do_recvmmsg+0x6d0/0x6d0 [ 1115.928319] ? lock_downgrade+0x6d0/0x6d0 [ 1115.928868] ? __lockdep_reset_lock+0x180/0x180 [ 1115.929484] ___sys_sendmsg+0xf3/0x170 [ 1115.929996] ? sendmsg_copy_msghdr+0x160/0x160 [ 1115.930631] ? __fget_files+0x2cf/0x520 [ 1115.931166] ? lock_downgrade+0x6d0/0x6d0 [ 1115.931534] FAULT_INJECTION: forcing a failure. [ 1115.931534] name failslab, interval 1, probability 0, space 0, times 0 [ 1115.931735] ? find_held_lock+0x2c/0x110 [ 1115.933592] ? __fget_files+0x2f8/0x520 [ 1115.934093] ? __fget_light+0xea/0x290 [ 1115.934597] __sys_sendmsg+0xe5/0x1b0 [ 1115.935065] ? __sys_sendmsg_sock+0x40/0x40 [ 1115.935641] ? rcu_read_lock_any_held+0x75/0xa0 [ 1115.936240] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1115.936880] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1115.937507] ? trace_hardirqs_on+0x5b/0x180 [ 1115.938039] do_syscall_64+0x33/0x40 [ 1115.938517] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1115.939180] RIP: 0033:0x7fb9560b7b19 [ 1115.939697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.942081] RSP: 002b:00007fb95362d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1115.943116] RAX: ffffffffffffffda RBX: 00007fb9561caf60 RCX: 00007fb9560b7b19 [ 1115.944100] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 1115.945074] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.945981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1115.946859] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 [ 1115.947756] CPU: 0 PID: 7711 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1115.948637] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1115.949714] Call Trace: [ 1115.950059] dump_stack+0x107/0x167 [ 1115.950561] should_fail.cold+0x5/0xa [ 1115.951048] ? create_object.isra.0+0x3a/0xa20 [ 1115.951638] should_failslab+0x5/0x20 [ 1115.952143] kmem_cache_alloc+0x5b/0x310 [ 1115.952664] create_object.isra.0+0x3a/0xa20 [ 1115.953235] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1115.953846] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1115.954530] ? alloc_skb_with_frags+0x92/0x570 [ 1115.955143] __alloc_skb+0xb1/0x5b0 [ 1115.955617] alloc_skb_with_frags+0x92/0x570 [ 1115.956191] sock_alloc_send_pskb+0x7af/0x930 [ 1115.956775] ? sk_alloc+0x350/0x350 [ 1115.957276] ? perf_trace_lock+0xac/0x490 [ 1115.957798] ? lock_chain_count+0x20/0x20 [ 1115.958353] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1115.958962] ? ip6_mtu+0x1bb/0x3d0 [ 1115.959390] ? lock_downgrade+0x6d0/0x6d0 [ 1115.959885] ? ip_frag_init+0x350/0x350 [ 1115.960370] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1115.960943] ? ip6_mtu+0x1e9/0x3d0 [ 1115.961369] ? ip6_setup_cork+0xfb7/0x1740 [ 1115.961876] ip6_make_skb+0x2de/0x4e0 [ 1115.962356] ? ip_frag_init+0x350/0x350 [ 1115.962835] ? ip_frag_init+0x350/0x350 [ 1115.963313] ? ip6_push_pending_frames+0xf0/0xf0 [ 1115.963884] ? ip6_dst_hoplimit+0x199/0x440 [ 1115.964400] ? lock_downgrade+0x6d0/0x6d0 [ 1115.964908] udpv6_sendmsg+0x20d3/0x2ad0 [ 1115.965404] ? ip_frag_init+0x350/0x350 [ 1115.965888] ? udp_v6_push_pending_frames+0x360/0x360 [ 1115.966620] ? __lockdep_reset_lock+0x180/0x180 [ 1115.967189] ? __lockdep_reset_lock+0x180/0x180 [ 1115.967751] ? lock_acquire+0x197/0x470 [ 1115.968233] ? find_held_lock+0x2c/0x110 [ 1115.968733] ? sock_has_perm+0x1ea/0x280 [ 1115.969241] ? __import_iovec+0x458/0x590 [ 1115.969740] ? udp_v6_push_pending_frames+0x360/0x360 [ 1115.970379] inet6_sendmsg+0x105/0x140 [ 1115.970847] ? inet6_compat_ioctl+0x320/0x320 [ 1115.971384] __sock_sendmsg+0xf2/0x190 [ 1115.971851] ____sys_sendmsg+0x334/0x870 [ 1115.972350] ? sock_write_iter+0x3d0/0x3d0 [ 1115.972862] ? do_recvmmsg+0x6d0/0x6d0 [ 1115.973367] ? __lock_acquire+0x1657/0x5b00 [ 1115.973893] ___sys_sendmsg+0xf3/0x170 [ 1115.974380] ? sendmsg_copy_msghdr+0x160/0x160 [ 1115.974923] ? vmacache_find+0x55/0x2a0 [ 1115.975450] ? __lockdep_reset_lock+0x180/0x180 [ 1115.976016] ? lock_acquire+0x197/0x470 [ 1115.976520] ? find_held_lock+0x2c/0x110 [ 1115.977010] ? __might_fault+0xd3/0x180 [ 1115.977489] ? lock_downgrade+0x6d0/0x6d0 [ 1115.977986] ? asm_exc_page_fault+0x1e/0x30 [ 1115.978573] __sys_sendmmsg+0x195/0x470 [ 1115.979068] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1115.979678] ? lock_downgrade+0x6d0/0x6d0 [ 1115.980243] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1115.980826] ? wait_for_completion_io+0x270/0x270 [ 1115.981405] ? rcu_read_lock_any_held+0x75/0xa0 [ 1115.981958] ? vfs_write+0x354/0xb10 [ 1115.982465] ? fput_many+0x2f/0x1a0 [ 1115.982904] ? ksys_write+0x1a9/0x260 [ 1115.983395] ? __ia32_sys_read+0xb0/0xb0 [ 1115.983888] __x64_sys_sendmmsg+0x99/0x100 [ 1115.984401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1115.985015] do_syscall_64+0x33/0x40 [ 1115.985463] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1115.986075] RIP: 0033:0x7fbfd48dcb19 [ 1115.986931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1115.991723] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1115.993583] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 1115.995531] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1115.997322] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1115.999196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.000953] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 13:42:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xffffff7f, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:03 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2fd, &(0x7f0000000000)={@link_local={0x11}, @dev, @void, {@mpls_mc={0x8848, {[{0xffff7, 0x0, 0x1}, {0x6}], @ipv6=@tipc_packet={0xd, 0x6, "86bf3a", 0x2bf, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, {[@dstopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @routing={0x2b, 0x8, 0x0, 0x9, 0x0, [@remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}]}, @fragment={0x33, 0x0, 0x4, 0x0, 0x0, 0x3, 0x64}, @hopopts={0x2f, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, @hopopts={0x5e, 0x40, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x50, {0x0, 0x12, 0x0, 0xff, [0xfff, 0x3, 0x0, 0x100, 0x992, 0xf1, 0x40, 0xab, 0x5]}}, @generic={0x9, 0xc2, "3125a366ed76028183ba003006e2758c8ece833f03d4b83ca794022b18644f83f54df43bacc8e5228c4154e27a84e20b3aabe8fc398b0e332d21638415a9d3e5b38b0a993eda82c62c2d1da3c4f5c5ebadad3a66a984ce35676a300b4d42e1c47710ec1d5ccd17b8c848a79067278dd3d74f3a32ab9e17f46cad18f7a3be9ddea1955d48de2270b56e57f25621a4e2b016d817c9ae8090343904405d3be0451aa82e785cd41e475e315e8a2d489866a574c5ae9a286c21a2b717397fa0c5a2d79a2e"}, @generic={0x5, 0xc7, "30730f2e5b3c3205bac377d9909f62810829baede460b95a1df5e1de22ed499948a055241efef96a1dd7bd7ff1af7567a46f8173241ee278f112c575ecf491b1b72a82b609bd9b7c56a98b3b34bca4a3ec1074b8c11e628e2d53c8a8f61dde946fa649090f965d5713adc10407046519a05df22314c51aa0888cb8bfd48b25617b929e6651965a4edaa229f5c499bc19d3e33530a0344a4a6e12fab11821c8318ec8a78f464218cc18bb29c4bee6249091ac2c6d8b4cd79b2e69a0512ed58097125a5bb24dae42"}, @pad1]}], @payload_mcast={{{{{{0x2f, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x2, 0xae, 0x0, 0x3, 0x7, 0x2, 0x1, 0x1, 0x5, 0x0, 0x4e21, 0x4e23}, 0x1}, 0x3, 0x2}, 0x4}}, [0x0, 0x0, 0x0]}}}}}}}, 0x0) 13:42:03 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:03 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x2, 0x4, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x7fffffff, 0x0, 0x4, 0xc34, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x2, 0xffffffffffffffff, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="300028fbe2d88cfd2b8ecb0bfcaeafed62fd000000000006008e0e43d50000000000000011000080487fec864b005084e6cee08601fb5641cd049e9b5fe6f41b87fedca33c51b53e3de2ace9342889363ad413d48d26c0b14e0b71148fb634717b0142a42da008000000000000000b7071fb8c92584f130c39161046d97a4d0658d65fcbf8e8c8b4d99b26e249f97efb19af608b9300000800bf030000000000b21c09e0000000db083dd6b14cadab60ed8908f87b101a26f02011972575f78ba98c9a8bb33056739ad8455b5b237e5ddfcc7d5d865d6c46392db87970125c7754b68fff94839b13a78a36878b181a47ad25c1c9ac3a3b375b9ce9b44b1c14b0d6125fa208aca5357d6f17c915950c357d9d764e309b9ff3ab191bfc1c86fdbdb1d67dfb848976d770b016a152582c004d1ea5790dc55c18f0959ae6c7e1bd7f647a70bcdaca80c2e9a421330ea4ca7eabb30699967bb781fc297b25b85c3a019f864ef3e011e34fde5ef0f1fd93ada842db88fc6bc94f57867620e952a3e25f859834b6581d27bbd1fc9d436862810780a33a2d36ba54846827dce8e78380618e93159294c7d4cf7de94fbcf012144f4893b0fb99e92ed1a6f241a28e0013eeb52ca64fb20a83d84d7fc34dcc787aef61b72fa299b1dd"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x82280, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x0, 0x401) bind(0xffffffffffffffff, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x2, @remote, 'sit0\x00'}}, 0x80) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x240e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext, 0x90200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(r3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x80000001}) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x810, r3, 0x6) getdents64(r2, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) lseek(0xffffffffffffffff, 0x1, 0x4) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) unshare(0x48020200) 13:42:03 executing program 2: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x401, 0x8, &(0x7f0000002640)=[{&(0x7f0000000140)="063694f6725cf41abc59f507cc081b5dc72ce7cf66a1e6bc9d2e230dffc7da41de1e749cf71f3cc0c7bfa86a0bc0d26af8ec2714936d11cecb6f057d5b4bcdc9b5a7cce1289765ab72d9b672b83d56df5fd6ea5a56457dc63a4f58551a91a88d017ba872bb0c439db0afceac57ef0891c145362714525ebac58b4ad6aa69271d29349a4c102c57fbf55bd6a0f7d70974f92239c5f3147527280b7e3a18223dc24d0b2cd5947af26ee4ec71131e37a256de1805fdcf", 0xb5, 0x1f}, {&(0x7f0000000200)="29531ccbc3cc781dc8526b965c0ac9", 0xf, 0x5}, {&(0x7f0000000240)="23965ddf427e4f5e9bdfd4ca15684e736690a589b10645e04b87c74cdd76eb0e3e1ccaaf96d29984951bb407a972d43f1395a914a3c682e42798df3d763662261f7932a3fa9da536370fffe3b8675ca7045247253cb464960511ef03cdb7dd14132358bd57b8f233db425b706b8a", 0x6e, 0x40}, {&(0x7f00000002c0)="590212e2179249b6fa15d040e0ce0c21c4773210556d1d7943d5b992accd86414946a1565fb4b8cdf050514663dc5e220ffe89c515b53e5ef209ff6a73a1af9ddcf5ed40b079a1ae343974df52d7359bae325c7e59d4dd8009cae076aee65ef2813e77d803ce585ef314fefa9136e76401571d59bfa513b1c61253a7964c8f0acaeb81ceef5dc642cf0ed27b7fe30cb177880c0d6a96bc553d4efb8ef525b852fc722fdbd0bd7eff56174d2d04c9326c7f32c20b2f2c1b6b13c81f", 0xbb, 0x1}, {&(0x7f0000000380)="8940bfde80908dac4d14", 0xa}, {&(0x7f0000001640)="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", 0x1000, 0x8}, {&(0x7f00000003c0)="8b704b2a6324d9b8719c636e0211077a7ea48f8341a4031481fe4007c9cac2883bf8f790c8831fba5d0d52e4b8e569cabd728695a368bf0ba927df54f40c5bc9a86ad041dd88fb2303da65d713eeb654e5b9db4d465556825eac", 0x5a, 0x1}, {&(0x7f0000000500)="84868268ebc58c1571c43cd3ceff565a28e65b11b68a429162b967f02b621c6d288c6db5f435bd5607f76bbebf8d8d8c638db920e824ac1e4acc9459317efa73507c6fb8dc69cf2a96901d3879526592ee3de121199eeb368c82d1cf5552eedfc5dfc38ca4fb6bb908f79a4f8e0be643", 0x70, 0xc9}], 0x80000, &(0x7f0000000440)={[{@dots}, {@fat=@errors_continue}, {@dots}, {@nodots}, {@dots}, {@fat=@check_normal}], [{@audit}]}) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000640)={{r0}, "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"}) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg$inet6(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) pipe(&(0x7f0000000040)) ioprio_get$pid(0x3, 0x0) 13:42:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) (fail_nth: 14) [ 1116.148783] loop2: detected capacity change from 0 to 4096 [ 1116.172953] loop2: detected capacity change from 0 to 4096 [ 1116.177851] FAULT_INJECTION: forcing a failure. [ 1116.177851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1116.179412] CPU: 1 PID: 7730 Comm: syz-executor.4 Not tainted 5.10.234 #1 [ 1116.180302] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1116.181415] Call Trace: [ 1116.181799] dump_stack+0x107/0x167 [ 1116.182313] should_fail.cold+0x5/0xa [ 1116.182815] _copy_to_user+0x2e/0x180 [ 1116.183322] simple_read_from_buffer+0xcc/0x160 [ 1116.183971] proc_fail_nth_read+0x198/0x230 [ 1116.184560] ? proc_sessionid_read+0x230/0x230 [ 1116.185168] ? security_file_permission+0xb1/0xe0 [ 1116.185815] ? proc_sessionid_read+0x230/0x230 [ 1116.186438] vfs_read+0x228/0x620 [ 1116.186899] ksys_read+0x12d/0x260 [ 1116.187359] ? vfs_write+0xb10/0xb10 [ 1116.187907] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1116.188619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1116.189305] do_syscall_64+0x33/0x40 [ 1116.189807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1116.190506] RIP: 0033:0x7fb95606a69c [ 1116.190997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1116.193429] RSP: 002b:00007fb95362d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1116.194433] RAX: ffffffffffffffda RBX: 0000000000000030 RCX: 00007fb95606a69c [ 1116.195412] RDX: 000000000000000f RSI: 00007fb95362d1e0 RDI: 0000000000000004 [ 1116.196365] RBP: 00007fb95362d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1116.197289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1116.198233] R13: 00007ffc1742ba9f R14: 00007fb95362d300 R15: 0000000000022000 13:42:17 executing program 6: ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, &(0x7f0000000440)={0x0, 0x1, 0x81, 0x9, 0x3ff, 0x2, 0x8000}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="67f1aae17266e57327b050968782842a"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ce7cf1e42faafbb365d5847e16b30274"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="199b9fc6c6aca982079afbc9253a48df4e23616911c6cd25852e44d421a91300"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5ea62e63e583cfc5046b52bc90edb3dd"}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x801) mknod$loop(&(0x7f0000001d40)='./file0\x00', 0x6000, 0x0) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@sha1={0x1, "a4d05ffa4aa8460c33f25eecf0d5f5824b7ca22c"}, 0x15, 0x0) link(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000900)={{r0}, 0x0, 0x1e, @inherit={0x68, &(0x7f0000000880)={0x0, 0x4, 0x0, 0xd0d, {0x20, 0x101, 0x80000001, 0x5e9e, 0x4}, [0x4, 0x0, 0x1, 0x0]}}, @devid}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000780), 0x101080, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001900), &(0x7f0000001940)='./file0\x00', 0x8, 0x2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0x135) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6}, 0x0, @in6=@private0}}, &(0x7f0000000740)=0xe8) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000800)={{}, {0x1, 0x4}, [{0x2, 0x6, r4}, {0x2, 0x5, 0xee01}, {0x2, 0x3, 0xee01}, {0x2, 0x2, r5}, {0x2, 0x7, r5}], {0x4, 0x3}, [{0x8, 0x6, 0xee01}], {}, {0x20, 0x3}}, 0x54, 0x2) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="480fd33c", @ANYRES16=r2, @ANYBLOB="00012cbd7000fedbdf25110000000c00990001000000000000000c00430005000000ffffffff1700ed00e0060000110013003c8cb61818000b0be0010b0592000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40085) [ 1130.459971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7753 comm=syz-executor.7 [ 1130.462724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1130.472870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7754 comm=syz-executor.7 13:42:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 37) dup2(r0, r1) 13:42:17 executing program 2: perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000140)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000180)=0x2c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="a02562eec73c14c84621ffc3ec6e6228b7442170767757fcadcfd759c2ec0808c479b021d4139d892029d695e0cba5337340d6b1a9c403", 0x37, 0x8000, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000240)) pipe2(&(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800) r2 = memfd_create(&(0x7f00000000c0)='-%:\x0e', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000060459f633533a6fd00ea00dadb", @ANYRES32=r4, @ANYBLOB="0a001800030303030303000004000801"], 0x2c}}, 0x0) splice(r3, &(0x7f0000000100)=0x4, r0, &(0x7f00000001c0)=0xffffffff, 0x3, 0x4) splice(r2, 0x0, r1, 0x0, 0xde, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 13:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xffffff9e, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:17 executing program 1: ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000180)="990845932412c40ba9a2a889ab73898e3466e8ac998a2b8e35455f37f459d0a89ddf8393fec303da4179ed21e3be48408b1491cf07ce675a50c961e52901c1515d4f22a82fa3f099a27b3f5e190c9b201173f932e8a48945237d1c94c39164f9dfd0bdcfd8f17738db4ca55b669f4c6d", 0x70, 0x5) r2 = getpgid(0xffffffffffffffff) perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = accept$inet(r3, &(0x7f0000000000), &(0x7f0000000100)=0x10) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000380)=""/102, 0x66}], 0x2) getsockopt$inet_tcp_int(r3, 0x6, 0x10, 0x0, &(0x7f0000001100)) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r5, 0xffffffffffffffff, 0x0) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r6, 0x0) fsetxattr$security_ima(r6, 0x0, &(0x7f0000000200)=@ng={0x4, 0x10, "e2"}, 0x3, 0x0) bind$unix(r6, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 13:42:17 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xff, 0x81, 0x1, 0x40, 0x0, 0x8, 0x4290, 0x6, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x1, @perf_config_ext={0xa0, 0x7}, 0x13002, 0x8, 0x3, 0x7, 0x5, 0x1000, 0x3f, 0x0, 0x1000, 0x0, 0xc9}, 0x0, 0x6, r1, 0x1) r3 = open(&(0x7f00000003c0)='./file0\x00', 0x90080, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r7=>0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r6, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x38}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40048011}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6gre0\x00', <r10=>0x0, 0x0, 0x4, 0x9, 0x9, 0x15, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x700, 0x2, 0x3}}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdfdf25080000802800018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200626f6e645f736c6176655f31000000000c00028008000200ff07000004000180"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20044804) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd_index=0x1, 0x4000000000007ff, 0x0, 0x5}, 0x35fb) sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002600210c00000000000200001b1f00020400000000000000", @ANYRES32], 0x2c}}, 0x0) 13:42:17 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000000300)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="03c680aa30b3a74cd3", 0x9, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x1800, &(0x7f0000012900)=ANY=[]) r1 = creat(&(0x7f00000000c0)='./file1\x00', 0x102) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000140)) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000180)=0xdd7, 0x4) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 13:42:17 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 1130.512368] loop1: detected capacity change from 0 to 33559552 [ 1130.534883] FAULT_INJECTION: forcing a failure. [ 1130.534883] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.536499] CPU: 1 PID: 7749 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1130.537440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1130.538558] Call Trace: [ 1130.538909] dump_stack+0x107/0x167 [ 1130.539398] should_fail.cold+0x5/0xa [ 1130.539954] should_failslab+0x5/0x20 [ 1130.540458] __kmalloc_node_track_caller+0x74/0x3b0 [ 1130.541137] ? alloc_skb_with_frags+0x92/0x570 [ 1130.541731] __alloc_skb+0xb1/0x5b0 [ 1130.542212] alloc_skb_with_frags+0x92/0x570 [ 1130.542812] sock_alloc_send_pskb+0x7af/0x930 [ 1130.543407] ? sk_alloc+0x350/0x350 [ 1130.543940] ? perf_trace_lock+0xac/0x490 [ 1130.544503] ? lock_chain_count+0x20/0x20 [ 1130.545096] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1130.545767] ? ip6_mtu+0x1bb/0x3d0 [ 1130.546238] ? lock_downgrade+0x6d0/0x6d0 [ 1130.546803] ? ip_frag_init+0x350/0x350 [ 1130.547337] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1130.548020] ? ip6_mtu+0x1e9/0x3d0 [ 1130.548496] ? ip6_setup_cork+0xfb7/0x1740 [ 1130.549089] ip6_make_skb+0x2de/0x4e0 [ 1130.549589] ? ip_frag_init+0x350/0x350 [ 1130.550128] ? ip_frag_init+0x350/0x350 [ 1130.550673] ? ip6_push_pending_frames+0xf0/0xf0 [ 1130.551309] ? ip6_dst_hoplimit+0x199/0x440 [ 1130.551869] ? lock_downgrade+0x6d0/0x6d0 [ 1130.552439] udpv6_sendmsg+0x20d3/0x2ad0 [ 1130.552981] ? ip_frag_init+0x350/0x350 [ 1130.553524] ? udp_v6_push_pending_frames+0x360/0x360 [ 1130.554205] ? __lockdep_reset_lock+0x180/0x180 [ 1130.554891] ? lock_acquire+0x197/0x470 [ 1130.555422] ? find_held_lock+0x2c/0x110 [ 1130.555998] ? lock_acquire+0x197/0x470 [ 1130.556526] ? find_held_lock+0x2c/0x110 [ 1130.557076] ? sock_has_perm+0x1ea/0x280 [ 1130.557635] ? __import_iovec+0x458/0x590 [ 1130.558232] ? udp_v6_push_pending_frames+0x360/0x360 [ 1130.558981] inet6_sendmsg+0x105/0x140 [ 1130.559495] ? inet6_compat_ioctl+0x320/0x320 [ 1130.560094] __sock_sendmsg+0xf2/0x190 [ 1130.560609] ____sys_sendmsg+0x334/0x870 [ 1130.561158] ? sock_write_iter+0x3d0/0x3d0 [ 1130.561723] ? do_recvmmsg+0x6d0/0x6d0 [ 1130.562288] ? __lock_acquire+0x1657/0x5b00 [ 1130.562917] ___sys_sendmsg+0xf3/0x170 [ 1130.563443] ? sendmsg_copy_msghdr+0x160/0x160 [ 1130.564044] ? __lockdep_reset_lock+0x180/0x180 [ 1130.564664] ? trace_hardirqs_on+0x5b/0x180 [ 1130.565234] ? lock_acquire+0x197/0x470 [ 1130.565792] ? find_held_lock+0x2c/0x110 [ 1130.566371] ? __might_fault+0xd3/0x180 [ 1130.566914] ? lock_downgrade+0x6d0/0x6d0 [ 1130.567464] ? io_schedule_timeout+0x140/0x140 [ 1130.568086] __sys_sendmmsg+0x195/0x470 [ 1130.568616] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1130.569199] ? lock_downgrade+0x6d0/0x6d0 [ 1130.569754] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1130.570415] ? wait_for_completion_io+0x270/0x270 [ 1130.571066] ? rcu_read_lock_any_held+0x75/0xa0 [ 1130.571679] ? vfs_write+0x354/0xb10 [ 1130.572184] ? fput_many+0x2f/0x1a0 [ 1130.572647] ? ksys_write+0x1a9/0x260 [ 1130.573154] ? __ia32_sys_read+0xb0/0xb0 [ 1130.573707] __x64_sys_sendmmsg+0x99/0x100 [ 1130.574278] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1130.575027] do_syscall_64+0x33/0x40 [ 1130.575533] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1130.576238] RIP: 0033:0x7fbfd48dcb19 [ 1130.576740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1130.579154] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1130.580156] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1130.581095] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1130.582035] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1130.583035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1130.583998] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:42:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendfile(r4, r3, 0x0, 0xffe9) [ 1130.643174] loop7: detected capacity change from 0 to 262144 13:42:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xfffffff0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1130.687820] loop7: detected capacity change from 0 to 262144 13:42:17 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x5, [@empty, @empty, @loopback, @multicast1, @private=0xa010101]}, 0x24) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x181080, 0x82) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0xfffffffffffff0b1) r2 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_setup(0x2324, &(0x7f00000003c0)={0x0, 0x8bbb, 0x2, 0x3, 0x325, 0x0, r1}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000080)={0x24, @long}, 0x14) sendmmsg$sock(r6, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r1, &(0x7f00000002c0)={0x4}}, 0x80000001) dup3(0xffffffffffffffff, r5, 0x0) io_uring_enter(r2, 0x3491, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, r5, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x963) 13:42:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:33 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000274e00000008000000000000040000001448000000000000000000000000000000000000a7434de270e371b814c2936f6b17ffb88e342b919b9b8ab0fac9ee62f1f075002ebdf5aa5a4236439eb70cbccb3ff9b4aa9b2e80dd8f5a0597bf9f04cf6348667f8016f12af5865240401a4c1b279bea20b5425553ed3bb0764fc85ebd94efb2b196fea3f3c3f1b12ff6c4614408425328051b6248daecf0616f2936b0827e9632"], 0x2c}}, 0x0) 13:42:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 38) dup2(r0, r1) 13:42:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0xffffffff, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:33 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x408f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="b8000000130008007567082eeaa524ce9e2e49ed8ddcd49bc78e96050c5a81a10000000000fc0000ffffffff0000000000000000000000000000000000000100"/74, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}}, 0x0) r2 = pidfd_open(0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x0, 0x800, 0x2}) r3 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') dup3(r4, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000150000022dbd7000fbdbdf251000000008001c00", @ANYRES32, @ANYBLOB="a8351890b0e74c09ee9e2da5c2015937b8f6"], 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x480c1) syz_io_uring_setup(0x608a, &(0x7f0000000200)={0x0, 0xef33, 0x0, 0x3, 0x256}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) pipe2(&(0x7f00000014c0), 0xc000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001480)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)="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", 0x1000, 0x40000002, 0x3}, 0x8) pipe(&(0x7f00000001c0)) 13:42:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r7=>0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r8, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10a0}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x820}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x102e}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x64}}, 0x8040) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000067c0)={&(0x7f00000066c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006780)={&(0x7f0000006700)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa, 0xc}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000100}, 0x240080c4) sendmsg$FOU_CMD_DEL(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x3}, 0x8) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) 13:42:33 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x149e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3af}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25", 0x17}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000, 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x6, 0x6, 0x3, 0x7d, 0x0, 0x5171, 0x500, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x0, 0x1ff}, 0x4c02, 0x8, 0x5, 0xe, 0x4, 0x5ad, 0xde, 0x0, 0x5, 0x0, 0x3}, 0x0, 0xf, r5, 0x10) syz_open_dev$rtc(&(0x7f0000000380), 0x12e, 0x1) ftruncate(r4, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfdef) creat(&(0x7f0000000100)='./file0\x00', 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [], 0x80, "5fabd34a60e47f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000053e00)={0x0, ""/256, 0x0, <r6=>0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000054000)=ANY=[@ANYRES64=<r7=>0x0, @ANYBLOB="000000000000000008000000000000000300000000000000260000000000000058c400000000000001000000000000000000000008000000010400000100000046070000000000000700000000000000090016000000000006000000000000000800"/112]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054080)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {r7}], 0x7, "149a8428d832f3"}) r8 = dup(r3) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r8, 0x10000000) 13:42:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(0xffffffffffffffff, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) [ 1146.300838] FAULT_INJECTION: forcing a failure. [ 1146.300838] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.308265] CPU: 1 PID: 7827 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1146.310317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.316818] Call Trace: [ 1146.317581] dump_stack+0x107/0x167 [ 1146.318635] should_fail.cold+0x5/0xa [ 1146.319765] ? create_object.isra.0+0x3a/0xa20 [ 1146.321106] should_failslab+0x5/0x20 [ 1146.322196] kmem_cache_alloc+0x5b/0x310 [ 1146.323382] create_object.isra.0+0x3a/0xa20 [ 1146.324723] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.326178] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1146.327691] ? alloc_skb_with_frags+0x92/0x570 [ 1146.329034] __alloc_skb+0xb1/0x5b0 [ 1146.330080] alloc_skb_with_frags+0x92/0x570 [ 1146.331363] sock_alloc_send_pskb+0x7af/0x930 [ 1146.332654] ? sk_alloc+0x350/0x350 [ 1146.333699] ? perf_trace_lock+0xac/0x490 [ 1146.334900] ? lock_chain_count+0x20/0x20 [ 1146.336143] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1146.337612] ? ip6_mtu+0x1bb/0x3d0 [ 1146.338641] ? lock_downgrade+0x6d0/0x6d0 [ 1146.339864] ? ip_frag_init+0x350/0x350 [ 1146.341039] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1146.342417] ? ip6_mtu+0x1e9/0x3d0 [ 1146.343440] ? ip6_setup_cork+0xfb7/0x1740 [ 1146.344697] ip6_make_skb+0x2de/0x4e0 [ 1146.345781] ? ip_frag_init+0x350/0x350 [ 1146.346938] ? ip_frag_init+0x350/0x350 [ 1146.348123] ? ip6_push_pending_frames+0xf0/0xf0 [ 1146.349521] ? ip6_dst_hoplimit+0x199/0x440 [ 1146.350766] ? lock_downgrade+0x6d0/0x6d0 [ 1146.352012] udpv6_sendmsg+0x20d3/0x2ad0 [ 1146.353210] ? ip_frag_init+0x350/0x350 [ 1146.354352] ? udp_v6_push_pending_frames+0x360/0x360 [ 1146.355885] ? __lockdep_reset_lock+0x180/0x180 [ 1146.357253] ? __lockdep_reset_lock+0x180/0x180 [ 1146.362637] ? lock_acquire+0x197/0x470 [ 1146.363778] ? find_held_lock+0x2c/0x110 [ 1146.364998] ? sock_has_perm+0x1ea/0x280 [ 1146.366212] ? __import_iovec+0x458/0x590 [ 1146.367414] ? udp_v6_push_pending_frames+0x360/0x360 [ 1146.368982] inet6_sendmsg+0x105/0x140 [ 1146.370097] ? inet6_compat_ioctl+0x320/0x320 [ 1146.371401] __sock_sendmsg+0xf2/0x190 [ 1146.372603] ____sys_sendmsg+0x334/0x870 [ 1146.373768] ? sock_write_iter+0x3d0/0x3d0 [ 1146.374986] ? do_recvmmsg+0x6d0/0x6d0 [ 1146.376102] ? __lock_acquire+0x1657/0x5b00 [ 1146.377396] ___sys_sendmsg+0xf3/0x170 [ 1146.378558] ? sendmsg_copy_msghdr+0x160/0x160 [ 1146.379864] ? vmacache_find+0x55/0x2a0 [ 1146.381052] ? __lockdep_reset_lock+0x180/0x180 [ 1146.382419] ? lock_acquire+0x197/0x470 [ 1146.383569] ? find_held_lock+0x2c/0x110 [ 1146.384777] ? __might_fault+0xd3/0x180 [ 1146.385951] ? lock_downgrade+0x6d0/0x6d0 [ 1146.387151] ? asm_exc_page_fault+0x1e/0x30 [ 1146.388398] __sys_sendmmsg+0x195/0x470 [ 1146.389538] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1146.390829] ? lock_downgrade+0x6d0/0x6d0 [ 1146.392026] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.393409] ? wait_for_completion_io+0x270/0x270 [ 1146.394885] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.396215] ? vfs_write+0x354/0xb10 [ 1146.397279] ? fput_many+0x2f/0x1a0 [ 1146.398364] ? ksys_write+0x1a9/0x260 [ 1146.399481] ? __ia32_sys_read+0xb0/0xb0 [ 1146.400648] __x64_sys_sendmmsg+0x99/0x100 [ 1146.401906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.407464] do_syscall_64+0x33/0x40 [ 1146.408530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.410007] RIP: 0033:0x7fbfd48dcb19 [ 1146.411084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.416519] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1146.418787] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 1146.420891] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1146.423010] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.425117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.427228] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 13:42:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0xf, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:33 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x0) dup(r4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r7, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2000, @fd_index=0x7, 0x200, 0x28a, 0xffff, 0x4, 0x1, {0x0, r8}}, 0x8) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r9 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r10=>0x0, &(0x7f0000000140)=<r11=>0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r12 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r9, 0x0) syz_io_uring_submit(r12, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0xc0480, 0x23456, {0x0, r13}}, 0x0) 13:42:33 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:33 executing program 1: r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x200000c, 0x11, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x2, &(0x7f0000000100)={0x77359400}, 0x1, 0x1}, 0x81) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r2, 0x5451) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xb1b, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000005c0)="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", 0x1000, 0x1, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) mmap$binder(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7ff) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x101000, 0x40, 0x10}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), r4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r6=>0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000001700)=ANY=[@ANYBLOB="3ca3194b", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x8014) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 13:42:33 executing program 2: pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c76657273696f6e3d3970323030302c667363616368652c756e616d653d2c63616368657470673d6170707261696d617369672c736d61636b6673726f6f743d63616368657461672c61707072616973652c66736d616769633d30783030303030303030303030303030302c6d61736b9affffff595f455845262c6f626a5f747970653d667363616368652c736d61636b66737472616e736d7574653d7472616e733d66642c2c00"/190]) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0xd426, 0x4) io_uring_enter(0xffffffffffffffff, 0x11b8, 0x7b01, 0x2, &(0x7f0000000000)={[0x401]}, 0x8) perf_event_open(&(0x7f0000000500)={0x6, 0x80, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810088f0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:42:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) [ 1146.583294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 13:42:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x14, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 39) dup2(r0, r1) 13:42:33 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x90, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, &(0x7f0000000600)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e24, 0x9, @mcast1, 0x7}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/148, 0x94}], 0x2, &(0x7f0000000400)=""/104, 0x68}, 0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000180), 0x10000, 0x620001) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000580)={'ip6gretap0\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r5, 0x8982, &(0x7f0000000680)) getsockname$unix(r0, &(0x7f0000000700)=@abs, &(0x7f0000000640)=0x6e) [ 1146.621433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.623757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.625978] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1146.657580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1146.686836] FAULT_INJECTION: forcing a failure. [ 1146.686836] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.689829] CPU: 0 PID: 7857 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1146.690888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1146.692111] Call Trace: [ 1146.692515] dump_stack+0x107/0x167 [ 1146.693055] should_fail.cold+0x5/0xa [ 1146.693625] ? create_object.isra.0+0x3a/0xa20 [ 1146.694345] should_failslab+0x5/0x20 [ 1146.698945] kmem_cache_alloc+0x5b/0x310 [ 1146.699569] create_object.isra.0+0x3a/0xa20 [ 1146.700206] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1146.700940] kmem_cache_alloc_node+0x169/0x330 [ 1146.701655] __alloc_skb+0x6d/0x5b0 [ 1146.702220] alloc_skb_with_frags+0x92/0x570 [ 1146.702885] sock_alloc_send_pskb+0x7af/0x930 [ 1146.703545] ? sk_alloc+0x350/0x350 [ 1146.704079] ? perf_trace_lock+0xac/0x490 [ 1146.704682] ? lock_chain_count+0x20/0x20 [ 1146.705337] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1146.706094] ? ip6_mtu+0x1bb/0x3d0 [ 1146.706637] ? lock_downgrade+0x6d0/0x6d0 [ 1146.707257] ? ip_frag_init+0x350/0x350 [ 1146.707839] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1146.708534] ? ip6_mtu+0x1e9/0x3d0 [ 1146.709048] ? ip6_setup_cork+0xfb7/0x1740 [ 1146.709707] ip6_make_skb+0x2de/0x4e0 [ 1146.710289] ? ip_frag_init+0x350/0x350 [ 1146.710915] ? ip_frag_init+0x350/0x350 [ 1146.711493] ? ip6_push_pending_frames+0xf0/0xf0 [ 1146.712202] ? ip6_dst_hoplimit+0x199/0x440 [ 1146.712791] ? lock_downgrade+0x6d0/0x6d0 [ 1146.713341] udpv6_sendmsg+0x20d3/0x2ad0 [ 1146.713839] ? ip_frag_init+0x350/0x350 [ 1146.714329] ? udp_v6_push_pending_frames+0x360/0x360 [ 1146.714970] ? __lockdep_reset_lock+0x180/0x180 [ 1146.715544] ? __lockdep_reset_lock+0x180/0x180 [ 1146.716121] ? lock_acquire+0x197/0x470 [ 1146.716605] ? find_held_lock+0x2c/0x110 [ 1146.717112] ? sock_has_perm+0x1ea/0x280 [ 1146.717634] ? __import_iovec+0x458/0x590 [ 1146.718166] ? udp_v6_push_pending_frames+0x360/0x360 [ 1146.718815] inet6_sendmsg+0x105/0x140 [ 1146.719291] ? inet6_compat_ioctl+0x320/0x320 [ 1146.719838] __sock_sendmsg+0xf2/0x190 [ 1146.720314] ____sys_sendmsg+0x334/0x870 [ 1146.720809] ? sock_write_iter+0x3d0/0x3d0 [ 1146.721368] ? do_recvmmsg+0x6d0/0x6d0 [ 1146.721846] ? __lock_acquire+0x1657/0x5b00 [ 1146.722415] ___sys_sendmsg+0xf3/0x170 [ 1146.723026] ? sendmsg_copy_msghdr+0x160/0x160 [ 1146.723686] ? vmacache_find+0x55/0x2a0 [ 1146.724297] ? __lockdep_reset_lock+0x180/0x180 [ 1146.724991] ? lock_acquire+0x197/0x470 [ 1146.725600] ? find_held_lock+0x2c/0x110 [ 1146.726201] ? __might_fault+0xd3/0x180 [ 1146.726790] ? lock_downgrade+0x6d0/0x6d0 [ 1146.727447] ? asm_exc_page_fault+0x1e/0x30 [ 1146.728102] __sys_sendmmsg+0x195/0x470 [ 1146.728711] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1146.729352] ? lock_downgrade+0x6d0/0x6d0 [ 1146.729977] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1146.730699] ? wait_for_completion_io+0x270/0x270 [ 1146.731444] ? rcu_read_lock_any_held+0x75/0xa0 [ 1146.732125] ? vfs_write+0x354/0xb10 [ 1146.732678] ? fput_many+0x2f/0x1a0 [ 1146.733212] ? ksys_write+0x1a9/0x260 [ 1146.733769] ? __ia32_sys_read+0xb0/0xb0 [ 1146.734410] __x64_sys_sendmmsg+0x99/0x100 [ 1146.735056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1146.735820] do_syscall_64+0x33/0x40 [ 1146.736377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1146.737026] RIP: 0033:0x7fbfd48dcb19 [ 1146.737528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1146.739786] RSP: 002b:00007fbfd1e52188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1146.740712] RAX: ffffffffffffffda RBX: 00007fbfd49eff60 RCX: 00007fbfd48dcb19 [ 1146.741627] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1146.742538] RBP: 00007fbfd1e521d0 R08: 0000000000000000 R09: 0000000000000000 [ 1146.743406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1146.744299] R13: 00007ffe760c114f R14: 00007fbfd1e52300 R15: 0000000000022000 13:42:48 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x400000000000070, 0x0) (fail_nth: 40) dup2(r0, r1) 13:42:48 executing program 7: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000540)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext, 0x1, 0x4, 0x1002, 0x5, 0x7, 0x0, 0xd395}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @dev}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @loopback}, 0x155, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) r2 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc244, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_config_ext={0x2, 0x6}, 0x1a400, 0x0, 0xfffffffd, 0x2, 0x0, 0x2, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x3) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @remote}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000080)={0x1, 0x5, 0x2}) fstatfs(r1, &(0x7f0000002e00)=""/4102) r3 = creat(&(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="00001b0000ce7c00cd97d723f5bd14b2e26fa8fe47306108513cf72a4f7f8945ae13f8c51ab684c8e62ebeef10818a8a57bfa1f641e5af396f4e2ca45aff190445d871fb52abcb68036e9988c175d7fb214e9934208d28305ed2fcca68b61e9c1c98fd525244", @ANYRESOCT=r3, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20004800) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffe, 0xf4, 0xfffffffffffffff9}) ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 13:42:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:48 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mmap(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0xe164, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054c00)={0xffff, [], 0x0, "336545c2542a4c"}) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = timerfd_create(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000001900)={0x0, 0x0, {0x0, @struct, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000900)={{}, 0x0, 0x4, @inherit={0x60, &(0x7f0000000140)=ANY=[@ANYBLOB]}, @devid=r6}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000240)={r6, "1d043b96fb91d3495e0b2e9d72672509"}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000040)={{r0}, {@val={r6}, @max}}) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) 13:42:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x508002, 0xa6}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x1, 0x0, '\x00', [{}, {0x7fd, 0x0, 0x400000000000000}], ['\x00']}) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x7f, 0x22, 0x5, 0x0, 0x60000, 0x101, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3c, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1200, 0x0, 0xfffffffd, 0x2, 0x5, 0x1000, 0x2a4, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x4, r5, 0x3) ioctl$AUTOFS_IOC_FAIL(r5, 0x9361, 0x6f03) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\a\x00\x00', @ANYRES16=r4, @ANYBLOB="020027bd7000fcdbdf253f0000002c005e80080003000400000008000600000800000800020089ff0000080007005301000008000300040000002c005e8018000100070000000000000000040000f9ffffff0700000008000500370000000800030006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40094) r6 = memfd_create(&(0x7f0000000140)='\x13\x97\x02\xd8 \xea\xc8\xf3\xad\xd9\x02\rp*\xb3\x9a\xbc\xc1\xb0\xba\x1eo\xfd1\xa3\x8e\x1c\x03Iq\xdcf{\xd8\xc1e\xcd\xc3`\x9b\x8b\xc9\xe2\xd2\xd5\xb9\xdd\x85w\xed\x92\xbf\xb6\x1c\xa7\x8b\x1f.\xd1\x16\xeb\f#\x83\xce\xa3\xcb`\xdb\\\x01\v!\xbb\x1aR\x11/\xef\xb0\xecL\xd3\x99{\x81\xc6N9\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x4040010, r3, 0xd6d0a000) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r7, r6) read(r7, &(0x7f00000003c0)=""/149, 0x95) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) 13:42:48 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) timer_delete(0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r1=>0x0) timer_settime(r1, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(0x0, &(0x7f00000002c0)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000203010300140000000000000300000108000540ed25795c"], 0x1c}}, 0x4000004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14880000", @ANYRES16=r3, @ANYBLOB="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"], 0x14}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=<r4=>0x0) timer_gettime(0x0, &(0x7f00000003c0)) timer_settime(r4, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={<r5=>0x0, <r6=>0x0}) timer_settime(r4, 0x1, &(0x7f0000000300)={{r5, r6+10000000}}, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="7601addc9b7b0b884139f55865d38066e68f4205000000000000008bc31f58bc69efb0aa61adcdaa918c00000000000000e810800fd165"]) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:42:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x16, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1161.125391] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. 13:42:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) 13:42:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x69, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x40b}]}, 0x30}}, 0x0) [ 1161.264929] ------------[ cut here ]------------ [ 1161.266665] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 1161.268909] WARNING: CPU: 0 PID: 7888 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 1161.281591] Modules linked in: [ 1161.282003] CPU: 0 PID: 7888 Comm: syz-executor.1 Not tainted 5.10.234 #1 [ 1161.282954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.284188] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 1161.284828] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 54 80 8c fd e8 4f 80 8c fd 8b 54 24 04 48 89 ee 48 c7 c7 80 c8 95 84 e8 2c 04 25 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 2d 78 b8 fd e9 97 fb ff ff 4c 89 [ 1161.287176] RSP: 0018:ffff88804a4c75c8 EFLAGS: 00010282 [ 1161.287892] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1161.288823] RDX: 0000000000040000 RSI: ffffffff8129ea93 RDI: ffffed1009498eab [ 1161.289830] RBP: ffff888016e50000 R08: 0000000000000001 R09: ffff88806ce37b0f [ 1161.290829] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016e50bc0 [ 1161.291778] R13: 0000000000400000 R14: ffff888016e51da0 R15: ffff888016e51d98 [ 1161.292806] FS: 00007fce9974e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1161.293913] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1161.294764] CR2: 00005575bd109fa0 CR3: 00000000370fa000 CR4: 0000000000350ef0 [ 1161.295718] Call Trace: [ 1161.296135] ? __warn+0xe2/0x1f0 [ 1161.296553] ? drv_bss_info_changed+0x554/0x5f0 [ 1161.297321] ? report_bug+0x1c1/0x210 [ 1161.297811] ? handle_bug+0x41/0x90 [ 1161.298344] ? exc_invalid_op+0x14/0x50 [ 1161.299442] ? asm_exc_invalid_op+0x12/0x20 [ 1161.300032] ? vprintk_func+0x93/0x140 [ 1161.300598] ? drv_bss_info_changed+0x554/0x5f0 [ 1161.301252] ? drv_bss_info_changed+0x554/0x5f0 [ 1161.301876] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 1161.302629] ieee80211_ocb_leave+0x1ed/0x340 [ 1161.304459] ? nl80211_parse_mon_options+0x45c/0x690 [ 1161.305250] __cfg80211_leave_ocb+0x1d6/0x570 [ 1161.305814] cfg80211_leave_ocb+0x4e/0x70 [ 1161.306423] cfg80211_change_iface+0x843/0xf90 [ 1161.307538] nl80211_set_interface+0x67c/0x8f0 [ 1161.309002] ? nl80211_notify_iface+0x180/0x180 [ 1161.310454] ? nl80211_pre_doit+0xa2/0x630 [ 1161.311838] genl_family_rcv_msg_doit+0x22d/0x330 [ 1161.313301] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1161.323824] FAULT_INJECTION: forcing a failure. [ 1161.323824] name failslab, interval 1, probability 0, space 0, times 0 [ 1161.327110] ? cap_capable+0x1cd/0x230 [ 1161.328506] CPU: 1 PID: 7900 Comm: syz-executor.0 Not tainted 5.10.234 #1 [ 1161.328519] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1161.329121] ? ns_capable+0xe2/0x110 [ 1161.329840] Call Trace: [ 1161.329866] dump_stack+0x107/0x167 [ 1161.331118] genl_rcv_msg+0x33c/0x5a0 [ 1161.331417] should_fail.cold+0x5/0xa [ 1161.331734] ? genl_get_cmd+0x480/0x480 [ 1161.332167] ? __alloc_skb+0x6d/0x5b0 [ 1161.332184] should_failslab+0x5/0x20 [ 1161.332202] kmem_cache_alloc_node+0x55/0x330 [ 1161.332707] ? nl80211_notify_iface+0x180/0x180 [ 1161.333161] ? __lock_acquire+0x1657/0x5b00 [ 1161.333183] __alloc_skb+0x6d/0x5b0 [ 1161.333740] ? lock_release+0x680/0x680 [ 1161.334150] alloc_skb_with_frags+0x92/0x570 [ 1161.334172] sock_alloc_send_pskb+0x7af/0x930 [ 1161.334640] ? __lockdep_reset_lock+0x180/0x180 [ 1161.335200] ? sk_alloc+0x350/0x350 [ 1161.335218] ? perf_trace_lock+0xac/0x490 [ 1161.335896] netlink_rcv_skb+0x14b/0x430 [ 1161.336367] ? lock_chain_count+0x20/0x20 [ 1161.336394] __ip6_append_data.isra.0+0x1c12/0x3a70 [ 1161.336914] ? genl_get_cmd+0x480/0x480 [ 1161.337347] ? ip6_mtu+0x1bb/0x3d0 [ 1161.337366] ? lock_downgrade+0x6d0/0x6d0 [ 1161.337945] ? netlink_ack+0xab0/0xab0 [ 1161.338431] ? ip_frag_init+0x350/0x350 [ 1161.338456] ? ip6_sk_dst_lookup_flow+0x6e0/0x6e0 [ 1161.339138] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1161.339496] ? ip6_mtu+0x1e9/0x3d0 [ 1161.340118] ? is_vmalloc_addr+0x7b/0xb0 [ 1161.340532] ? ip6_setup_cork+0xfb7/0x1740 [ 1161.341138] genl_rcv+0x24/0x40 [ 1161.341665] ip6_make_skb+0x2de/0x4e0 [ 1161.341677] ? ip_frag_init+0x350/0x350 [ 1161.341693] ? ip_frag_init+0x350/0x350 [ 1161.341706] ? ip6_push_pending_frames+0xf0/0xf0 [ 1161.341724] ? ip6_dst_hoplimit+0x199/0x440 [ 1161.341736] ? lock_downgrade+0x6d0/0x6d0 [ 1161.341760] udpv6_sendmsg+0x20d3/0x2ad0 [ 1161.341777] ? ip_frag_init+0x350/0x350 [ 1161.341796] ? udp_v6_push_pending_frames+0x360/0x360 [ 1161.341808] ? __lockdep_reset_lock+0x180/0x180 [ 1161.341828] ? __lockdep_reset_lock+0x180/0x180 [ 1161.341845] ? lock_acquire+0x197/0x470 [ 1161.341856] ? find_held_lock+0x2c/0x110 [ 1161.341879] ? sock_has_perm+0x1ea/0x280 [ 1161.341909] ? __import_iovec+0x458/0x590 [ 1161.342492] netlink_unicast+0x549/0x7f0 [ 1161.342849] ? udp_v6_push_pending_frames+0x360/0x360 [ 1161.343441] ? netlink_attachskb+0x870/0x870 [ 1161.343863] inet6_sendmsg+0x105/0x140 [ 1161.344423] netlink_sendmsg+0x90f/0xdf0 [ 1161.344910] ? inet6_compat_ioctl+0x320/0x320 [ 1161.345562] ? netlink_unicast+0x7f0/0x7f0 [ 1161.345941] __sock_sendmsg+0xf2/0x190 [ 1161.345956] ____sys_sendmsg+0x334/0x870 [ 1161.346559] ? netlink_unicast+0x7f0/0x7f0 [ 1161.347015] ? sock_write_iter+0x3d0/0x3d0 [ 1161.347486] __sock_sendmsg+0x154/0x190 [ 1161.347858] ? do_recvmmsg+0x6d0/0x6d0 [ 1161.347873] ? __lock_acquire+0x1657/0x5b00 [ 1161.348448] __sys_sendto+0x21c/0x320 [ 1161.348885] ___sys_sendmsg+0xf3/0x170 [ 1161.349559] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1161.350024] ? sendmsg_copy_msghdr+0x160/0x160 [ 1161.350567] ? kmem_cache_free+0xa7/0x2d0 [ 1161.351035] ? vmacache_find+0x55/0x2a0 [ 1161.351050] ? __lockdep_reset_lock+0x180/0x180 [ 1161.351067] ? lock_acquire+0x197/0x470 [ 1161.351612] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1161.352149] ? find_held_lock+0x2c/0x110 [ 1161.352165] ? __might_fault+0xd3/0x180 [ 1161.352180] ? lock_downgrade+0x6d0/0x6d0 [ 1161.352787] ? call_rcu+0x435/0x9c0 [ 1161.353334] ? asm_exc_page_fault+0x1e/0x30 [ 1161.353360] __sys_sendmmsg+0x195/0x470 [ 1161.353898] ? trace_hardirqs_on+0x5b/0x180 [ 1161.354367] ? __ia32_sys_sendmsg+0xb0/0xb0 [ 1161.354380] ? lock_downgrade+0x6d0/0x6d0 [ 1161.354414] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1161.354961] ? _cond_resched+0x12/0x80 [ 1161.355424] ? wait_for_completion_io+0x270/0x270 [ 1161.355439] ? rcu_read_lock_any_held+0x75/0xa0 [ 1161.355457] ? vfs_write+0x354/0xb10 [ 1161.356115] __x64_sys_sendto+0xdd/0x1b0 [ 1161.356624] ? fput_many+0x2f/0x1a0 [ 1161.357258] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.357643] ? ksys_write+0x1a9/0x260 [ 1161.358227] do_syscall_64+0x33/0x40 [ 1161.358694] ? __ia32_sys_read+0xb0/0xb0 [ 1161.359283] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.359676] __x64_sys_sendmmsg+0x99/0x100 [ 1161.360225] RIP: 0033:0x7fce9c18b8ac [ 1161.360730] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1161.361310] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1161.361706] do_syscall_64+0x33/0x40 [ 1161.362192] RSP: 002b:00007fce9974cf80 EFLAGS: 00000293 [ 1161.362694] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1161.363222] ORIG_RAX: 000000000000002c [ 1161.363666] RIP: 0033:0x7fbfd48dcb19 [ 1161.363682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1161.363688] RSP: 002b:00007fbfd1e31188 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1161.363707] RAX: ffffffffffffffda RBX: 00007fbfd49f0020 RCX: 00007fbfd48dcb19 [ 1161.364309] RAX: ffffffffffffffda RBX: 00007fce9974d0f0 RCX: 00007fce9c18b8ac [ 1161.364826] RDX: 0400000000000070 RSI: 0000000020004d00 RDI: 0000000000000004 [ 1161.364838] RBP: 00007fbfd1e311d0 R08: 0000000000000000 R09: 0000000000000000 [ 1161.365375] RDX: 0000000000000024 RSI: 00007fce9974d140 RDI: 0000000000000007 [ 1161.365838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1161.365853] R13: 00007ffe760c114f R14: 00007fbfd1e31300 R15: 0000000000022000 [ 1161.366456] RBP: 0000000000000000 R08: 00007fce9974cfd4 R09: 000000000000000c [ 1161.396715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1161.397620] R13: 00007fce9974d140 R14: 0000000000000007 R15: 0000000000000000 [ 1161.398694] irq event stamp: 8765 [ 1161.399239] hardirqs last enabled at (8785): [<ffffffff84000d02>] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1161.400511] hardirqs last disabled at (8804): [<ffffffff83e657fb>] sysvec_apic_timer_interrupt+0xb/0xa0 [ 1161.401754] softirqs last enabled at (8046): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20 [ 1161.402969] softirqs last disabled at (8021): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20 [ 1161.404199] ---[ end trace 68187026dfd4be67 ]--- 13:42:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x7, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 13:42:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, 0x0, 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) 13:42:48 executing program 5: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='maps\x00') open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, 0xffffffffffffffff, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="696c6530000000000101008000000200a8a802f71fb2dd542147844394152225be9f16806f079db895445cdd5e1b0f03a8d83adfa493b48b591d280000fe4e25cde587cbc41df26e22164b92cb581cef15fa244157737a5ed8a21b84173f2febd4d5d5b8825f25a70558802180e62c3d4aeb8c66ab176e7c82db13a753191bad62bb9963d34f22c4ffe5386334c1c62cbeb5d07e7fac0000d25b1b211c"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x4c0602, 0x1}, &(0x7f00000000c0)='./file1\x00', 0x18, 0x0, 0x12345}, 0x7) VM DIAGNOSIS: 13:42:48 Registers: info registers vcpu 0 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822dde81 RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff88804a4c6f68 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000031 R13=0000000000000031 R14=ffffffff879f3100 R15=dffffc0000000000 RIP=ffffffff822dded8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fce9974e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005575bd109fa0 CR3=00000000370fa000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000000000ff00000000 XMM01=384c4e2467736d646e65730053534249 XMM02=00000000000000000000ff0000000000 XMM03=00007f0f5ad897c800007f0f5ad897c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff888009278948 RBX=0000000000000007 RCX=ffff888014f9f510 RDX=0000000000000004 RSI=ffffffff84ff9a20 RDI=ffff888009278948 RBP=1ffff110029f3e9a RSP=ffff888014f9f4c0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff84ff9a20 R13=0000000000000001 R14=ffff888009278940 R15=ffff888009278000 RIP=ffffffff812747fd RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fad70a52900 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000000010c CR3=0000000009dbc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffffffff XMM01=30306234386136303638616663356134 XMM02=38303062343861363036386166633561 XMM03=2f6c616e72756f6a2f676f6c2f6e7572 XMM04=f60e00f9984e606c00000000003e5650 XMM05=d3fdd5f48436fbd700000000000aeab0 XMM06=643552aa1875a69700000000000ae968 XMM07=00000000000000000000000000000000 XMM08=44495f474f4c5359530069253d595449 XMM09=00000000000000000000000000000000 XMM10=20000000000000002000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000